A hacker's life

Fuzzing Web Applications https://medium.com/swlh/fuzzing-web-applications-e786ca4c4bb6 … I Opened My Connection To SSH Attacks, And These Were The Requests I Saw https://link.medium.com/1RNbGlIJE3  Indexing Network Traffic with Moloch and Elastic https://link.medium.com/aGNjnbYbP3  #Cybersecurity #bugbounty

Airbnb #bugbounty https://link.medium.com/eC4n4GTUN3  https://xpoc.pro/oauth-authentication-bypass-on-airbnb-acquisition-using-weird-1-char-open-redirect … https://www.arneswinnen.net/2017/06/authentication-bypass-on-airbnb-via-oauth-tokens-theft … https://buer.haus/2017/03/31/airbnb-web-to-app-phone-notification-idor-to-view-everyones-airbnb-messages/ … https://buer.haus/2017/03/13/airbnb-ruby-on-rails-string-interpolation-led-to-remote-code-execution/ … https://buer.haus/2017/03/09/airbnb-chaining-third-party-open-redirect-into-server-side-request-forgery-ssrf-via-liveperson-chat … https://buer.haus/2017/03/08/airbnb-when-bypassing-json-encoding-xss-filter-waf-csp-and-auditor-turns-into-eight-vulnerabilities … #bugbountytips

A source code analyzer built for surfacing features https://github.com/microsoft/ApplicationInspector … Burp Bounty(a quick and simple way, to improve the active and passive scanner) https://github.com/wagiro/BurpBounty … Sublert is a security and reconnaissance tool https://github.com/yassineaboukir/sublert … #bugbounty,#bugbountytips

SQL Injection Payload List by #ismailtasdelen https://link.medium.com/lxgpVQNUK3  Password Cracking Is Easy: Here’s How to Do It by @KennyMuLi in @TDataScience https://towardsdatascience.com/password-cracking-is-easy-heres-how-to-do-it-875806a1e42a … API Security Testing(Part 1) by Saumya Prakash Ranahttps://link.medium.com/tFlFCFfVK3 

Reflected XSS https://link.medium.com/j1cgHbZpq3  https://link.medium.com/q9eeokp2J3  https://link.medium.com/5zdO3gPEw3  https://link.medium.com/vwwEcNQEw3  https://link.medium.com/TH0sHaq2J3  https://link.medium.com/njXx6sq2J3  https://victoni.github.io/bug-hunting-xss-on-cookie-popup-warning … https://gauravnarwani.com/cookie-worth-a-fortune … https://link.medium.com/bx6lLPq2J3  https://link.medium.com/3khM76q2J3  #bugbounty

SOP bypass SOP Bypass via browser-cache https://enumerated.wordpress.com/2019/12/24/sop-bypass-via-browser-cache … Exploiting a Microsoft Edge Vulnerability to Steal Files https://www.netsparker.com/blog/web-security/stealing-local-files-with-simple-html-file … Google sites and exploiting same origin policy https://link.medium.com/RejU1vJyI3  https://thehackerblog.com/reading-your-emails-with-a-readwrite-chrome-extension-same-origin-policy-bypass-8-million-users-affected/index.html … #bugbounty,#bugbountytips

#CSRF https://santuysec.com/2020/01/21/google-bug-bounty-csrf-in-learndigital-withgoogle-com … https://link.medium.com/cMm5RBzqH3  https://link.medium.com/Gg2BkPzqH3  https://link.medium.com/vZ6kv6zqH3  https://link.medium.com/NYlc5kcIw3  https://link.medium.com/qE0NmPAqH3  https://link.medium.com/jnPy23AqH3  https://link.medium.com/mDuIOdiWx3  https://noobe.io/articles/2019-10/xss-to-account-takeover … https://smaranchand.com.np/2019/10/an-inconsistent-csrf … #bugbounty,#bugbountytips

Password reset flaw https://link.medium.com/OVvYaKLng3  https://link.medium.com/HZpTPtR2F3  https://link.medium.com/bpYhuYR2F3  https://link.medium.com/5PnwoRS2F3  https://link.medium.com/A67jqlT2F3  https://thezerohack.com/hack-instagram-again … https://ninadmathpati.com/how-i-was-able-to-earn-1000-with-just-10-minutes-of-bug-bounty … https://link.medium.com/MgdJoyY2F3  https://link.medium.com/iRVWjs02F3  https://link.medium.com/roeUih12F3  #bugbounty

How much time do you give for each program? #bugbounty,#bugbountytips

Parameter tampering https://blog.securitybreached.org/2020/01/26/improper-input-validation-add-custom-text-and-urls-in-sms-send-by-snapchat-bug-bounty-poc … https://b3nac.com/posts/2019-09-02-Spear-Texting-Via-Parameter-Injection.html … https://link.medium.com/rkcIUvhuD3  https://link.medium.com/8tXuo2juD3  https://link.medium.com/a6yLwgkuD3  https://blog.avatao.com/How-I-could-steal-your-photos-from-Google … https://link.medium.com/eyxLrykuD3  https://link.medium.com/cgg3NLkuD3  https://link.medium.com/MZP6o1kuD3  https://link.medium.com/ztkAjeluD3  #bugbounty

