ExploitHub

08 Jun 2020 04:16

“Story of Blind SQL with a typo error.” by Amyrahm https://link.medium.com/JPfCxQzF86

ExploitHub

08 Jun 2020 03:55

How to write a Bug Bounty report: http://10degres.net/how-to-write-a-bug-bounty-report/

ExploitHub

22 Apr 2020 04:22

corneacristian/data-exfiltration-over-dns-queries-via-morse-code-efc9e09f56fe" rel="nofollow">https://medium.com/@corneacristian/data-exfiltration-over-dns-queries-via-morse-code-efc9e09f56fe

ExploitHub

12 Mar 2020 01:26

Content Security Policy (CSP) Bypasses http://ghostlulz.com/content-security-policy-csp-bypasses/

ExploitHub

28 Feb 2020 08:09

https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html

ExploitHub

28 Feb 2020 08:09

https://smaranchand.com.np/2020/02/the-tricky-xss/

ExploitHub

28 Feb 2020 08:09

https://blog.intigriti.com/2020/02/24/twitter-recap-1-bug-bounty-tips-by-the-intigriti-community/

ExploitHub

28 Feb 2020 08:09

Use path parameters if server is Apache Tomcat & running jsp pages . Like
http://site.com/test.jsp;test=<payload>
, This pages can sometimes give xss.
#bugbounty

ExploitHub

23 Feb 2020 15:03

https://medium.com/tenable-techblog/exploiting-jira-for-host-discovery-43be3cddf023

ExploitHub

23 Feb 2020 02:27

Base Scheme Decoder
https://github.com/mufeedvh/basecrack

ExploitHub

23 Feb 2020 02:20

Top 25 IDOR Bug Bounty Reports
corneacristian/top-25-idor-bug-bounty-reports-ba8cd59ad331" rel="nofollow">https://medium.com/@corneacristian/top-25-idor-bug-bounty-reports-ba8cd59ad331

ExploitHub

23 Feb 2020 02:14

Tale of Account Takeovers (Part-1)
bathinivijaysimhareddy/tale-of-account-takeovers-part-1-b24e1f3c3187" rel="nofollow">https://medium.com/@bathinivijaysimhareddy/tale-of-account-takeovers-part-1-b24e1f3c3187

ExploitHub

22 Feb 2020 05:23

d3f4u17/fasten-your-recon-process-using-shell-scripting-359800905d2a" rel="nofollow">https://medium.com/@d3f4u17/fasten-your-recon-process-using-shell-scripting-359800905d2a

ExploitHub

22 Feb 2020 04:33

https://medium.com/bugbountywriteup/reflected-dom-xss-and-clickjacking-on-https-silvergoldbull-de-bt-html-daa36bdf7bf0

ExploitHub

22 Feb 2020 04:33

Sentive Data Exposure
Sheshasai/sentive-data-exposure-fad568b7875" rel="nofollow">https://medium.com/@Sheshasai/sentive-data-exposure-fad568b7875

ExploitHub

08 Jun 2020 04:14

“Penetration Testing Roadmap” by Knightsbr1dge https://link.medium.com/8ZZhEUqF86

ExploitHub

05 Jun 2020 20:54

Account takeover via postMessage: https://yxw21.github.io/2020/06/05/Account-Takeover-Via-PostMessage/

ExploitHub

09 Apr 2020 21:51

Everything you want to know about IOT Security ! Simplified https://medium.com/bugbountywriteup/everything-you-want-to-know-about-iot-security-simplified-7dca1b9e1c22

ExploitHub

28 Feb 2020 08:10

shahjerry33/long-string-dos-6ba8ceab3aa0" rel="nofollow">https://medium.com/@shahjerry33/long-string-dos-6ba8ceab3aa0

ExploitHub

28 Feb 2020 08:09

JSON Web Tokens vs. Session Cookies for Authentication
https://t.co/ok14MFmdvL

Remembering the Shellshock Vulnerability
https://t.co/xUGGhKSvP5

4 Uncommon Python Tricks You Should Learn
https://t.co/bOOvVe92Us

#bugbountytips

ExploitHub

28 Feb 2020 08:09

ozguralp/write-up-aws-document-signing-security-control-bypass-2b13a9c22a4d" rel="nofollow">https://medium.com/@ozguralp/write-up-aws-document-signing-security-control-bypass-2b13a9c22a4d

ExploitHub

28 Feb 2020 08:09

#WAF #ModSecurity #RCE #Payloads Detection #Bypass
;+$u+cat+/etc$u/passwd$u
;+$u+cat+/etc$u/passwd+\#
/???/??t+/???/??ss??
/?in/cat+/et?/passw?

ExploitHub

28 Feb 2020 08:09

Alway convert parameter to array you will get unexpected result, some times xss bypass
Like,
path=/abc to path["]=/abc
#bugbountytip

ExploitHub

23 Feb 2020 02:29

Google ADS Stored Xss & Html Injections 5000$
https://www.youtube.com/watch?v=O5BWtwykJJg

ExploitHub

23 Feb 2020 02:26

From Recon to Optimizing RCE Results - Simple Story with One of the Biggest ICT Company in the World
YoKoKho/from-recon-to-optimizing-rce-results-simple-story-with-one-of-the-biggest-ict-company-in-the-ea710bca487a" rel="nofollow">https://medium.com/@YoKoKho/from-recon-to-optimizing-rce-results-simple-story-with-one-of-the-biggest-ict-company-in-the-ea710bca487a

ExploitHub

23 Feb 2020 02:17

FinDir is Directory brutefocer which can be used to run 24/7 againts target and will provide you the notification on Telegram once it finds any open directory
https://github.com/m4xx101/FinDir

ExploitHub

23 Feb 2020 02:13

Finding a P2 in two minutes with Shodan.io
sw33tlie/finding-a-p2-in-two-minutes-with-shodan-io-647e86744ee6" rel="nofollow">https://medium.com/@sw33tlie/finding-a-p2-in-two-minutes-with-shodan-io-647e86744ee6

ExploitHub

22 Feb 2020 05:16

“Recon Everything” by SACHIN GROVER https://link.medium.com/ReykAnzk23

ExploitHub

22 Feb 2020 04:33

How PayPal helped me to generate XSS
pflash0x0punk/how-paypal-helped-me-to-generate-xss-9408c0931add" rel="nofollow">https://medium.com/@pflash0x0punk/how-paypal-helped-me-to-generate-xss-9408c0931add

ExploitHub

22 Feb 2020 04:33

HOW I BYPASSED 2 FACTOR AUTHENTICATION
manralhemant10/how-i-bypassed-2-factor-authentication-899750421331" rel="nofollow">https://medium.com/@manralhemant10/how-i-bypassed-2-factor-authentication-899750421331