Thread by @XCriminal_

Save this for your hunting! How do I get debug parameters?

> Collect all the subdomains
> Filter the live hosts
> Garb the URLs via gau & Wayback
> Use meg (@TomNomNom tool)-> this will create a directory that contains all the requests & response

Next:)

@TomNomNom > Now, use GF for grepping the debug param's
> Follow the next steps

From here use this to gain the admin console
credits @_bughunter

Always go for debug parameters in sensitive endpoints

debug=true
_debug=true
debug=1
_debug=1

target/admin/console ==> 403 ❗️
target/admin/console?debug=true ==> 200

#bugbountytips #cybersecurity

FYI you can try this too

github.com/devploit/dontg…

#bugbountytips #bugbountytip #bugbounty