Subdomain Takeover https://link.medium.com/a61eAt5mC3  https://smaranchand.com.np/2019/12/subdomain-takeover-via-pantheon … https://m0chan.github.io/2019/12/16/Subdomain-Takeover-Azure-CDN.html … https://www.mohamedharon.com/2019/11/subdomain-takeover-via.html … https://www.mohamedharon.com/2019/09/how-i-able-to-takeover-10-subdomains-in.html … https://blog.usejournal.com/https-medium-com-aniltom-from-sub-domain-takeover-to-open-redirect-b5be4906e1a4 … https://blog.takemyhand.xyz/2019/05/escalating-subdomain-takeovers-to-steal.html … https://link.medium.com/VBwF4s6mC3  https://www.mohamedharon.com/2019/02/subdomain-aws-s3-buckets-reader.html … https://www.safetydetectives.com/blog/microsoft-outlook … #bugbounty

Unrestricted file upload https://link.medium.com/sILCWr8xB3  https://link.medium.com/V8SdaJ8xB3  https://noobe.io/articles/2019-09/exploiting-cookie-based-xss-by-finding-rce … https://link.medium.com/6qTQZwayB3  https://anotherhackerblog.com/exploiting-file-uploads-pt-2 … https://link.medium.com/1wFiIWayB3  https://link.medium.com/5rv5CbbyB3  https://mustafakemalcan.com/asus-rce-vulnerability-on-rma-asus-europe-eu … https://link.medium.com/jFGhtvbyB3  https://link.medium.com/fRfag0byB3  #bougbounty

$40,000 Bugs Microsoft Edge (Chromium) - EoP via XSS to Potential RCE https://leucosite.com/Edge-Chromium-EoP-RCE … Filling in the Blanks: Exploiting Null Byte Buffer Overflow for a $40,000 Bounty https://samcurry.net/filling-in-the-blanks-exploiting-null-byte-buffer-overflow-for-a-40000-bounty … #bugbounty,#bugbountytips

Today I found this two aswome repo. Chake this out. A collective list of free APIs for use in software and web development https://github.com/public-apis/public-apis … A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and morehttps://github.com/trimstray/the-book-of-secret-knowledge …

Paypal #bugbounty https://link.medium.com/IKr9j5QEw3  https://whitehathaji.blogspot.com/2019/07/paypal-bug-10k-all-secondary-users.html … https://link.medium.com/MpeA50gDx3  https://portswigger.net/research/bypassing-csp-with-policy-injection … https://link.medium.com/jDp3WkkDx3  https://link.medium.com/LIW2fGkDx3  https://r00thunt.com/2018/10/05/blind-xml-external-entities-out-of-band-channel-vulnerability-paypal-case-study … https://wesecureapp.com/2018/05/26/persistent-xss-to-steal-passwords-paypal … https://link.medium.com/Ef0m3UmDx3  https://link.medium.com/Mz4S4EoDx3  #bugbountytips

HTML injection https://link.medium.com/v3JTSS7Hw3  https://footstep.ninja/posts/html-injection-in-email … https://link.medium.com/NYlc5kcIw3  https://blog.ripstech.com/2019/wordpress-csrf-to-rce … https://link.medium.com/muvJmWfIw3  https://link.medium.com/CtSNLvWXp3  https://link.medium.com/xBjzJonIw3  https://link.medium.com/dK9FDRlIw3  https://link.medium.com/TIRN1NoIw3  https://link.medium.com/MpQKjzoIw3  #bugbounty

#XSSI Write-ups Effortlessly finding Cross Site Script Inclusion (XSSI) & JSONP for bug bounty https://link.medium.com/g3MwS6YVK2  The Bug That Exposed Your PayPal Password https://link.medium.com/fxCdDmwl52  Yahoo — Two XSSi vulnerabilities https://link.medium.com/jFkPeGsUv3  #bugbounty,#bugbountytips

#HTTPrequestsmuggling HTTP Request Smuggling + IDOR https://hipotermia.pw/bb/http-desync-idor … Account takeover via HTTP Request Smuggling https://hipotermia.pw/bb/http-desync-account-takeover … HTTP Request Smuggling (CL.TE) https://memn0ps.github.io/2019/09/13/HTTP-Request-Smuggling-CL-TE.html … Write up of two HTTP Requests Smuggling https://medium.com/@cc1h2e1/write-up-of-two-http-requests-smuggling-ff211656fe7d … #bugbounty

“How I was able to take over any users account with host header injection” by Ajay Gautam https://medium.com/nassec-cybersecurity-writeups/how-i-was-able-to-take-over-any-users-account-with-host-header-injection-546fff6d0f2 … "A Less Known Attack Vector, Second Order IDOR Attacks” by Ozgur Alp https://medium.com/@ozguralp/a-less-known-attack-vector-second-order-idor-attacks-14468009781a … #bugbounty,#bugbountytips

SSRF https://ngailong.wordpress.com/2019/12/19/google-vrp-ssrf-in-google-cloud-platform-stackdriver … https://link.medium.com/Xbz6t9O2r3  https://link.medium.com/YHLYBsQ2r3  https://link.medium.com/IuBvi3Q2r3  https://link.medium.com/0RczPuR2r3  https://link.medium.com/CRffZUR2r3  https://link.medium.com/h4I5fpS2r3  https://link.medium.com/h3f0yHLEh3  https://link.medium.com/NOYWViSSg3  #bugbounty ,#bugbountytips