Exploiting: Server Side Template Injection


🔴To present data dynamically from emails or webpages we use templates and unsafely use of it leads to server exploits like RCE and many more....Read more

#write_up #SSTI
@singularity_info

🟥 Bug Bounty Automation

▫️Bash Script to perform bug bounty automation
▫️Github : https://github.com/Retr0-45809/Bug-Bounty-Automation

#tool #bug_bounty
@singularity_info

Recon Everything

🔴Ideally you’re going to be wanting to choose a program that has a wide scope. You’re also going to be wanting to look for a bounty program that has a wider range of vulnerabilities within scope....Read more

#bug_bounty #Recon #write_up
@singularity_info

🟥 CVE-2022-22965

Spring4shell :
⚠️ A python implementation of CVE-2022-22965 that provides a prompt to the user in the style of an ssh session.

▫️github : https://github.com/p1ckzi/CVE-2022-22965

▫️Research :
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22965

#tool #cve
@singularity_info

Bug Bounty Hunting Tips #2 —Target their mobile apps (Android Edition)


🔴If you read through the disclosed bug bounty reports on platforms such as hackerone it is clear that most bug bounty hunters are targeting web applications and neglecting the mobile application landscape. This is an opportunity that you can take advantage of....Read more

#write_up #bug_bounty #android
@singularity_info

🟥 3 tricks to bypass Cloudflare WAF in file upload

▫️Magic of Semicolon
▫️Magic of Transfer-Encoding
▫️Magic of Prepended Large String
Read more

#file_uoload #write_up
@singularity_info

🟥 Androguard

🔴 Reverse engineering and pentesting of Android applications.

◻️Features:
▫️ DEX, ODEX
▫️ APK
▫️ Android's binary xml
▫️ Android resources
▫️ Disassemble DEX/ODEX bytecodes
▫️ Basic Decompiler for DEX/ODEX files

Github: https://github.com/androguard/androguard

#tool #android
@singularity_info

Subdomain takeover with Shopify, Heroku and ...

🔴 Few time on the internet and boom, i found a bunch of critical bugs.
That was not a typical bugs. And that was not a typical company. It was electric skateboard company from TOP 3 in the world. That company was not happy to disclose their official name....Read more

#write_up #subdomain_takeover
@singularity_info

Papaya

🔴 Papaya is a tool to test if a MongoDB/NoSQL-based web application is vulnerable to a basic NoSQL injection on POST login forms, including tests for password and username extraction.

github: https://github.com/eversinc33/Papaya

#nosql #tool #MongoDB
@singularity_info

Intro to SSRF

🔴 As a company grows, it becomes increasingly difficult to secure the hundreds and thousands of machines on the network....Read more

#write_up #SSRF
@singularity_info

PII Disclosure of Apple Users ($10k)

🔴 When you come across a big Asset like Apple or Microsoft, you have to know from where to start and what to check. For me I was looking for a target that is considered an important asset to Apple and contains valuable private information so the bounty will be worthy...Read more

#PII_disclosure #write_up
@singularity_info

Story of a weird vulnerability I found on Facebook

🔴 While doing some subdomains enumeration, I found a subdomain which instantly raised my interest....Read more

#write_up #bug_bounty
@singularity_info