Extract all endpoints from a JS File and take your bug 🐞
✅Method one
✅Method two
#infosec #cybersec #bugbountytips
✅Method one
waybackurls HOSTS | tac | sed "s#\\\/#\/#g" | egrep -o "src['\"]?
15*[=: 1\5*[ '\"]?[^'\"]+.js[^'|"> ]*" | awk -F '/'
'{if(length($2))print "https://"$2}' | sort -fu | xargs -I '%' sh
-c "curl -k -s \"%)" | sed \"s/[;}\)>]/\n/g\" | grep -Po \" (L'1|\"](https?: )?[/1{1,2}[^'||l"> 1{5,3)|(\.
(get|post|ajax|load)\s*\(\5*['||\"](https?:)?[/1{1,2}[^'||\"> ]
{5,})\"" | awk -F "['|"]" '{print $2}' sort -fu
✅Method two
cat JS.txt | grep -aop "(?<=(\"|\'|' ))\/[a-zA-Z0-9?&=\/-#.](?= (\"||'|'))" | sort -u | tee JS.txt
#infosec #cybersec #bugbountytips
1👍32❤11🔥10🤨3🐳2
Don’t forget the reactions and stars!
They fuel my energy to post such contents🔋 ✨ .
They fuel my energy to post such contents
Please open Telegram to view this post
VIEW IN TELEGRAM
👍17
⚡️A list of companies that accept Responsible Disclosure
✅bug-bounties.as93.net
#bugbountytips #bugbounty
✅bug-bounties.as93.net
#bugbountytips #bugbounty
👍7🤨4❤1🔥1👨💻1
Using TLDFinder with the Netlas Module 🔍
Check out our latest article, where we walk you through setting up ProjectDiscovery TLDFinder and using it alongside Netlas data for top-level domains and subdomains searching.
👉 Read now: https://netlas.io/blog/tldfinder_and_netlas/
Check out our latest article, where we walk you through setting up ProjectDiscovery TLDFinder and using it alongside Netlas data for top-level domains and subdomains searching.
👉 Read now: https://netlas.io/blog/tldfinder_and_netlas/
netlas.io
Using TLDFinder with Netlas - Netlas Blog
This article will look at using the TLDFinder tool to find top level domains and subdomains using the Netlas integration.
👍5❤4
⚡️CVE-2024-50379/CVE-2024-56337 : Apache Tomcat Patches Critical RCE Vulnerability
🔥Exploit : https://github.com/SleepingBag945/CVE-2024-50379
👇Dorks:
HUNTER :/product.name="Apache Tomcat"
FOFA : product="Apache-Tomcat"
SHODAN : product:"Apache-Tomcat"
🔥Exploit : https://github.com/SleepingBag945/CVE-2024-50379
👇Dorks:
HUNTER :/product.name="Apache Tomcat"
FOFA : product="Apache-Tomcat"
SHODAN : product:"Apache-Tomcat"
❤7👍2
🎄 Merry Christmas from Brut Security! 🎅
Wishing you and your loved ones a season filled with joy, peace, and happiness. May this festive time bring warmth to your heart and cherished moments with your loved ones.
Thank you for being a part of our community!
Happy Holidays! 🎉
#MerryChristmas #Cybersecurity #BrutSecurity
Wishing you and your loved ones a season filled with joy, peace, and happiness. May this festive time bring warmth to your heart and cherished moments with your loved ones.
Thank you for being a part of our community!
Happy Holidays! 🎉
#MerryChristmas #Cybersecurity #BrutSecurity
1❤14👍2🔥2
Please open Telegram to view this post
VIEW IN TELEGRAM
Medium
Best Bug Bounty and Pentesting Methodology for Beginners: A Step-by-Step Guide
Bug bounty programs and penetration testing (pentesting) are popular ways for ethical hackers to make money while helping companies enhance…
❤14👍2
⚡️Tiny-XSS-Payloads - A collection of tiny XSS Payloads that can be used in different contexts.
