Sharo K h @Sharo_k_h

Junior Hunter🙂 My Github: https://t.co/WsNwpIuISb Afghanistan, Herat Joined August 2021

Tweets

958
Followers

1K
Following

893
Likes

6K

Sharo K h @Sharo_k_h

2 months ago

🚀 New Tool Alert! Easily parse _buildManifest.js files from Next.js web apps 🔍 🛠 Try it online: sharokhataie.github.io/build-manifest… 💻 Source code: github.com/SharokhAtaie/b… #BugBounty #JS #NextJS #WebSecurity

5 42 208 18K 162

Download Image

Sharo K h @Sharo_k_h

5 months ago

اینم از جمعه ما🥳

16 0 62 4K 2

Download Image

Sharo K h @Sharo_k_h

5 months ago

۳ تا cve ساده که قبلا زده بودم اگه دوست داشتید حتما بخونید t.me/gotocvechat/27… مرسی از علی جان بابت وقتی که برا ما میذاره🙏❤️ @soltanali0

5 3 38 2K 5

Download Image

🧵 Bug Bounty Methodology 🧵 After reading countless write-ups and checklists, I created my own methodology that has helped me find vulnerabilities effectively. #BugBounty #Infosec #Cybersecurity #ethicalhacking #BugBountytip #BugBountytips #methodology

2 6 41 5K 51

Sharo K h @Sharo_k_h

a year ago

I have created a chrome extension for extract endpoints and urls from js files. You can use it for modern web app which this tool watch for new js files that loaded (lazyload). github.com/SharokhAtaie/e… #BugBounty #tools #PenTest

5 11 74 3K 40

Sharo K h @Sharo_k_h

a year ago

JsFuck ❌ FuckJS ✅ We also bypassed a very strict Cloudflare WAF with @ehsan_nkd @0xb0hl00l . Hint: When you face a WAF that allows you to use `javascript:` scheme but blocks every payload that you know, DEFINE variables! #HiveCommunity #BugBounty #hackerone #XSS

5 6 83 13K 45

Download Image

Sharo K h @Sharo_k_h

a year ago

Discovered an XSS vulnerability but Imperva WAF blocked it? Try this XSS payload to bypass Imperva's protection. <details x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:2 open ontoggle=&#x0000000000061;lert&#x000000028;origin)> #bugbounty #bypass_imperva #xss #hacking

13 58 346 20K 261

Download Image

Sharo K h @Sharo_k_h

2 years ago

XSS Tip: If you have two parameter reflections in a JavaScript context and can't close the script tag or break the string with ( " ), you can use a backslash ( \ ) to escape the ( " ) of the first reflection and inject your JavaScript payload in the second reflection.