Web_Priv8
@web_priv8
765 subscribers
405 photos
24 videos
45 files
588 links
Sina Doosti @r00t98
Web Security Researcher, Bug Hunter
https://twitter.com/r00t98

Amir Hasanvand @al9n3_wolf
Web Security Researcher, Bug Hunter
https://twitter.com/al9n3_wolf
Download Telegram
About
Blog
Apps
Platform
Join
Web_Priv8
765 subscribers
Web_Priv8
File Upload Checklist

#Upload
#BugBountyTip

@web_priv8
1.6K viewsr00t98, edited  
Web_Priv8
A Glossary of Blind SSRF Chains

https://blog.assetnote.io/2021/01/13/blind-ssrf-chains/

#SSRF
#Blind
#BugBountyTip

@web_priv8
Assetnote
A Glossary of Blind SSRF Chains
Application security issues found by Assetnote
1.26K viewsr00t98, 
Web_Priv8
Subdomain Takeover in Azure: making a PoC

https://godiego.tech/posts/STO/

#Azure
#SubdomainTakeover

@web_priv8
843 viewsr00t98, 
Web_Priv8
How To Find XXE Bugs

https://www.bugcrowd.com/blog/how-to-find-xxe-bugs/

#XXE

@web_priv8
739 viewsr00t98, edited  
Web_Priv8
Scope Based Recon Methodology: Exploring Tactics for Smart Recon

https://blog.cobalt.io/scope-based-recon-smart-recon-tactics-7e72d590eae5

#Recon
#BugBounty

@web_priv8
1.04K viewsr00t98, 
Web_Priv8
Poisoning your Cache for 1000$ - Approach to Exploitation Walkthrough

https://galnagli.com/Cache_Poisoning/

#WCP
#BugBounty

@web_priv8
715 viewsr00t98, 
Web_Priv8
Mass Assignment vulnerability and prevention

https://itzone.com.vn/en/article/mass-assignment-vulnerability-and-prevention/

#MassAssignment
#BugBountyTip

@web_priv8
933 viewsr00t98, 
Web_Priv8
Bug Bounty Playbook v1

#Book
#BugBounty

@web_priv8
733 viewsr00t98, edited  
Web_Priv8
Bug Bounty Playbook v1.pdf
9.8 MB
@web_priv8
803 viewsr00t98, edited  
Web_Priv8
Bug Bounty Playbook v2

#Book
#BugBounty

@web_priv8
806 viewsr00t98, edited  
Web_Priv8
Bug Bounty Playbook v2.pdf
28.9 MB
@web_priv8
894 viewsr00t98, edited  
Web_Priv8
مقاله ای بروز از nccgroup در خصوص حملات CSRF و CORS

#CSRF
#CORS
#Book

@web_priv8
804 viewsr00t98, edited  
Web_Priv8
cors.pdf
1.8 MB
@web_priv8
932 viewsr00t98, edited  
Web_Priv8
Dot Dot Semicolon RCE

https://thehackingfactory.com/dot-dot-semicolon-rce

#Java
#RCE
#BugBounty

@web_priv8
735 viewsr00t98, edited  
Web_Priv8
Mass Assignment and Autobinding

#MassAssignment
#BugBountyTip

@web_priv8
730 viewsr00t98, edited  
Web_Priv8
Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

Demo https://youtu.be/WLurj5Lg8cI

https://github.com/r3curs1v3-pr0xy/vajra

#Tool
#Recon
#BugBounty

@web_priv8
775 viewsr00t98, edited  
Web_Priv8
OWASP Top 10 for API.png
386.5 KB
OWASP Top 10 for API

https://application.security/free/owasp-top-10-API

#API
#Owasp

@web_priv8
1.06K viewsr00t98, edited  
Web_Priv8
OWASP Top 10 for Web.png
618.2 KB
OWASP Top 10 for Web

https://application.security/free/owasp-top-10

#Owasp

@web_priv8
1.27K viewsr00t98, edited