Deep Recon - with awesome tips to find P1 and easy hunting скачать в хорошем качестве

Deep Recon - with awesome tips to find P1 and easy hunting

Its a bug bounty stream. 📱Social Media📱 Instagram:@virdoex_hunter Github:@Virdoexhunter Telegram:@Virdoex_hunter Facebook:‪@Virdoex‬ Twitter: @virdoex_hunter Deep Recon: Passive subdomain enumeration 1. Subfinder with all config api keys 2. assetfinder 3. amass 4. crt sh 5. censys 6. certspotter Active Sub enumeration: 1. bruteforce : puredns 2. alteration : dnsgen ( with massdns) 3. Permutation : gotator ( with massdns) Telegram : Virdoex_hunter After sub enum what need to do: 1. Filter each subdomain using httpx 2. run nuclei 3. naabu -list domains.txt -p - -o ports -json 4. naabu -list domains.txt -tp -o 100ports -json SSRF: 1. burpcollab:port 2. 102.168.1.189 1 to 255 Logout CSRF from P5 to P2: community : post : comment : profile bio link (html injection: forums where we can comment img src="logouturl" 1. target.com /jira 2. target.com/jira 3. target.com/jira/projects 4/ each project : disclose slack channel invite in comment #intigrity #hackerone #bugcrowd #h1reports #hacker #bugbounty #bugbountytips #recommended #recon #P1 #information #informationdisclosure #bugbountyhunter #cybersecurity #analyst