Dluka

🚨XSS Found🚨 1⃣ katana -u "url" -d 5 -ps -pss waybackarchive,commoncrawl,alienvault -kf -jc -fx -ef woff,css,png,svg,jpg,woff2,jpeg,gif,svg thx man @coffinxp7 🥂 2⃣ nuclei -t /string/dast/ -dast -headless 3⃣ Confirm payloads!

@MiteshValvi12 @coffinxp7 man the command is what is being shown! 😃

@4kulD @coffinxp7 Command is

🚨 SQL Injection Found! 🚨 Thx man @coffinxp7 🥂

🚨 Exploit confirmed! 🚨 Using Nuclei, I identified the CVE-2018-8033 vulnerability in an XML-RPC endpoint. To validate the finding, I reproduced the attack in Burp Suite and confirmed the flaw by accessing the /etc/passwd file. #CyberSecurity #Pentest

SQL injection Critical vulnerability in the Country State City Dropdown plugin.$WordPress.$ #BugBounty