Bug bounty chat

15 Dec 2024 11:22

Common xss types (especially dom), authentication vulns (like what is authentication vs authorization), basic client side vulns, and server side ones

Bug bounty chat

14 Dec 2024 16:05

I don't have account

Bug bounty chat

14 Dec 2024 07:39

https://www.linkedin.com/posts/abdullah-parvez-95a8a926b_windows-privilege-escalation-activity-7273583048556732417-iQDl?utm_source=combined_share_message&utm_medium=android_app&utm_campaign=share_via

Bug bounty chat

13 Dec 2024 07:38

https://www.linkedin.com/posts/abdullah-parvez-95a8a926b_linux-privilege-escalation-activity-7273223108134617089-ivzC?utm_source=combined_share_message&utm_medium=android_app&utm_campaign=share_via

Bug bounty chat

12 Dec 2024 09:41

I have a lot of private invites on bugcrowd. Lmk if u wanna hunt together.
I also have access to paid tools like osintleak, knoxss, etc

Bug bounty chat

12 Dec 2024 08:09

Shodan is a paid service so I made it free 😁

Bug bounty chat

12 Dec 2024 08:07

Sure, I will try it out. Not much of a tool guy though, I hunt manually because of the types of bugs I hunt, they are very difficult to hunt with automation tools. But I am planning to learn tools for injection related vulnerabilities

Bug bounty chat

12 Dec 2024 08:05

You might like sXtract if you do shodan dorking.
I completely automated shodan/google/dark web dorking in my automation workflow

Bug bounty chat

12 Dec 2024 08:04

I have a SaaS upcoming

Bug bounty chat

12 Dec 2024 08:03

https://github.com/Vulnpire

Bug bounty chat

12 Dec 2024 08:02

Yeah, but it's true that I have encountered some dumb developers in the journey too. One site implemented only client side JS event blocker to block any unwanted intruder to access a particular resource. Just because of not knowing js enough, I couldn’t exploit it.

Bug bounty chat

12 Dec 2024 07:59

Webshell is not a big deal, more risk if you work with personal data

Bug bounty chat

12 Dec 2024 07:57

I mean that black hat is always about illegal stuff, breaking the law

Bug bounty chat

12 Dec 2024 07:56

All I can say that you can find everything in the Internet

Bug bounty chat

12 Dec 2024 07:56

I don’t think that this is a good idea sharing black hat resources here

Bug bounty chat

15 Dec 2024 08:47

Can anyone share their experience with VAPT/pentesting interview.What are the key topics and questions should focus on for an entry-level role?

Bug bounty chat

14 Dec 2024 10:32

does anyone have Hands-On Web Exploitation
NahamSec's Bug Bounty Course
thanks

Bug bounty chat

13 Dec 2024 19:48

I'm looking for a "bug hunter," especially someone specialized in WordPress and capable of producing PoCs DM me! High payment offered.

Bug bounty chat

12 Dec 2024 09:50

Absolutely! Let's keep in touch.

Bug bounty chat

12 Dec 2024 08:10

You are an angel! Heard a lot of good things about Shodan. I will try it out from your repo then. 😁

Bug bounty chat

12 Dec 2024 08:08

Yeahh I do both. But companies like to see some projects on your resume

Bug bounty chat

12 Dec 2024 08:06

Reconnaissance and exploitation

Bug bounty chat

12 Dec 2024 08:05

Wow!! What is it about?

Bug bounty chat

12 Dec 2024 08:04

Damn! Thank you for sharing man!!

Bug bounty chat

12 Dec 2024 08:03

I wrote a lot of tools in the journey

Bug bounty chat

12 Dec 2024 08:01

Yes if there's sensitive data, the price of the shell will go up

Bug bounty chat

12 Dec 2024 07:58

Let's say,
You got a webshell, you can sell it for $60. It wont worth to risk ur life just for a $60-100

Bug bounty chat

12 Dec 2024 07:57

You need hacking skills too ofc
But depends on what you're chasing

Bug bounty chat

12 Dec 2024 07:56

Osint & research = black hat 🤔

Bug bounty chat

12 Dec 2024 07:55

I think self-learning is the way.
There's limited resources about black hat afaik.