Bug Bounty - GitBook

Google Dorks Cheat Sheet for Hidden Paths & Exposed Files - ASP NET configuration files - open directory listings - Apache password files - SVN version control directories - open error log file and more. https://github.com/sudosu01/-Google-Dorks-Cheat-Sheet-for-Hidden-Paths-Exposed-Files Contributor x.com/sudosu01

Very useful to bypass WAF https://www.compart.com/

use https://requestcatcher.com/ to get back request

#XSS @GitBook_s

Well-Known Resource Index An online tool to scan a website and find potentially sensitive information on it: - robots.txt file - security.txt - ads.txt - assetlinks.json - app-ads.txt - gpc.json and others. https://well-known.dev/

How to find out what domains are recorded on a particular IP?  Review of domains associated with an IP address (Reverse IP Lookup) One of the common ways to identify websites or services is to host a shared server. This process will help you find a list of domains attached to it by entering an IP address. In this article, you will be introduced to the methods and tools to do this. 🗯 The sites that do the Reverse IP Lookup process are; 1- Domain Tools Adesess: https://www.domaintools.com - How to work:     - Log in to the Domain Tools website.     - From the top menu, select Reverse IP Lookup.     - Enter your desired IP address and click Search.     - List of domains related to it IP display.  - Features:    - Provide detailed information about the IP owner and domain history.    - Ability to view active and inactive domains.  2-MXTOOLBOX  ADERESS: https://mxtoolbox.com - How to work:    - Enter the Reverse IP Lookup section.    - Enter the desired IP and click Reverse Lookup.    - List of related DNS domains and records.  - Features:    - free and fast.    - Ability to check the server status (Online/Offline).  3-Securitytrails  ADERESS: https://securitytrails.com - How to work:    - In the Search section, select IP.    - Enter the IP address and click Enter.    - In the hosted domains section, IP -related domains are displayed.  - Features:    - Provide security details such as DNS history and server information.  4-Viewdns.info  Address: https://viewdns.info - How to work:    - From the Tools menu, select Reverse IP Lookup.    - Enter the IP and click Lookup.  - Features:    - Simple and free user interface. 

Template Injection in Action Introduction Template Injection Identifying Template Engine LAB 1: Twig (PHP) LAB 2: Jinja2 (Python) LAB 3: Tornado (Python) LAB 4: Velocity (Java) LAB 5: Freemarker (Java) LAB 6: Freemaker (Sandbox escape) Conclusion Link 🔗:- https://gosecure.github.io/template-injection-workshop/#0 https://youtu.be/I7xQZOvZzIw?si=F6rKr9PV5oUwd5cE @GitBook_s

Advanced Binary Analysis Introduction Initial Analysis Identifying Types of Obfuscation LAB 1: Analyzing the Stager LAB 2: Unpacking the Nested Payload LAB 3: Unpacked Payload Analysis Conclusion Link 🔗:- https://gosecure.github.io/presentations/2020-05-15-advanced-binary-analysis/#0 @GitBook_s