Bug bounty Tips

trufflehog git https://github.com/trufflesecurity/test_keys

Trufflehog

https://github.com/trufflesecurity/trufflehog

Trufflehog is specifically designed for finding sensitive information, such as API keys, passwords, and other secrets, within code repositories. It scans code for high-entropy strings and known secret patterns. Bug bounty hunters can use Trufflehog to scan code repositories for unintentional secrets or sensitive information leaks. For example, running Trufflehog on a Git repository URL can reveal accidentally committed secrets. To scan a Git repository for secrets, use: trufflehog with the above upload link

Wordpress Cve Exploit Poc 1.Jenkins <= 2.441 & <= LTS 2.426.2 PoC and scanner RCE https://github.com/xaitax/CVE-2024-23897 2.Atlassian Confluence, a critical RCE https://github.com/Chocapikk/CVE-2023-22527 3.Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution https://github.com/Chocapikk/CVE-2023-6553 4.Unauthenticated Remote Code Execution – Bricks <= 1.9.6 https://github.com/Chocapikk/CVE-2024-25600 5.WordPress Royal Elementor Addons and Templates Exploit https://github.com/Chocapikk/CVE-2023-5360 6.Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE https://github.com/leoanggal1/CVE-2023-3452-PoC 7.Broken Access Control vulnerability in WordPress Elementor Pro Plugin https://github.com/B1GJ/elementor-pro-exploit 8.Unauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin) https://github.com/r3nt0n/CVE-2023-23488-PoC 9.WordPress Plugin DZS Zoomsounds 6.45 - Arbitrary File Read (Unauthenticated) https://github.com/UrielYochpaz/Exploit-WordPress-Plugin-DZS-Zoomsounds More Comming Soon 🥹

📢Use This Extensions, it will help you to Extract all domains From any website. 🔸Link Extractor: https://link-extractor.cssnr.com 🔸Link Gopher: https://github.com/az0/linkgopher

portmap is a fast portscan tool, uses shodan public date for port scan github.com/rix4uni/portmap #bugbountytips #bugbountytip

Everyone is good boys and girls, let's see how many total reaction we get today

If you guys show some intrest then I will also put more efforts to give more tips and tricks right

We are 800 now and still you guys are not giving any reactions😔