Please open Telegram to view this post
VIEW IN TELEGRAM
Medium
Best Bug Bounty and Pentesting Methodology for Beginners: A Step-by-Step Guide
Bug bounty programs and penetration testing (pentesting) are popular ways for ethical hackers to make money while helping companies enhance…
❤14👍2
⚡️Tiny-XSS-Payloads - A collection of tiny XSS Payloads that can be used in different contexts.
✅tinyxss.terjanq.me
#xss #BugBounty #CyberSecurity
✅tinyxss.terjanq.me
#xss #BugBounty #CyberSecurity
👍11
⚡You can use #httpx to request any path and see the status code and other details on the go, filter, or matcher flags if you want to be more specific.
✅httpx -path /swagger-api/ -status-code -content-length
✅httpx -path /swagger-api/ -status-code -content-length
👍16🔥6❤1
Fuxploider: a free tool for finding and exploiting flaws in file upload forms. It spots allowed file types and finds out the best way to upload malicious files onto a website.
https://t.co/uP1HxJIdpC
https://t.co/uP1HxJIdpC
❤7👍4
Using theHarvester with the Netlas Module 🔍
In our latest article, we demonstrate how to leverage the theHarvester framework integrated with Netlas to efficiently discover subdomains.
👉 Read now: https://netlas.io/blog/theharvester_and_netlas/
In our latest article, we demonstrate how to leverage the theHarvester framework integrated with Netlas to efficiently discover subdomains.
👉 Read now: https://netlas.io/blog/theharvester_and_netlas/
netlas.io
Using theHarvester with Netlas - Netlas Blog
In this article we will look at using theHarvester tool to find subdomains with the Netlas integration.
❤5👍3
🔖 Free Tool for Finding Open S3 Buckets and Files
🎯 Purpose:Search for open Amazon S3 buckets and locate potentially interesting files efficiently.
✅ Tool Links:
Explore Open S3 Buckets: https://buckets.grayhatwarfare.com
📌 Why This is Useful:Helps identify misconfigured S3 buckets.
Uncover sensitive data or files accidentally exposed to the public.
🎯 Purpose:Search for open Amazon S3 buckets and locate potentially interesting files efficiently.
✅ Tool Links:
Explore Open S3 Buckets: https://buckets.grayhatwarfare.com
📌 Why This is Useful:Helps identify misconfigured S3 buckets.
Uncover sensitive data or files accidentally exposed to the public.
❤10👍3🔥2
🎉 Happy New Year, Brut Fam! 🎉
2024 was incredible—together, we shared 1,500+ resources and grew to an 8.5K+ community! Your support makes it all worthwhile.
💪
If you’ve found value in this journey, you can support me with a ☕: https://buymeacoffee.com/brutsecurity
Wishing you a safe, successful, and prosperous 2025! Let’s make it even bigger and better! 🚀
2024 was incredible—together, we shared 1,500+ resources and grew to an 8.5K+ community! Your support makes it all worthwhile.
💪
If you’ve found value in this journey, you can support me with a ☕: https://buymeacoffee.com/brutsecurity
Wishing you a safe, successful, and prosperous 2025! Let’s make it even bigger and better! 🚀
❤14🔥3🤝1
👍1
⚡️SqliSniper: Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers
✅https://github.com/danialhalo/SqliSniper
✅https://github.com/danialhalo/SqliSniper
👍8❤5
Learn from a proven bug hunter with extensive experience on platforms like Bugcrowd, HackerOne, and Immunefi.
Harsh D Ranjan is a recognized expert in bug bounty programs with verified profiles:
• Bugcrowd
• HackerOne
• Immunefi
• In-depth exploration of bug bounty methodologies
• Practical guidance for platforms like Bugcrowd, HackerOne, and Immunefi
• Real-world examples of impactful vulnerability reports
• Hands-on practice to prepare you for live bug bounty programs
🕒 Class Timings: Tuesday & Wednesday, 3:00–5:00 PM IST
📆 Duration: 2–3 months
👥 Max Slots: 10 participants per batch
📞 DM on WhatsApp to Book Your Slot: https://wa.link/7j7p6g
• Direct mentorship from an experienced bug hunter
• Small class size for personalized attention
• Gain skills for earning through bug bounty programs
Please open Telegram to view this post
VIEW IN TELEGRAM
1🔥5❤1👍1🗿1
⚡️Want to download 100+ Bug Bounty Tips collected from X?
