#bugbountytips You don't need to write a bash script to fuzz multiple URLs with ffuf, you can simply do ffuf -w urls.txt:URL -w wordlist:FUZZ -u URL/FUZZ You can also omit the / if your URL list already has slashes ;)

link.medium.com/bBV7jmdQ1xb

Cloudflare XSS protection bypass: "><Svg Only=1 OnLoad=confirm(atob("Q2xvdWRmbGFyZSBYU1MgQG1fa2VsZXBjZQ=="))>

Sql injection is not necessary inject at payload, You can inject in path Path: /en/gallery/1 POC: en/gallery/1'XOR(if(now()=sysdate(),sleep(3),0))OR' #bugbountytips #bugbounty

Server Access: Admin Panel and RFU Bypass by Mohammad Sadra Naderi (ZVitoX) link.medium.com/dWfMeeeiIKb

I just published IDOR vulnerability allow attacker to make a checkout order on behalf of other users link.medium.com/W2D3rlSmVKb #BugBounty #bugbountytip #security #Hacking

url/?f=etc/passwd ==> 403 encode etc/passwd as base64 url/?f=L2V0Yy9wYXNzd2Q= ==> 200 #note you can use this trick in SQL , SSTI , XSS , LFI , Etc... By:Godfather Orwa 🇯🇴 #bugbountytips #BugBounty

RCE bug bounty tip: Add " /__better_errors " endpoint to your wordlist. Thread 👇 #bugbounty #bugbountytips #bugbountytip

What is this 😭 username=bombon&password=undefined 200 OK username=AnyUser&password=undefined 200 Ok It gives you the access token just by providing the username and requesting the password as ‘undefined’ letting you to basically authenticate to any account..

@marsxc0 and I found a critical bug in a program with 800+ reports Tip: Study from a user’s perspective and take time to convince the triager of the bug’s priority—it can shift from “Not Applicable” to P1 continued.. @bugcrowd #ItTakesACrowd #bugbountytips #bugbounty #bugcrowd

امبارح كنت بفكر في مدى خطورة إن أولادي إن شاء الله في وقت الغرس بيشوفوا العالم بعيوني أنا أسأل الله أن يهديني ويسددني

Reached a new achievement 🏆 Top 5 spot on Twilio’s 2024 vulnerability leaderboard with 12 valid submissions! A special thanks to twilio and bugcrowd for their continued support of the security research community. #bugbounty #infosec #cybersecurity #twilio #bugcrowd