✅tinyxss.terjanq.me
#xss #BugBounty #CyberSecurity
✅tinyxss.terjanq.me
#xss #BugBounty #CyberSecurity
👍11
⚡You can use #httpx to request any path and see the status code and other details on the go, filter, or matcher flags if you want to be more specific.
✅httpx -path /swagger-api/ -status-code -content-length
✅httpx -path /swagger-api/ -status-code -content-length
👍16🔥6❤1
Fuxploider: a free tool for finding and exploiting flaws in file upload forms. It spots allowed file types and finds out the best way to upload malicious files onto a website.
https://t.co/uP1HxJIdpC
https://t.co/uP1HxJIdpC
❤7👍4
Using theHarvester with the Netlas Module 🔍
In our latest article, we demonstrate how to leverage the theHarvester framework integrated with Netlas to efficiently discover subdomains.
👉 Read now: https://netlas.io/blog/theharvester_and_netlas/
In our latest article, we demonstrate how to leverage the theHarvester framework integrated with Netlas to efficiently discover subdomains.
👉 Read now: https://netlas.io/blog/theharvester_and_netlas/
netlas.io
Using theHarvester with Netlas - Netlas Blog
In this article we will look at using theHarvester tool to find subdomains with the Netlas integration.
❤5👍3
🔖 Free Tool for Finding Open S3 Buckets and Files
🎯 Purpose:Search for open Amazon S3 buckets and locate potentially interesting files efficiently.
✅ Tool Links:
Explore Open S3 Buckets: https://buckets.grayhatwarfare.com
📌 Why This is Useful:Helps identify misconfigured S3 buckets.
Uncover sensitive data or files accidentally exposed to the public.
🎯 Purpose:Search for open Amazon S3 buckets and locate potentially interesting files efficiently.
✅ Tool Links:
Explore Open S3 Buckets: https://buckets.grayhatwarfare.com
📌 Why This is Useful:Helps identify misconfigured S3 buckets.
Uncover sensitive data or files accidentally exposed to the public.
❤10👍3🔥2
🎉 Happy New Year, Brut Fam! 🎉
2024 was incredible—together, we shared 1,500+ resources and grew to an 8.5K+ community! Your support makes it all worthwhile.
💪
If you’ve found value in this journey, you can support me with a ☕: https://buymeacoffee.com/brutsecurity
Wishing you a safe, successful, and prosperous 2025! Let’s make it even bigger and better! 🚀
2024 was incredible—together, we shared 1,500+ resources and grew to an 8.5K+ community! Your support makes it all worthwhile.
💪
If you’ve found value in this journey, you can support me with a ☕: https://buymeacoffee.com/brutsecurity
Wishing you a safe, successful, and prosperous 2025! Let’s make it even bigger and better! 🚀
❤14🔥3🤝1
👍1
⚡️SqliSniper: Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers
✅https://github.com/danialhalo/SqliSniper
✅https://github.com/danialhalo/SqliSniper
👍8❤5
Learn from a proven bug hunter with extensive experience on platforms like Bugcrowd, HackerOne, and Immunefi.
Harsh D Ranjan is a recognized expert in bug bounty programs with verified profiles:
• Bugcrowd
• HackerOne
• Immunefi
• In-depth exploration of bug bounty methodologies
• Practical guidance for platforms like Bugcrowd, HackerOne, and Immunefi
• Real-world examples of impactful vulnerability reports
• Hands-on practice to prepare you for live bug bounty programs
🕒 Class Timings: Tuesday & Wednesday, 3:00–5:00 PM IST
📆 Duration: 2–3 months
👥 Max Slots: 10 participants per batch
📞 DM on WhatsApp to Book Your Slot: https://wa.link/7j7p6g
• Direct mentorship from an experienced bug hunter
• Small class size for personalized attention
• Gain skills for earning through bug bounty programs
Please open Telegram to view this post
VIEW IN TELEGRAM
1🔥5❤1👍1🗿1