Bug Bounty - GitBook
Відкрити в Telegram
Everything 4 bug bounty https://t.me/GiftWay32robot?start=_tgr_HwZ24DI5MWJk
Показати більше7 473
Підписники
Немає даних24 години
+387 днів
+18430 день
Архів дописів
7 473
Sometimes we make a GET request to a site like site.com and it shows us an HTML page
But if we change the method of this request, for example, to POST or other methods, what will happen?
This move can return different reactions from the site, it may give a 405 error and not accept the new method, or it may get an error, in which case the story becomes interesting.
In some frameworks, especially Laravel, if the debug mode is active and the site gets an error, all the site information will be returned and may even lead to RCE.
In general, programmer should filter the methods for site's routes,
so(my tip:) you can use these problems
and this work named as verb tampering
7 473
32 Advance Search Engine For Hacker
Sat, 12 Oct 2024 06:01:56 GMT
https://medium.com/p/ba7fe4270f05
7 473
Effective Domain Management for Bug Bounty Programs Using SubScope
Fri, 11 Oct 2024 15:27:25 GMT
https://medium.com/p/f74b7a0db428
7 473
As you know, HTTP is mounted on TCP and sends data through it. Actually, the http protocol is nothing but a bunch of rules on a few string lines. Most of its tasks are implemented by Tcp and we think that Http is playing its role well.
What are the two roles played by TCP?
- Ensuring data delivery: In Http, we get a guarantee from the protocol that the data will be delivered correctly and safely.
- Correct order of data: In the network, packets may be received asynchronously and in an order other than the order they were sent, but TCP guarantees that the data at the destination is arranged and reconstructed in the order it was sent. HTTP itself uses this feature and does not need to manage data order.
In general, many of the features we know from HTTP are actually implemented by TCP, and HTTP acts more as a layer to define the rules I mentioned above for the exchange of this data and the type of content sent.
