@insecrez

馃寪| Security Engineer 馃悶| Part-Time EH 鈿★笍| Memer 馃珎| Need professional help.? Book now 馃憞馃憞

 India
topmate.io/insecrez
Joined October 2019
  • Tweets1.7K
  • Following200
  • Followers5.4K
314Media
Automated creativity gives endless possibilities, but it's your duty to maintain authenticity, for newer possibilities.
6
950
Content Discovery for Cross-Site Scripting vulnerability (XSS) 1. Collect historical URLs for the target - gau --subs target.com > gau_urls.txt - waybackurls target.com >> wayback_urls.txt
3
10
82
3,697
more replies
15. Validation Check - Does the payload execute? - What is the context? - Can it be chained?
1
2
156
Finding and going with this approach will get you your first XSS issue, with least hardwork. Peace and Salam鉁岋笍
4
145
Finding Sensitive Information Disclosure bugs, couldn't be this much easy
1
6
50
2,284
more replies
14. Validation Checks :- - Is the endpoint / files found legit or related to target.? - Are the files found critical in nature.? - Does the endpoint leads to sensitive areas.? - Does the files have PII related issues in it.?
1
2
113
These steps will help you achieve and get your first sensitive information disclosure bug during bug-bounty hunting. Peace and Salam 鉁岋笍
1
3
121
Load more