12.5K subscribers
550 photos
27 videos
24 files
889 links
This channel discusses:

— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc

Disclaimer:
t.iss.one/APT_Notes/6

Chat Link:
t.iss.one/APT_Notes_PublicChat
Download Telegram
#BugBounty
#Tools

if you're looking for great tool in web recon
check these out

https://github.com/Cyber-Guy1/BlackDragon
#bugbounty One of the largest security testing checklist

Один из самых больших чеклистов в интернете по тестированию веб-приложений.
#android #mindmap

Android Application Penetration Testing Mindmap

https://www.xmind.net/m/paUMuU/

UPD:
https://www.xmind.net/m/GkgaYH/
#tools
Check live webapps from domain list

cat subdomains.txt | sed -E 's#https?://##I' | sed -E 's#/.*##' | sed -E 's#^\*\.?##' | sed -E 's#,#\n#g' | tr '[:upper:]' '[:lower:]' | uniq | sed -e 's/^/https:\/\//' | httpx -silent -timeout 2 -threads 100 -status-code -mc 200,302 |anew
#bugbounty

XSS in AWS console by
@Frichette_n with AngularJS CSP Bypass

https://frichetten.com/blog/xss_in_aws_console/
#tools
#bugbounty

30+ Security Tools to Test Security of Website

https://gf.dev/toolbox
CrimeFlare Bypass Hostname

This tool serves to search for the original IP behind websites that have been protected by CloudFlare, the information generated can be useful for further penetration. The information generated by this tool is as follows.

https://github.com/zidansec/CrimeFlare


#cloudflare #bypass #Tools
2FA Bypass Techniques

#bugbountytip
#bugbounty
#infosec
File Upload Mindmap

#Bugbounty #BugBountyTips