Regex code to detect possible idor parameters

"(?i)(\\?|\\&)(((([a-z0-9-_])+(-|_)+))|(-|_))?(id|uuid|user|account|number|order|no|doc|key|email|group|profile|edit|report|username)((=)|(\\/[0-9]+\\/?))"

#infosec #bugbountytips

common sinks for dom xss

-document.URL
-document.documentURI
-document.URLUnencoded
-document.baseURI
-location.\search
-document.cookie
-document.referrer

#BugBounty #bugbountytips

JWT common vulnerabilities

1- Signature verification failure
2- Use of weak algorithms: JWTs
3- Brute-forcing of secret keys
4- Key ID (kid) manipulation
5- Directory traversal attacks

#BugBounty #bugbountytips

تلكرام يحتوي على فيديوات خاصه ب ROOD
https://t.iss.one/alien_rood