it was way back in 2016 and i was new to this bug bounty thing, alot has changed since then i saw a disclosed report regarding open redirect on a public program on hackerone website and also there was other disclosed bug regarding XSS too, so i opened the open…

hi everyone, i hope you all are doing fantastic, in this blog i will tell you how you can modify response of web server using burp suite its pretty easy but i know the struggle of beginners while using burp so this tutorial is especially for beginners( 1337s please don’t…

this blog is about teaching you how you can find Cisco ASA Path Traversal (CVE-2020–3452) find the subdomain containing vpn in it example “vpn.buggywebsite.com” “vpn02.buggywebsite.com” etc. open burp suite Repeater tab and paste this request GET /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ HTTP/1.1 Host: vpn.buggywebsite.com Connection: close

hey guys in this post i will tell you how you can run dirsearch on windows PC step 1. go to https://github.com/maurosoria/dirsearch and download zip file and extract in any folder you like it will look like this step 2. press shift key + right click and select “open command window here” and also make sure you have python 3 installed and path is set correctly

Hi everyone, this is my second post on medium, hope you all are getting huge bounties, lets cut to the chase, here i compiled list of some tips given by reputed bug hunters on the tweet posted by intigriti.com i don’t remember who posted what , so i wont be…

Hi everyone, This post is about low effort P2 bug, this bug is not common and its severity is high but finding it is a piece of cake and only takes less than 5 minutes here is a step by step procedure: lets say we have target example.com go to…