This media is not supported in your browser
VIEW IN TELEGRAM
"Β© <COMPANY>. all rights reserved." -".<COMPANY>.com"Please open Telegram to view this post
VIEW IN TELEGRAM
π₯17β€8π4π±1
Hey Hunter's,
DarkShadow here back again!
A hidden backdoor was in PHP version which allow remote code execution In user-agent header.
Guess Guy's which version it is?
#backdoor
DarkShadow here back again!
A hidden backdoor was in PHP version which allow remote code execution In user-agent header.
Guess Guy's which version it is?
#backdoor
β€19π2π¨βπ»1
site:example[.]com ext:log | ext:txt | ext:conf | ext:cnf | ext:ini | ext:env | ext:sh | ext:bak | ext:backup | ext:swp | ext:old | ext:~ | ext:git | ext:svn | ext:htpasswd | ext:htaccess | ext:json
Please open Telegram to view this post
VIEW IN TELEGRAM
β€31π14π₯6
Please open Telegram to view this post
VIEW IN TELEGRAM
1π₯24β€8π4π4π€1
Please open Telegram to view this post
VIEW IN TELEGRAM
β€14π9π2
Google Dork - XSS Prone Parameters π₯
site:example[.]com inurl:q= | inurl:s= | inurl:search= | inurl:query= | inurl:keyword= | inurl:lang= inurl:&Please open Telegram to view this post
VIEW IN TELEGRAM
π11β€8π€¨1
Please open Telegram to view this post
VIEW IN TELEGRAM
β€10π4π₯3π2
β¨οΈ
wget -r --no-parent -R "index.html*" wordlists-cdn.assetnote.io/data/ -nH -e robots=offPlease open Telegram to view this post
VIEW IN TELEGRAM
π₯14
Please open Telegram to view this post
VIEW IN TELEGRAM
owasp-noir.github.io
OWASP Noir
Hunt every endpoint in your code. Noir statically analyses source across 29 languages and 205 frameworks, exposing shadow APIs and mapping the attack surface.
π13
Hey Hunter's,
DarkShadow here back again!
SSRF in pdf generation!
this api endpoint send the pdf generation request:
POST /api/v1/convert/markdown/pdf
Add this payload:
<img src=βburp collab urlβ />
comes 200ok and hit request in burp collaborator.
You can follow me in my x.com/darkshadow2bd
#ssrf #bugbountytips
DarkShadow here back again!
SSRF in pdf generation!
this api endpoint send the pdf generation request:
POST /api/v1/convert/markdown/pdf
Add this payload:
<img src=βburp collab urlβ />
comes 200ok and hit request in burp collaborator.
You can follow me in my x.com/darkshadow2bd
#ssrf #bugbountytips
β€14π₯4
Forwarded from Brut Security (Saumadip Mandal)
breaking_into_cyber_security_successfully.pdf
1.6 MB
π2