HackingForHelp @HackingForHelp

Joined June 2018

Tweets

316
Followers

80
Following

162
Likes

711

ӉѦСҠіИԌ ҬЄѦӍ @HackingTeam777

8 months ago

Rate limit bypass techniques X-Originating-IP: 127.0.0.1 X-Forwarded-For: 127.0.0.1 X-Remote-IP: 127.0.0.1 X-Remote-Addr: 127.0.0.1 X-Client-IP: 127.0.0.1 X-Host: 127.0.0.1 X-Forwared-Host: 127.0.0.1 Sigue hilo 👇👇👇

3 69 408 38K 343

Download Image

Ninad Mishra @NinadMishra5

3 years ago

1. ./dirsearch.py -u target -e php,html,js,xml -x 500,403 2. found url.com/.svn/ 3. clone & use github.com/anantshri/svn-… 4. ./svn-extractor.py --url url.com --match database.php 5. result in output dir and just open it credit:@faizalabroni #bugbountytips

19 144 458 32K 214

Download Image

N0t0d4y @0xJin

3 years ago

👾🆄🅿🅳🅰🆃🅴👾 𝑺𝒐𝒎𝒆 𝑻𝒊𝒑𝒔 𝒖𝒑𝒅𝒂𝒕𝒆𝒅! 𝑻𝒉𝒊𝒔 𝒔𝒄𝒓𝒊𝒑𝒕 𝒊𝒔 𝒖𝒔𝒆𝒇𝒖𝒍 𝒇𝒐𝒓 𝒂𝒍𝒍 𝒏𝒆𝒘𝒄𝒐𝒎𝒆𝒓𝒔 𝒊𝒏 𝒃𝒖𝒈𝒃𝒐𝒖𝒏𝒕𝒚'𝒔 𝒘𝒐𝒓𝒍𝒅! github.com/0xJin/awesome-… #bugbounty #bugbountytips

9 43 116 0 91

HackingForHelp @HackingForHelp

3 years ago

#BugBountytip #BugBounty #BugBountytips #BugBountyhunting #bugs #Bounty #Infosys #Pentesting Bug bounty recon course advance in hindi: youtube.com/playlist?list=…

0 1 1 203 1

Vipin Panchal @dirtycoder0124

6 years ago

How to find Blind xss. #blindxss #bxss #DBF blindf.com tricks.

4 135 419 0 110

Download Image

Daniel Kelley @danielmakelley

3 years ago

30 cybersecurity search engines for researchers: 1. Dehashed—View leaked credentials. 2. SecurityTrails—Extensive DNS data. 3. DorkSearch—Really fast Google dorking. 4. ExploitDB—Archive of various exploits. 5. ZoomEye—Gather information about targets.

57 617 2K 0 2K

HackingForHelp @HackingForHelp

3 years ago

P2 bug find in live hunting #bugbountytip #bug youtu.be/B3wem5GOnK4

3 0 0 0 1

SKI MASK @Ski_Mask0

3 years ago

This month has been GREAT!! Writeup:- Shodan or google dorks? #bugbounty #bugbountytip

16 21 212 0 24

Download Image

N$ @nav1n0x

3 years ago

My 2nd RoR 'CVE-2019-5418' LFI in last 15 days. This is 3 years old bug and still exists... The page gives 404, but the buggy app is still in the server running. Add "Accept: ../../../../../../../../etc/passwd{{" to GET Request and read /etc/passwd #BugBountytips #BugBounty

19 188 666 0 232

Download Image

Ahmed Attia @Limbo0x01

3 years ago

I found a Dark-Web service where it gives you hundreds or thousands of valid accounts on any Domain literally or platform like online games! I CAN'T imagine the amount of damage this could cause Can you? I tried H1/BC companies accounts and it worked!! #bugbountytip #redteaming

48 109 667 0 192

Download Image

HackingForHelp @HackingForHelp

3 years ago

#bugbountytips #ssrf #xss ssrf and blind xss automation youtu.be/uoHh7frzWyM

1 0 1 0 0

HackingForHelp @HackingForHelp

3 years ago

Best channel for bug bounty best live hunting video every day zeeo to advance bug bounty hunting in free #bugbountytip #bugbountytips #livebughunting #live #youtube #infosec #bounty #bugs #bugbounty #Viral youtube.com/channel/UC3Aj7…

0 0 1 0 0

black viru5 @Yazeed_oliwah

3 years ago

New p2 🔥💪 Bug : PII Leaked On Unauthorized file - Do dirsearch using great wordlist from great guy @GodfatherOrwa Link: github.com/orwagodfather/… - /logs/ ===> 403 - Diresearch again - /logs/user.txt and BOOM 🔥 #bugbountytips #bugbountytip #bugbounty

41 158 497 0 199

Download Image

encodedguy - jsmon.sh @3nc0d3dGuY

3 years ago

👉Used httpx on hosts.txt, to see hosts which have web servers. 👉Grabbed screenshots, use nuclei template or aquatone. 👉One host was having a secret-looking login panel. 👉Wordlist attack, with username: admin and 10k common passwords. 👉Successful Login

2 2 24 0 3

encodedguy - jsmon.sh @3nc0d3dGuY

3 years ago

🤠Story of a Critical Bug on Large Scope Public Program on Hackerone. Can't Disclose Program. 👉 Org has an ASN. So, I copied all CIDR ranges to a file ranges.txt 👉 Using masscan, scanned all ranges quickly in around 2 hours, and saved to a file hosts.txt 👇

19 36 149 0 60

N$ @nav1n0x

3 years ago

One more directory traversal done and dusted today. Payload: "//////////////////../../../../../../../../etc/passwd" #BugBounty

33 175 875 0 250

Download Image

🇸🇦 Murtada Bin Abdullah (Rood) @0x_rood

3 years ago

1- found port 8888 open at shodan 2- login panel 3- fuzz and found /api 4- this endpoint have section called password that's have username and password but password encrypted with jwt 5- decrypt password in jwt.io 6- access to dashboard #bugbountytips #bugbounty