✅Download the PDF from here - https://t.iss.one/brutsecurity/767
#BugBounty #bugbountytips
✅Download the PDF from here - https://t.iss.one/brutsecurity/767
#BugBounty #bugbountytips
👍7🔥3
⚡️GoSearch - OSINT tool for searching people's digital footprint and leaked passwords across various social networks, written in Go.
✅https://github.com/ibnaleem/gosearch
#bugbounty #bugbountytips #cybersecurity
✅https://github.com/ibnaleem/gosearch
#bugbounty #bugbountytips #cybersecurity
👍8❤4🔥2
🔖 On-Site Request Forgery (OSRF): An Overview
🚨On-Site Request Forgery (OSRF) is a lesser-known but impactful vulnerability similar to Cross-Site Request Forgery (CSRF). While both involve unauthorized actions performed on behalf of an authenticated user, the fundamental distinction lies in the request origin.
- CSRF: The attacker initiates requests from their controlled domain to exploit a victim's authenticated session.
- OSRF: The requests originate from the vulnerable application itself, and the attacker controls where the requests are directed.
---
🔍 Where to Find OSRF Vulnerabilities
1. Reflected Inputs in
Look for inputs that can be reflected in attributes like
👉 If the input can be manipulated, it may allow the attacker to direct requests to their desired endpoints.
2. Sensitive Endpoints Using the GET Method
Endpoints performing sensitive actions with GET requests are prime targets for OSRF. For example:
If such endpoints exist and can be controlled via reflected input, they may be exploited for OSRF.
⚠️ Best Practices for Prevention
1. Avoid GET Methods for Sensitive Actions
Use POST methods for actions involving sensitive changes, as they require more intentional execution.
2. Validate and Sanitize Inputs
Ensure all user inputs, especially those reflected in attributes like
3. Implement Content Security Policies (CSP)
CSPs can limit where resources like images or iframes can be loaded from, reducing the risk of external request manipulation.
4. Monitor and Audit Application Behavior
Regularly test your application for unusual or unintended request behaviors to identify vulnerabilities early.
This additional layer of security awareness helps ensure OSRF vulnerabilities are addressed alongside CSRF for a more robust application defense.
Learn More: https://github.com/daffainfo/AllAboutBugBounty/blob/master/On%20Site%20Request%20Forgery.md
🚨On-Site Request Forgery (OSRF) is a lesser-known but impactful vulnerability similar to Cross-Site Request Forgery (CSRF). While both involve unauthorized actions performed on behalf of an authenticated user, the fundamental distinction lies in the request origin.
- CSRF: The attacker initiates requests from their controlled domain to exploit a victim's authenticated session.
- OSRF: The requests originate from the vulnerable application itself, and the attacker controls where the requests are directed.
---
🔍 Where to Find OSRF Vulnerabilities
1. Reflected Inputs in
src Attributes Look for inputs that can be reflected in attributes like
src. Example vulnerable tags: html
<img src="OUR_INPUT_HERE">
<video width="400" height="200" controls src="OUR_INPUT_HERE">
<audio src="OUR_INPUT_HERE">
<iframe src="OUR_INPUT_HERE">
👉 If the input can be manipulated, it may allow the attacker to direct requests to their desired endpoints.
2. Sensitive Endpoints Using the GET Method
Endpoints performing sensitive actions with GET requests are prime targets for OSRF. For example:
GET /settings.php?remove_account=1
Host: example.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0
If such endpoints exist and can be controlled via reflected input, they may be exploited for OSRF.
⚠️ Best Practices for Prevention
1. Avoid GET Methods for Sensitive Actions
Use POST methods for actions involving sensitive changes, as they require more intentional execution.
2. Validate and Sanitize Inputs
Ensure all user inputs, especially those reflected in attributes like
src, are properly validated and sanitized. 3. Implement Content Security Policies (CSP)
CSPs can limit where resources like images or iframes can be loaded from, reducing the risk of external request manipulation.
4. Monitor and Audit Application Behavior
Regularly test your application for unusual or unintended request behaviors to identify vulnerabilities early.
This additional layer of security awareness helps ensure OSRF vulnerabilities are addressed alongside CSRF for a more robust application defense.
Learn More: https://github.com/daffainfo/AllAboutBugBounty/blob/master/On%20Site%20Request%20Forgery.md
GitHub
AllAboutBugBounty/On Site Request Forgery.md at master · daffainfo/AllAboutBugBounty
All about bug bounty (bypasses, payloads, and etc) - daffainfo/AllAboutBugBounty
👍8❤3🔥1
Please open Telegram to view this post
VIEW IN TELEGRAM
👍10❤4