If you liked the posts, tap the heart. That tiny click means a lot. ❤️
Please open Telegram to view this post
VIEW IN TELEGRAM
❤49🔥5
Please open Telegram to view this post
VIEW IN TELEGRAM
❤10
Hey Hunter's,
Darkshadow here back again!
☠️Non-parameter LFI🔥
if you try: target.com/../../../../../../etc/passwd
browser redirect to = target.com/etc/passwd
try url encoding:
target.com/..%2F..%2F..%2F..%2Fetc%2Fpasswd
now browser not redirect you to back directory.
#bugbountytips #fli
Darkshadow here back again!
☠️Non-parameter LFI🔥
if you try: target.com/../../../../../../etc/passwd
browser redirect to = target.com/etc/passwd
try url encoding:
target.com/..%2F..%2F..%2F..%2Fetc%2Fpasswd
now browser not redirect you to back directory.
#bugbountytips #fli
❤22👍5🗿5
Brut Security
https://github.com/moul/awesome-well-knownPlease open Telegram to view this post
VIEW IN TELEGRAM
🔥9❤5👍1👏1
Forwarded from Bug Bounty POC's
A quick way to find "all" paths for Next.js websites:
console.log(__BUILD_MANIFEST.sortedPages)
javascript:console.log(__BUILD_MANIFEST.sortedPages.join('\n'));🔥19❤8
If you liked the posts, tap the heart. That tiny click means a lot. ❤️
Please open Telegram to view this post
VIEW IN TELEGRAM
❤30
⚡Bug Bounty Tip 🚀
✅Level up your recon with GitHub's new regex search on cs.github.com! Hunt for hardcoded credentials like SSH & FTP connection strings.
🚨Example Dorks:
/ssh:\/\/.*:.*@.*target\.com/
/ftp:\/\/.*:.*@.*target\.com/
✅Level up your recon with GitHub's new regex search on cs.github.com! Hunt for hardcoded credentials like SSH & FTP connection strings.
🚨Example Dorks:
/ssh:\/\/.*:.*@.*target\.com/
/ftp:\/\/.*:.*@.*target\.com/
❤21👍1
If you liked the posts, tap the heart. That tiny click means a lot. ❤️
Please open Telegram to view this post
VIEW IN TELEGRAM
❤15
CVE-2025-42944, -42937, -42910, and other: Multiple vulnerabilities in SAP NetWeaver, 5.3 - 10.0 🔥🔥🔥
In its October bulletin, SAP published a list of 13 new vulnerabilities affecting NetWeaver, NetWeaver AS Java, and other products. These vulnerabilities include Insecure Deserialization, Information Disclosure, etc.
Search at Netlas.io:
👉 Link: https://nt.ls/aBHGg
👉 Dork: http.headers.server:"NetWeaver"
Vendor's advisory: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/october-2025.html
In its October bulletin, SAP published a list of 13 new vulnerabilities affecting NetWeaver, NetWeaver AS Java, and other products. These vulnerabilities include Insecure Deserialization, Information Disclosure, etc.
Search at Netlas.io:
👉 Link: https://nt.ls/aBHGg
👉 Dork: http.headers.server:"NetWeaver"
Vendor's advisory: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/october-2025.html
❤8👍2
🚨 Critical zero-day tagged as CVE-2025-61882 (CVSS 9.8) affecting Oracle E-Business Suite
🥳 Nuclei Vulnerability Detection Script:
https://github.com/rxerium/CVE-2025-61882
🟢 This vulnerability is remotely exploitable without authentication.
https://github.com/rxerium/CVE-2025-61882
Please open Telegram to view this post
VIEW IN TELEGRAM
❤13🔥3
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥10❤3
Please open Telegram to view this post
VIEW IN TELEGRAM
❤9🔥4
Media is too big
VIEW IN TELEGRAM
Backdoor vs WAF 🤣
As like the same think happens when WAF try to detect backdoor and the backdoor hide there self using encoding etc.😂
As like the same think happens when WAF try to detect backdoor and the backdoor hide there self using encoding etc.😂
😁13❤2👍2🤨2
This media is not supported in your browser
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥14👍2❤1