Bug bounty chat

22 Sep 2023 20:45

I made lots of scripts to help me and save time

Bug bounty chat

22 Sep 2023 20:43

There are a lot of paid template u can not imagine how they work and still useless

Bug bounty chat

22 Sep 2023 20:40

Nuclei is the biggest wast of time

Bug bounty chat

22 Sep 2023 15:32

Can you send whole screenshot

Bug bounty chat

22 Sep 2023 14:24

Do you think I can report that I can inject code into HTTP headers and reflect them because the TRACE method is enabled? Does anyone know if I can achieve an impact from this? I have seen reports that justify the impact because it can be stored in logs or cause some XSS at another point in the application.

Bug bounty chat

22 Sep 2023 13:39

Try injecting internal port on Host: header like Host:x.com:1024 or Host:localhost

Bug bounty chat

22 Sep 2023 11:25

Ideas to bypass Django panel admin authentication?

Bug bounty chat

22 Sep 2023 07:42

During the testing of a domain, i accidently found its subdomain which was the server page. Where it was mentioning:

Welc9me to nginx!
If you see this page the nginx server is successfully installefld and working.

Now when i try to acces example.com/.htaccess
It gives 403. Even i tried for /%2ehtaccess but still it is blocking. Now what should i try?

Bug bounty chat

21 Sep 2023 19:36

#bitrix 🚨🚨🚨

Уязвимость модуля landing системы управления содержимым сайтов (CMS) 1С-Битрикс: Управление, позволяющая нарушителю выполнить команды ОС на уязвимом узле, получить контроль над ресурсами и проникнуть во внутреннюю сеть.

Bitrix > 23.850.0
RCE, CVSS 10/10

Удаляем модуль landing, если не используется. Обновляем до версии 23.850.0 и выше, если используется.

BDU:2023-05857

Че, пацаны, анимэ?

Bug bounty chat

21 Sep 2023 19:28

And in this jason admin directory i get some email ph.no transaction id and bcrypt hashed password but the password can't cracked so can i report that information disclosure or broken access control and another question does it high vulnerability

Bug bounty chat

21 Sep 2023 15:54

hello guys i am studying bug bounty and networking for 1 year so does hacker1 pay me by finding vulnerabilities or it need exploitation

Bug bounty chat

21 Sep 2023 05:13

I found aws keys, how to exploit it?

Bug bounty chat

20 Sep 2023 14:57

Yes i did it...but what i mean is how to convert stream to pdf if get a stream object code

Bug bounty chat

20 Sep 2023 11:12

I have got a pdf stream i want to conveet it into pdf document

Bug bounty chat

19 Sep 2023 21:09

This is unbelievably insanely dope.
this week is gonna be good.

Jazakallah

Bug bounty chat

22 Sep 2023 20:45

U cannot achive more than xss or some flase positive or maybe some intentional bugs which aren't eligible for a bounty

Bug bounty chat

22 Sep 2023 20:41

Nuclei with custom templates is insanely good

Bug bounty chat

22 Sep 2023 19:52

Does it do the same with https?

Bug bounty chat

22 Sep 2023 15:19

Hello all please help me, I just bought a vps and running nuclei but I found information like this on nuclei Templates clustered: 1194 (Reduced 1133 Requests) Is yours also like that?

Bug bounty chat

22 Sep 2023 13:40

In admin page on a specific directory fuzz as much as you can headers params cookies... chance of 80% u will get somewhere ro analyze more

Bug bounty chat

22 Sep 2023 12:51

Possible ways to bypass WAF specifically for SSRF

Bug bounty chat

22 Sep 2023 08:10

I will teach free Hacking for newbie

Bug bounty chat

21 Sep 2023 19:53

Как же мы все любим Битрикс, обожаем просто , рай для хакеров

Bug bounty chat

21 Sep 2023 19:28

Thanks for answering

Bug bounty chat

21 Sep 2023 18:12

Vulnerabilities. You would obviously need to show how it’s vulnerable though. So for example, you stumble across a reflected xss, just do a recording of a non damaging tag like the alert. Don’t actually inject a damaging payload

Bug bounty chat

21 Sep 2023 06:45

Long term or temporary ones? AK..... long term, use Pacu and try to do some situational awareness and find out what you can do, on the other hand, temporary keys, unless you got them by assuming a role, They might probably be already expired.

Bug bounty chat

20 Sep 2023 19:05

I recommend anyone new or struggling to try this out. I have taken 7 so far and its worth every penny. Be a master yourself and stop getting confused

Bug bounty chat

20 Sep 2023 12:36

copy the url from burp then paste to browser

Bug bounty chat

20 Sep 2023 09:30

Guys anyone know how to convert pdf code to pdf Document

Bug bounty chat

19 Sep 2023 21:04

If You can solve without walkthrough then your are master. 😉