Collaborator everywhere is always near the top of any yay list
In no particular order: 1. HUNT 2. Backslash Powered Scanner 3. CMS Scanner 4. Error message checks 5. GraphQL raider 6. Reflected Parameters 7. JS Link Finder RT for other opinionshttps://twitter.com/jxhnsec/status/1171057106293800963 …
-
-
-
Ah yeah and that!
Kraj razgovora
Novi razgovor -
-
-
Nice list! I would also include Flow, it always helps watching requests/payloads submitted by the Scanner or other tools for discrepancies. You may see something that Burp failed to pick up as vuln, but you can exploit it with a bit of playing.
#BurpSuiteTip -
I use Flow a lot for pentests but not too often in bounties. I may have to give it a go for bounties too!
- Još 1 odgovor
Novi razgovor -
-
-
Param miner all day every day
-
I've never had any luck with it but I'm happy to give it a go if you think it's good:)
- Još 1 odgovor
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.