KAsh Security

MOBEXLER 📍 A Mobile Application Penetration Testing Platform github.com/enciphers-team… NB: Content Sharing != Content Stealing #Hacking #infosecurity #infosec #Pentesting #redteam #pwn #CyberSecurity #CTF #CyberSecurity #ArtificialIntelligence #CyberSecurityAwareness

Bypass open redirection whitelisted using chinese dots: 👀🔓🔍 %E3%80%82 Tip: Keep eyes on SSO redirects 😉🔀 credit: @adrielsec #bugbounty #bugbountytips

If you are trying to access an endpoint and get 403 try this /api/docs/index.html ==> 403 Forbidden /api/Docs/index.html ==> 200 Ok By:@D0L0RESH4Z3 #BugBounty #bugbountytips

Web App pentesting checklist is here.

Here are XSS Payloads To Bypass Firewall Credit/source- @Pwn4arn

SQLi time based from WaybackURLs Part 1 waybackurls testphp.vulnweb.com | grep -E '\bhttps?://\S+?=\S+' | grep -E '\.php|\.asp' | sort -u | sed 's/\(=[^&]*\)/=/g' | tee urls.txt | sort -u -o urls.txt #bugbountytips #bugbounty

POSSIBLE HEADER INJECTION POINT WHERE YOU CAN TEST PAYLOADS :) #BugBounty #bugbountytips

Looking for another way to call "alert(1)" for #XSS? Add this one to your list: 'a'.replace.call`1${/./}${alert}`/ By:@grumpzsux #bugbountytips #bugbounty

Found an Email Verification Bypass. Tip: There is IP-based rate limiting so I used IP-Rotator Burp Extension and Bypassed the Rate Limting. #BugBounty #bugbountytip #bugbountytips #togetherwehitharder

Another day, another #SQLInjection. This time, it's in the User-Agent header, leading a full database takeover. Keep testing SQLi on everything and everywhere... #SQL #SQLinjection #BugBounty.

ADVANCE CRLF INJECTION ;)

BUG HUNTING METHODOLOGY BY COFFIN ;)

I've made over 100k on SSRF vulnerabilities. They aren't always as simple as pointing it at localhost or AWS Metadata service. Here are some tricks I've picked up over the past 5 years of web app testing:

I just added an extra property 'is-site-admin':true, and voilà, I became one of the site admins.🤣🤣🤣🤟🤟#bugbounty

If your target scope is small: Dive into the main JavaScript files. I spotted an open redirect in just 5 minutes this way, earning just €100 Tools I use: • Hakrawler for extracting JavaScript files. • LinkFinder for endpoint discovery in JS files. Check the links bellow ↓

@aroly @albinowax Found anything?

Daily Notes : Day 34 Phone Number Parameter Explotation It's possible to add strings at the end the phone number that could be used to exploit common injections (XSS, SQLi, SSRF etc…. ) Check Link and image Reference: book.hacktricks.xyz/pentesting-web…

@696e746c6f6c Why not wait for disclosure and then blog?

PoC Code for Linux Kernel Privilege Escalation Flaw (CVE-2023-259) Published securityonline.info/poc-code-for-l…

Splunk RCE - Proof of concept exploit for CVE-2023-46214, SVD-2023-1104 github.com/nathan31337/Sp…