Discover and read the best of Twitter Threads about #bubgounty
Most recents (2)
➡ Base Steps :
1. Create two accounts if possible or else enumerate users first.
2. Check if the endpoint is private or public and does it contains any kind of id param.
3. Try changing the param value to some other user and see if does anything to their account.
🧵(2/n) :👇
1. Create two accounts if possible or else enumerate users first.
2. Check if the endpoint is private or public and does it contains any kind of id param.
3. Try changing the param value to some other user and see if does anything to their account.
🧵(2/n) :👇
➡ Testcase 1: Add IDs to requests that don’t have them
GET /api/MyPictureList → /api/MyPictureList?user_id=<other_user_id>
Pro tip: You can find parameter names to try by deleting or editing other objects and seeing the parameter names used.
🧵(3/n) :👇
GET /api/MyPictureList → /api/MyPictureList?user_id=<other_user_id>
Pro tip: You can find parameter names to try by deleting or editing other objects and seeing the parameter names used.
🧵(3/n) :👇
SSH Tunneling / Pivoting 🌵
1. Local port forwarding
2. Remote port forwarding
3. Dynamic port forwarding
4. sshuttle
5. Plink local port forwarding
#cybersecurity #hacking #bubgounty #bugbountytips #infosec
1/3 👇🏿✔
1. Local port forwarding
2. Remote port forwarding
3. Dynamic port forwarding
4. sshuttle
5. Plink local port forwarding
#cybersecurity #hacking #bubgounty #bugbountytips #infosec
1/3 👇🏿✔
1. Local port forwarding
ssh <gateway> -L <local port to listen>:<remote host>:<remote port>
2. Remote port forwarding
ssh <gateway> -R <remote port to bind>:<local host>:<local port>
3. Dynamic port forwarding
ssh -D <local proxy port> -p <remote port> <target>
2/3 👇🏿✔
ssh <gateway> -L <local port to listen>:<remote host>:<remote port>
2. Remote port forwarding
ssh <gateway> -R <remote port to bind>:<local host>:<local port>
3. Dynamic port forwarding
ssh -D <local proxy port> -p <remote port> <target>
2/3 👇🏿✔
4. sshuttle
sshuttle -vvr user@x.x.x.x
5. Plink local port forwarding
plink -l root -pw pass -R 3389:<localhost>:3389 <remote host>
🤜🏻🔥
Thank You so much for reading this
I'm so thankful to you
Follow me if you want thread like these
3/3 ✔
sshuttle -vvr user@x.x.x.x
5. Plink local port forwarding
plink -l root -pw pass -R 3389:<localhost>:3389 <remote host>
🤜🏻🔥
Thank You so much for reading this
I'm so thankful to you
Follow me if you want thread like these
3/3 ✔
