Bug Bounty
Open in Telegram
Bugbounty Resources β’ Tips β’ Security Zines β’ Writeups β’ Vulnerability Update β’ Notes β’ Mindmaps β’ Cheatsheets β’ Checklists β’ Article / Blogs β’ PDFs β’ ebooks β’
Show more9 446
Subscribers
No data24 hours
-37 days
-6030 days
Posts Archive
9 446
Cloud - AWS Pentest π©
Covers:
β’ Training π
β’ Tools π§
β’ AWS - Patterns π
β’ URL Services π
β’ Access Key ID & Secret π
β’ AWS - Metadata SSRF π
β’ Method for Elastic Cloud Compute (EC2) π₯
β’ Method for Container Service (Fargate) π³
β’ AWS API calls that return credentials π
β’ AWS - Shadow Admin π€
β’ Admin equivalent permission π
β’ AWS - Gaining AWS Console Access via API Keys π
β’ AWS - Enumerate IAM permissions π
β’ AWS - Mount EBS volume to EC2 Linux πΎ
β’ AWS - Copy EC2 using AMI Image πΌ
β’ AWS - Instance Connect - Push an SSH key to EC2 instance π
β’ AWS - Lambda - Extract function's code π§©
β’ AWS - SSM - Command execution π»
β’ AWS - Golden SAML Attack βοΈ
β’ AWS - Shadow Copy attack π
β’ Disable CloudTrail π«
β’ Cover tracks by obfuscating Cloudtrail logs and Guard Duty π΅οΈββοΈ
β’ DynamoDB Security checks π‘
β’ AWSome Pentesting Cheatsheet π
β’ References π
9 446
π Curious about JSON Web Tokens (JWTs)? Our in-depth article covers it all:
π Learn how they're structured
πΌ Bypassing Methods
π Best practices for secure usage
Check it out:
https://vulncure.com/blog/understanding-json-web-tokens-jwts/
9 446
πΈ Web Cache Poisoning π·
Discover how attackers can manipulate caching systems to serve malicious content and what you can do to protect your website from this dangerous exploit. Learn more in our latest blog post:
https://vulncure.com/blog/web-cache-poisoning/
9 446
π Exciting News! π
Introducing PentestPro course! π‘
Kick-start your career as a Penetration Tester with:
π
45 Days of Learning
π¨βπ» Hands-on Practice
π Examination Test
π Recognizable Certificate
π§ 75% Practical, 25% Theory
Learn More : https://hacklearners.com/best-ethical-hacking-pentesting-course/
9 446
Find xss with this automation of the following work :
1. subfinder -d indeed.com -o indeed.txt //Find Subdomains
2. httpx -l subdomains.txt -o httpx.txt // Live Subdomains
3. echo "indeed.com" | gau --threads 5 >> Enpoints.txt // Find Endpoints
4. cat httpx.txt | katana -jc >> Enpoints.txt // Find More Endpoints
5. cat Enpoints.txt | uro >> Endpoints_F.txt // Remove Duplicates
6. cat Endpoints_F.txt | gf xss >> XSS.txt // Filter Endpoints for XSS
7. cat XSS.txt | Gxss -p khXSS -o XSS_Ref.txt // Find reflected Parameters
8. dalfox file XSS_Ref.txt -o Vulnerable_XSS.txt // Find XSS
Script : https://github.com/dirtycoder0124/xss
9 446
Hey π€ fellow hackers hope you all are doing good,
We are happy π to announce you a free cyber security summer βοΈ Bootcamp.
