Reflected XSS😎 Payload: <script>window['alert'](document['cookie'])</script> #bugbountytips #bugbountytip #bugbounty #hackerone #xss #payload

Reflected XSS on Adobe #bugbountytips #bugbountytip #bugbounty #hackerone #xss

Recon Wins| Write-up Collection🔽| infosecwriteups.com/900-xss-in-yah… medium.com/@kirtanpatel91… vedanttekale20.medium.com/spend-more-tim… cryptograph3r.blogspot.com/2021/02/recon-… infosecwriteups.com/how-we-got-lfi… medium.com/@abdelfattahib… medium.com/@th3g3nt3l/how… mah3sec.medium.com/p1-easy-access… #bugbountytip #bugbountytips #recon #cybersecurity

A cheat sheet that contains advanced queries for SQL Injection of all types github.com/kleiton0x00/Ad… #infosec #bugbountytips #cybersecurity

🧵Mistakes I make in hacking or bug bounty 🧵 #bugbountytips and hacking tips I wish I always adhered to 🙃 cc @sr_b1mal

Yeah😎 HackerOne #bugbountytips #BugBounty #hackerone

I've found this interesting read on YesWeHack ⠵ written by Six2dez 🇵🇸 that gives a great comparaison between tools: blog.yeswehack.com/yeswerhackers/…

So many beginners ask what to do after finding subdomains 🧵 1. Do directory search 2. Do Github dork 3. Do google dork 4. FUZZ for params 5. FUZZ for vhosts 6. Find Wayback data (gau, waybackurl) 7. Find javascript files 1/n

Recon Methodology | Resources🔽| offensity.com/en/blog/just-a… book.hacktricks.xyz/generic-method… dhiyaneshgeek.github.io/bug/bounty/202… infosecwriteups.com/recon-methodol… sidxparab.medium.com/best-bugbounty… vedanttekale20.medium.com/spend-more-tim… gowthams.gitbook.io/bughunter-hand… #bugbountytip #bugbountytips #recon #cybersecurity #Pentesting (1/2)

Collab with (:) on Apple Bug Bounty Program support.apple.com/en-us/HT201536 #infosec #bugbounty

Last month was my highest in bug bounty so far with almost $131k in bounty. Total paid reports: 18 Average reward: $7.3k Category: most were logical findings via reversing mobile applications and discovering internal endpoints leading to code execution and missing auth etc

Hi, I registered my first CVE. It's not great, but it's suitable for a start.