Bugbounty Tips

🚨 Introducing XSS-Finder: Automated XSS & Reflected Parameter Finder Tool! 🚨 Hey everyone! I'm excited to share a powerful new tool I've developed for penetration testing and web application security enthusiasts – XSS-Finder. 🎯 🔍 What does it do? Automates the process of detecting XSS vulnerabilities and reflected input parameters on websites. Crawls domains to gather URLs and identifies GET parameters that are vulnerable to XSS attacks. Saves the crawled URLs in a text file and checks them for potential XSS vulnerabilities. Provides a detailed report with the found vulnerabilities to help you secure your web applications. 💻 Features: 🚀 Fast and efficient scanning. 🧑‍💻 Works with both GET parameters and reflected XSS payloads. 🗂 Saves results and crawled URLs for review. 🌐 Supports both public and private domains. 🔧 How to use it? Clone the repo and run the tool in just a few easy steps! Supports Python 3.x, and all dependencies are listed in the requirements.txt. 🔗 Get started: Clone the repository: git clone https://github.com/rootDR/xss-finder.git Install dependencies: pip install -r requirements.txt Run the script: python xss-finder.py -t http://example.com 📝 Check it out here: XSS-Finder GitHub Repository For more join to channel : https://t.me/rootdr_research #web #bugbounty #tools #pentest

سلام دوستان یک ابزار جهت شناسایی Reflected XSS ها در گیتهابم قرار دادم که در پروسه هانت و Pentest خودتون میتونید ازش استفاده کنید. با اشتراک گذاری و star دادن از پروژه میتونید حمایت کنید، همچنین اگر در زمان استفاده به مشکلی برخوردید یا پیشنهادی داشتید میتونید issue رو در گیتهاب ثبت کنید یا بهم پیغام بدید. happy hunting!

دسترسی به میلیون ها حساب کاربری! رایتاپ آسیب پذیری که در پست قبل به صورت خلاصه بهش پرداختیم در یوتیوب آپلود شد، آسیب پذیری که منجر به دسترسی من به میلیون ها حساب کاربری شد و در نهایت به 7.5 هزاردلار بانتی ختم شد. اینستاگرام پست: https://www.instagram.com/reel/DDZyJ96i2V8/?igsh=MTRvMm1mMDI2eGs0Mw== چنل یوتیوب: pentesterland لینک مستقیم: https://youtu.be/cmOIuK_0GtU منتظر سوالات و نظرات شما هستیم❤️🙏 #باگ_بانتی

CVE-2024-10914 : D-Link Network Attached Storage 'name' DNS-3$versions - Unauthenticated OS Command Injection (RCE) POC : https://github.com/redspy-sec/D-Link @APTIRAN

(((((=

🚀 New Update for Automated Reflected Parameter Finder Tool! 🔍 We've just made the tool even more user-friendly and powerful for penetration testers and security researchers! 🎯 Key Updates: 🏷 New -s Switch: Now you can specify the -s flag to include subdomains in the crawl. If this flag is omitted, the tool will only crawl the main domain — giving you better control over your scans. 🗂 Automatic File Organization: The tool now creates a dedicated folder for each target domain. All crawled pages and discovered parameters are saved neatly in the respective folder. ⚡️ Performance Boost: We've optimized the crawling speed to ensure faster results and a smoother experience while scanning for reflected parameters. 👁 Real-Time Feedback: See results as soon as a reflected parameter is found, reducing wait times and improving user experience. 💻 Check out the updated tool on GitHub and start scanning with even more precision! 🔥 How to Use: -t (required): The target domain URL to crawl (e.g., https://example.com) -s: Include subdomains in the crawl. If this flag is omitted, only the main domain is crawled. 🛠 Tools & Features: Reflected parameter testing for XSS vulnerabilities Subdomain crawling support Real-time results & performance improvements 🔧 Try it now and enhance your web security scanning game! 👉 Follow me on Twitter and telegram for more updates: @R00TDR t.me/rootdr_research #Web #Bugbounty #Tools

🔖Ex-param - an automated tool designed for finding reflected parameters for XSS vulnerabilities It crawls a target website, extracts GET parameters, and tests them for reflected input. The tool helps bug bounty hunters and penetration testers quickly identify potential reflected #XSS flaws, offering fast and reliable results. ⬇️Features

🔴Crawls a target domain to discover all pages and GET parameters. 🔴Tests each parameter to check if it's reflected in the response. 🔴Outputs a list of reflected parameters for further exploitation. 🔴Fast and optimized for bug bounty hunters. 🔴Easy to use with minimal setup.

📱Github: 🔗Link #infosec #cybersecurity #bugbounty #pentest #bugbountyTips #bugbountyTools 🔹 Share & Support Us 🔹 📱 Channel : @Hide_Club

ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET parameters, and tests them for reflected input. The tool helps bug bounty hunters and penetration testers quickly identify potential reflected XSS flaws, offering fast and reliable results. Features Crawls a target domain to discover all pages and GET parameters. Tests each parameter to check if it's reflected in the response. Outputs a list of reflected parameters for further exploitation. Fast and optimized for bug bounty hunters. Easy to use with minimal setup. link: https://github.com/rootDR/ex-param For more join to channel : https://t.me/rootdr_research #Web #Bugbounty #Tools

سلام یک اسکریپت اتومات برای crawl و پیدا کردن unique پارامتر ها و پارامتر هایی که Reflect میشن نوشتم که برای پیدا کردن آسیب پذیری RXSS خیلی کمک میکنه، با Star توی پروژه گیتهاب و انتشارش میتونید حمایت کنید❤️🙏

https://github.com/rootDR/MyscadaPRO-0Day i like to work on products to find 0day vulnerabilities For more join to channel (: https://t.me/rootdr_research

وقتی تیم فنی کمپانی بعد ۴۵ روز میاد میگه این گزارش قبلا توسط تیم امنیت داخلی پیدا شده.

حل چالش Trickster در PicoCTF سعی کنید چالش رو حل کنید اول خودتون، خیلی ساده اس. https://play.picoctf.org/practice/challenge/445 For more join to channel (: https://t.me/rootdr_research #web #CTF #writeup

https://challenginno.ir/ https://t.me/challenginno یک پلتفرم آموزشی جذاب ایرانی دیگه که بخش های مختلفی برای Blue/Red داره چالش های جذابی داره (: For more join to channel (: https://t.me/rootdr_research

https://x.com/R00TDR/status/1767123886745792692?t=9Gzo4chpc2XMIP02dDxNqA دوستان توییتر منه اگه دوست داشتید دنبال کنین🙏

https://evil.ir/blog?1%22%3C/script%3E%3Cscript%3Eeval(%22alert(document\x2ecookie)%22)%3C/script%3E For more join to channel (: https://t.me/rootdr_research #Bugbounty