Web Application Security Mindmap
https://bugbountyguide.org/bug-bounty/mindmaps-cheatsheets/#Web%20Application%20Security%20Mindmap
#bugbounty #infosec
https://bugbountyguide.org/bug-bounty/mindmaps-cheatsheets/#Web%20Application%20Security%20Mindmap
#bugbounty #infosec
👍8🔥2
An interesting trick: you can bypass a WAF during a XSS attack on ASP(dot)NET/IIS technology by using a HTTP parameter pollution attack.
#BugBounty #BugBountyTips #InfoSec
(Credit to Acunetix)
Full article: https://acunetix.com/blog/whitepaper-http-parameter-pollution/
#BugBounty #BugBountyTips #InfoSec
(Credit to Acunetix)
Full article: https://acunetix.com/blog/whitepaper-http-parameter-pollution/
❤13🔥4
Tryhackme voucher at a cheap price.
At Rs 155 / 2.2$ for a month
This guy is providing @Infosec_lover | Verified by me
At Rs 155 / 2.2$ for a month
This guy is providing @Infosec_lover | Verified by me
❤9
& All Hacking - Offensive security, bug bounty Ebooks Available DM this guy @Infosec_lover
👍9
4 🙌 Ways to become a bug bounty hunter
1️⃣ Clear your web fundamentals first
2️⃣ practice this on Tryhackme and any other place that you know well
3️⃣ Complete portswigger labs
4️⃣ Last but not the least: Read bug bounty reports as much as possible, This will give you a good understanding of how the web actually works and you would be able to think like a bug hunter
1️⃣ Clear your web fundamentals first
2️⃣ practice this on Tryhackme and any other place that you know well
3️⃣ Complete portswigger labs
4️⃣ Last but not the least: Read bug bounty reports as much as possible, This will give you a good understanding of how the web actually works and you would be able to think like a bug hunter
❤38👍10🔥5😁2
If an unsafe logger is used, an attacker can inject code and execute arbitrary commands, even if the page being accessed is a 404 page.
Always test HTTP request headers to make sure the application is handling the headers correctly.
Always test HTTP request headers to make sure the application is handling the headers correctly.
👍17🔥4
Use These Instead Of Alert and Prompt
In XSS Payload
Example : alert(1) can be encoded as
This leads to bypass waf or blacklisted words at input field
XSS Payload can be manipulated as
<img/src/onerror=Put The Encoded Js here to prompt the alert>
Check This Out : http://jsfuck.com
#bugbounty #Infosec #hacking #cybersecurity
In XSS Payload
Example : alert(1) can be encoded as
This leads to bypass waf or blacklisted words at input field
XSS Payload can be manipulated as
<img/src/onerror=Put The Encoded Js here to prompt the alert>
Check This Out : http://jsfuck.com
#bugbounty #Infosec #hacking #cybersecurity
Jsfuck
JSFuck - Write any JavaScript with 6 Characters: []()!+
JSFuck is an esoteric and educational programming style based on the atomic parts of JavaScript. It uses only six different characters to execute code.
❤16😱5👍2
Thank you to everyone who has supported me
Below are x10 free TryHackMe T-shirts and x10 free TryHackMe Baseball Hat swags vouchers
TryHackMe T-Shirt: yVL63k7vuS
TryHackMe T-Shirt: FVwalIK7fB
TryHackMe T-Shirt: bf5Mqqcg8v
TryHackMe T-Shirt: ShG1kGVVz9
TryHackMe T-Shirt: IPkz4ZrpKt
TryHackMe T-Shirt: lhwmkd4LoT
TryHackMe T-Shirt: Nc9SbpBSof
TryHackMe T-Shirt: PGUfOjX2Eh
TryHackMe T-Shirt: 8JzWreyv6I
TryHackMe T-Shirt: ThDkJUd6ax
TryHackMe Baseball Hat: miQKcybjxx
TryHackMe Baseball Hat: pqs71HkZyK
TryHackMe Baseball Hat: 7AxdZSQ9dw
TryHackMe Baseball Hat: BUnGQFfuNs
TryHackMe Baseball Hat: Jz7uai3jQa
TryHackMe Baseball Hat: HcH9topxPg
TryHackMe Baseball Hat: aBhrI4gpzG
TryHackMe Baseball Hat: HbpIBzqb2I
TryHackMe Baseball Hat: WHm4iwcYp2
TryHackMe Baseball Hat: aDpwawb7u2
Below are x10 free TryHackMe T-shirts and x10 free TryHackMe Baseball Hat swags vouchers
TryHackMe T-Shirt: yVL63k7vuS
TryHackMe T-Shirt: FVwalIK7fB
TryHackMe T-Shirt: bf5Mqqcg8v
TryHackMe T-Shirt: ShG1kGVVz9
TryHackMe T-Shirt: IPkz4ZrpKt
TryHackMe T-Shirt: lhwmkd4LoT
TryHackMe T-Shirt: Nc9SbpBSof
TryHackMe T-Shirt: PGUfOjX2Eh
TryHackMe T-Shirt: 8JzWreyv6I
TryHackMe T-Shirt: ThDkJUd6ax
TryHackMe Baseball Hat: miQKcybjxx
TryHackMe Baseball Hat: pqs71HkZyK
TryHackMe Baseball Hat: 7AxdZSQ9dw
TryHackMe Baseball Hat: BUnGQFfuNs
TryHackMe Baseball Hat: Jz7uai3jQa
TryHackMe Baseball Hat: HcH9topxPg
TryHackMe Baseball Hat: aBhrI4gpzG
TryHackMe Baseball Hat: HbpIBzqb2I
TryHackMe Baseball Hat: WHm4iwcYp2
TryHackMe Baseball Hat: aDpwawb7u2
👍27❤9🔥8🤔5😢4👏2👌2
Happy happy happy new year 🥳
May the new year 2023 bring joy, prosperity, and all the things you wish for.
May the new year 2023 bring joy, prosperity, and all the things you wish for.
❤29