Tweet

Maybe Scrolly?

Hossein NafisiAsl

Follow @MeAsHacker_HNA

May 11 • 8 tweets • 2 min read

Have you ever get bounty by using default credentials?
Read this thread 🔥

#bugbountytips
🧵👇🏻

You need to have a special word list for each vendor.

This thread has most known vendors default credentials that gathered from several sources.

Default Credentials for Apache Tomcat:

2/
Default Credentials for Cisco

3/
Default Credentials for IBM

4/
Default Credentials for Oracle

5/
Default Credentials for Windows(RDP)

6/
Default Credentials for Telnet

7/
More Vendors:
github.com/NafisiAslH/Kno…

• • •

Missing some Tweet in this thread? You can try to force a refresh

This Thread may be Removed Anytime!

Twitter may remove this content at anytime! Save it as PDF for later use!

More from @MeAsHacker_HNA

Hossein NafisiAsl

@MeAsHacker_HNA

May 12

How We hacked Admin Panel just by JS file:
(step by step)
#bugbounty #bugbountytips

🧵👇🏻

1/ Introduction 📖

Team gave mobile app and website.

We didn’t waste of time on mobile app and decided to work on website.

We just tried to find Admin Panel because main domain was just a single page to download the app.

2/ Subdomain Enumeration 🔎

After brute forcing the subdomains we found that website had a subdomain like that admin.target.com

When we visited the subdomain we just got that Login Portal

Read 8 tweets

Hossein NafisiAsl

@MeAsHacker_HNA

Mar 9

https://twitter.com/MeAsHacker_HNA/status/1501452559365644294

#Secret1
Top 10 Automatic Recon Tools

#Recon #BugBounty
#100BugBountySecrets
🧵👇

https://twitter.com/MeAsHacker_HNA/status/1501452559365644294

1/

R3C0Nizer is the first ever CLI based menu-driven automated web application B-Tier recon framework ...
github.com/Anon-Artist/R3…

#Recon #BugBounty
#100BugBountySecrets
🧵👇

2/

scant3r is a module-based web security tool, our goal is to make customizable tool with providing many functions and features that what you need for write a security module....
github.com/knassar702/sca…

#Recon #BugBounty
#100BugBountySecrets
🧵👇

Read 11 tweets

Share this page!

Hossein NafisiAsl

People who liked this thread also liked...

Try unrolling a thread yourself!

More from @MeAsHacker_HNA

Hossein NafisiAsl

Hossein NafisiAsl

Did Thread Reader help you today?

Don't want to be a Premium member but still want to support us?