Sharo K h @Sharo_k_h

Junior Hunter🙂 My Github: https://t.co/WsNwpIuISb Afghanistan, Herat Joined August 2021

Tweets

953
Followers

1K
Following

879
Likes

6K

Parsa @Muntrive

2 weeks ago

امشب با @Sharo_k_h روش کار کردیم و دوباره عالله شد. جدا ازین کلی چیز میزه باحال راجبه مرورگر یاد گرفتم ازش که واقعا میتونم بگم 🤯

Parsa @Muntrive

2 weeks ago

امشب با @Sharo_k_h روش کار کردیم و دوباره عالله شد. جدا ازین کلی چیز میزه باحال راجبه مرورگر یاد گرفتم ازش که واقعا میتونم بگم 🤯 https://t.co/vkTX6GaIvA

55 3 162 17K 22

6 1 92 3K 12

Download Image

Sharo K h @Sharo_k_h

4 weeks ago

🚀 New Tool Alert! Easily parse _buildManifest.js files from Next.js web apps 🔍 🛠 Try it online: sharokhataie.github.io/build-manifest… 💻 Source code: github.com/SharokhAtaie/b… #BugBounty #JS #NextJS #WebSecurity

5 42 207 17K 158

Download Image

Sharo K h @Sharo_k_h

4 months ago

اینم از جمعه ما🥳

16 0 61 4K 2

Download Image

Sharo K h @Sharo_k_h

4 months ago

۳ تا cve ساده که قبلا زده بودم اگه دوست داشتید حتما بخونید t.me/gotocvechat/27… مرسی از علی جان بابت وقتی که برا ما میذاره🙏❤️ @soltanali0

5 3 39 2K 5

Download Image

🧵 Bug Bounty Methodology 🧵 After reading countless write-ups and checklists, I created my own methodology that has helped me find vulnerabilities effectively. #BugBounty #Infosec #Cybersecurity #ethicalhacking #BugBountytip #BugBountytips #methodology

2 6 41 5K 51

Sharo K h @Sharo_k_h

11 months ago

I have created a chrome extension for extract endpoints and urls from js files. You can use it for modern web app which this tool watch for new js files that loaded (lazyload). github.com/SharokhAtaie/e… #BugBounty #tools #PenTest

5 11 74 3K 41

Sharo K h @Sharo_k_h

a year ago

JsFuck ❌ FuckJS ✅ We also bypassed a very strict Cloudflare WAF with @ehsan_nkd @0xb0hl00l . Hint: When you face a WAF that allows you to use `javascript:` scheme but blocks every payload that you know, DEFINE variables! #HiveCommunity #BugBounty #hackerone #XSS

5 6 84 13K 45

Download Image

Sharo K h @Sharo_k_h

a year ago

Discovered an XSS vulnerability but Imperva WAF blocked it? Try this XSS payload to bypass Imperva's protection. <details x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:2 open ontoggle=&#x0000000000061;lert&#x000000028;origin)> #bugbounty #bypass_imperva #xss #hacking

13 57 345 20K 262

Download Image

Sharo K h @Sharo_k_h

2 years ago

XSS Tip: If you have two parameter reflections in a JavaScript context and can't close the script tag or break the string with ( " ), you can use a backslash ( \ ) to escape the ( " ) of the first reflection and inject your JavaScript payload in the second reflection.