👉Practical Bug bounty tips 👉Beginner friendly 👉Pentesting DM for queries
Joined February 2021
- Tweets 870
- Following 209
- Followers 7,254
- Likes 5,336
4⃣GraphQL Cop
GraphQL Cop is an open-source GraphQL security auditing tool that is capable of performing over +10 security tests for GraphQL
Check it out on Github! 👇
github.com/dolevf/graphql-co…
3⃣Misconfig Mapper
Misconfig Mapper is a project by Intigriti for the community to help you find, detect and resolve common security misconfigurations in various popular services, technologies and SaaS-based solutions that your targets use!
github.com/intigriti/misconf…
2⃣BatchQL
Developed by Assetnote, BatchQL is an open-source tool designed to assist you in testing GraphQL targets for mutations and batch queries.
github.com/assetnote/batchql
Automated tools for GraphQL testing🔥👇
1️⃣ InQL Burpsuite Extension
A Burpsuite extension called InQL makes it easier for you to test GraphQL targets within your proxy interceptor.
Check it out on Github! 👇
github.com/doyensec/inql
🔥 TOP 5 recon tools used in web app Pentesting👇
1️⃣ Burp Suite
2️⃣ Nmap
3️⃣ Recon-ng
4⃣ Nuclei
5⃣ Subfinder
#infosecurity #appsecurity
“Authentication: disabled” port:445 product:”Samba” hostname:”*.${target}”
title:”Login — Adminer” hostname:”*.${target}”
title:”Login — Adminer” ssl.cert.subject.cn:”${target}”
http.title:”sign up” ssl.cert.subject.cn:”${target}”z
ssl.cert.subject.commonName:”.${target}”
http.title:”Index of /” hostname:”.${target}”*
http.title:”Index of /” ssl.cert.subject.cn:”${target}”
ftp port:”10000" hostname:”*.${target}”
ftp port:”10000" ssl.cert.subject.cn:”${target}”
Shodan dorks help you filter specific types of devices and information 👇
ssl.cert.fingerprint:”${target}”
ssl:”${target}”
org:”${target}”
hostname:”${target}”
ssl.cert.issuer.cn:”${target}”
ssl.cert.subject.cn:”${target}”
#infosecurity #appsec
SSRF on FIle imports feature👇
👉 Suppose if an API relies on a URL to import a file. Some times you may endup with the SSRF vulnerability.
You could simply pass this URL
http://169.254.169.254
Attacking organizations with big scopes: from zero to hero by @HusseiN98D
A well explained, excellent breakdown🔥👇
piped.video/watch?v=vFk0XtHf…
Some unknown Dorks to find more assets 👇
→ site:*<example>*
→ site:example>*
→ site:*<example.*>*
→ site:*<*example.*>*
→ site:*example.*
→ ip:127.0.01
credit @HusseiN98D
Bug Bounty Methodology ( Tactics, Techniques, and Procedures) V 2.0
A well explained, excellent breakdown 🔥👇
infosecsanyam.medium.com/bug…
👉 GET /userSearch?name=NAME%23AB&back=/home
Truncating query strings: You can use encoded #
Injecting invalid parameters: Use encoded `&` character to add a second parameter
Override Existing Parameters by adding a second parameter
Effective GraphQL Test Cases: A Quick Guide 👇
anmolksachan.github.io/graph…
Detecting API endpoints and source code with JS Miner
A well explained, excellent breakdown 🔥👇
danaepp.com/detecting-api-en…
Content Discovery with FFUF’s recursion🤑
This switch tells ffuf to start the scan on any directory you encounter, until no directory is left👇
Thank you for reading this far! We hope you've learned something new from this thread! If you have enjoyed this thread: 1. Follow us
@beginnbounty
for more of these threads! 🐛 2. Retweet the first Tweet to share it with your friends