Enroll for Free: https://hacklearners.com/bootcamp
#hacklearners #cybersecurity
9 446
π₯ 100 Web Vulnerabilities, categorized into various types : π
β‘οΈ Injection Vulnerabilities:
1. SQL Injection (SQLi)
2. Cross-Site Scripting (XSS)
3. Cross-Site Request Forgery (CSRF)
4. Remote Code Execution (RCE)
5. Command Injection
6. XML Injection
7. LDAP Injection
8. XPath Injection
9. HTML Injection
10. Server-Side Includes (SSI) Injection
11. OS Command Injection
12. Blind SQL Injection
13. Server-Side Template Injection (SSTI)
β‘οΈ Broken Authentication and Session Management:
14. Session Fixation
15. Brute Force Attack
16. Session Hijacking
17. Password Cracking
18. Weak Password Storage
19. Insecure Authentication
20. Cookie Theft
21. Credential Reuse
β‘οΈ Sensitive Data Exposure:
22. Inadequate Encryption
23. Insecure Direct Object References (IDOR)
24. Data Leakage
25. Unencrypted Data Storage
26. Missing Security Headers
27. Insecure File Handling
β‘οΈ Security Misconfiguration:
28. Default Passwords
29. Directory Listing
30. Unprotected API Endpoints
31. Open Ports and Services
32. Improper Access Controls
33. Information Disclosure
34. Unpatched Software
35. Misconfigured CORS
36. HTTP Security Headers Misconfiguration
β‘οΈ XML-Related Vulnerabilities:
37. XML External Entity (XXE) Injection
38. XML Entity Expansion (XEE)
39. XML Bomb
β‘οΈ Broken Access Control:
40. Inadequate Authorization
41. Privilege Escalation
42. Insecure Direct Object References
43. Forceful Browsing
44. Missing Function-Level Access Control
β‘οΈ Insecure Deserialization:
45. Remote Code Execution via Deserialization
46. Data Tampering
47. Object Injection
β‘οΈ API Security Issues:
48. Insecure API Endpoints
49. API Key Exposure
50. Lack of Rate Limiting
51. Inadequate Input Validation
β‘οΈ Insecure Communication:
52. Man-in-the-Middle (MITM) Attack
53. Insufficient Transport Layer Security
54. Insecure SSL/TLS Configuration
55. Insecure Communication Protocols
β‘οΈ Client-Side Vulnerabilities:
56. DOM-based XSS
57. Insecure Cross-Origin Communication
58. Browser Cache Poisoning
59. Clickjacking
60. HTML5 Security Issues
β‘οΈ Denial of Service (DoS):
61. Distributed Denial of Service (DDoS)
62. Application Layer DoS
63. Resource Exhaustion
64. Slowloris Attack
65. XML Denial of Service
β‘οΈ Other Web Vulnerabilities:
66. Server-Side Request Forgery (SSRF)
67. HTTP Parameter Pollution (HPP)
68. Insecure Redirects and Forwards
69. File Inclusion Vulnerabilities
70. Security Header Bypass
71. Clickjacking
72. Inadequate Session Timeout
73. Insufficient Logging and Monitoring
74. Business Logic Vulnerabilities
75. API Abuse
β‘οΈ Mobile Web Vulnerabilities:
76. Insecure Data Storage on Mobile Devices
77. Insecure Data Transmission on Mobile Devices
78. Insecure Mobile API Endpoints
79. Mobile App Reverse Engineering
β‘οΈ IoT Web Vulnerabilities:
80. Insecure IoT Device Management
81. Weak Authentication on IoT Devices
82. IoT Device Vulnerabilities
β‘οΈ Web of Things (WoT) Vulnerabilities:
83. Unauthorized Access to Smart Homes
84. IoT Data Privacy Issues
β‘οΈ Authentication Bypass:
85. Insecure "Remember Me" Functionality
86. CAPTCHA Bypass
β‘οΈ Server-Side Request Forgery (SSRF):
87. Blind SSR
88. Time-Based Blind SSRF
β‘οΈ Content Spoofing:
89. MIME Sniffing
90. X-Content-Type-Options Bypass
91. Content Security Policy (CSP) Bypass
β‘οΈ Business Logic Flaws:
92. Inconsistent Validation
93. Race Conditions
94. Order Processing Vulnerabilities
95. Price Manipulation
96. Account Enumeration
97. User-Based Flaws
β‘οΈ Zero-Day Vulnerabilities:
98. Unknown Vulnerabilities
99. Unpatched Vulnerabilities
100. Day-Zero Exploits
9 446
π― What types of companies do you like to hunt on the most? π
-> https://x.com/vulncure/status/1760355776479338768?s=20
9 446
Reverse Engineering For Everyone!
https://0xinfection.github.io/reversing/
@bugbountyresources
@bugbountychats
