Those who are interested in Android phone hacking can read this article
https://shorturl.at/x8jNs

Help to bug bounty

A new video will come today. Through which you can learn how to extract secret key or ssh by advanced github recon

Live Bug Bounty Advanced GitHub Recon | Secrets of Bug Hunters

https://youtu.be/46SZdvM-fxw?si=VVLWHqOlus8J7MKO

Wordpress juicy endpoints #bugbountytips

Hi..

My team met developed a Recon Engine with subdomain find, port scan, parameter find, technology detect, information disclosure, git dorking, cve search etc many more features. You guys should check this Recon Engine. If you know anything valid and interesting that missing on the Recon engine you can suggest us by giving link. DM us.

https://freelancermijan.github.io/reconengine/

#Exclusive 🔥
HTB Academy – Bug Bounty Hunter Job Rule Path 2024.11

🔗 Download

Info : https://academy.hackthebox.com/path/preview/bug-bounty-hunter

@offensivesecurity

🔖 Here’s a list of 10 Github dorks to find secret and access tokens

"https://target.com" send_keys
"https://target.com" password
"https://target.com" api_key
"https://target.com" apikey
"https://target.com" jira_password
"https://target.com" root_password
"https://target.com" access_token
"https://target.com" config
"https://target.com" client_secret
"https://target.com" user auth

How to Find and Exploit 𝐌𝐢𝐬𝐜𝐨𝐧𝐟𝐢𝐠𝐮𝐫𝐞𝐝 𝐩𝐡𝐩𝐌𝐲𝐀𝐝𝐦𝐢𝐧 | Bug Bounty POC
https://youtu.be/XtIMOsE0554?si=Hq708taLUcVb8nXB

Bash

FOFA = title="phpmyadmin"

I am Live on YouTube channel

https://www.youtube.com/live/2mGmKsKORF8?si=Q9Yv9onEmw-7aO0V

hello everyone

NAS Vulnerability: Command Injection Exploit via Group Parameter | Bug Bounty Tutorial
https://youtu.be/UucbbgsiEoA?si=LZ3l1W7SsRIhaBok

GoogleDorks
Bash

filetype:ini "password" site:orgfiletype:txt "credentials" site:gov
filetype:yaml "secret_key" -examples
filetype:key "PRIVATE KEY"
filetype:pem "PRIVATE KEY"
filetype:log "debug" "error"
filetype:log "Stack trace" site:edu
filetype:log "unable to connect"
filetype:log "authentication failed"
filetype:json "db_password" -github
filetype:db "database" site:org
filetype:sql "INSERT INTO" "VALUES" site:edu
filetype:dump "database" site:gov
"index of" "backup.sql"
filetype:conf "db_user" site:org
filetype:config "ftp" site:gov
filetype:xml "web.config" site:edu
"index of" "settings.json"
filetype:env "SECRET_KEY"
"index of" "api_key"
filetype:json "api_token"
filetype:txt "api_secret"
"admin login" filetype:php
"index of" "server-status"
filetype:php "mysql_connect" site:gov
"admin dashboard" "login"
filetype:pdf "not for distribution" site:gov
filetype:xlsx "confidential report" site:edu
filetype:doc "salary" "employee"
filetype:docx "restricted access"
filetype:xlsx | filetype:xls "username" "password" site:gov
filetype:xlsx | filetype:xls "username" site:gov
filetype:xlsx | filetype:xls "database" site:gov
filetype:xlsx | filetype:xls "financial" site:gov
filetype:xlsx | filetype:xls "password" site:gov
site:dropbox.com "password"
site:box.com "confidential"
site:drive.google.com "important"
site:onedrive.live.com "restricted"
site:pastebin.com "password"
site:github.com "SECRET_KEY"
site:gitlab.com "PRIVATE_KEY"
site:bitbucket.org "db_password"

hello everyone i am back