Bug Bounty - GitBook
الذهاب إلى القناة على Telegram
Everything 4 bug bounty https://t.me/GiftWay32robot?start=_tgr_HwZ24DI5MWJk
إظهار المزيد7 473
المشتركون
لا توجد بيانات24 ساعات
+387 أيام
+18430 أيام
أرشيف المشاركات
7 473
Sometimes we make a GET request to a site like site.com and it shows us an HTML page
But if we change the method of this request, for example, to POST or other methods, what will happen?
This move can return different reactions from the site, it may give a 405 error and not accept the new method, or it may get an error, in which case the story becomes interesting.
In some frameworks, especially Laravel, if the debug mode is active and the site gets an error, all the site information will be returned and may even lead to RCE.
In general, programmer should filter the methods for site's routes,
so(my tip:) you can use these problems
and this work named as verb tampering
7 473
32 Advance Search Engine For Hacker
Sat, 12 Oct 2024 06:01:56 GMT
https://medium.com/p/ba7fe4270f05
7 473
Effective Domain Management for Bug Bounty Programs Using SubScope
Fri, 11 Oct 2024 15:27:25 GMT
https://medium.com/p/f74b7a0db428
7 473
As you know, HTTP is mounted on TCP and sends data through it. Actually, the http protocol is nothing but a bunch of rules on a few string lines. Most of its tasks are implemented by Tcp and we think that Http is playing its role well.
What are the two roles played by TCP?
- Ensuring data delivery: In Http, we get a guarantee from the protocol that the data will be delivered correctly and safely.
- Correct order of data: In the network, packets may be received asynchronously and in an order other than the order they were sent, but TCP guarantees that the data at the destination is arranged and reconstructed in the order it was sent. HTTP itself uses this feature and does not need to manage data order.
In general, many of the features we know from HTTP are actually implemented by TCP, and HTTP acts more as a layer to define the rules I mentioned above for the exchange of this data and the type of content sent.
