I earned a $750 bounty
Tips: I never miss dir fuzzing
ffuf -recursion -mc all -ac -c -e .htm,.shtml,.php,.html,.js,.txt,.zip,.bak,.asp,.aspx,.xml,.sql,.old,.at,.inc -w path -u -t 5000
#bugbounty
#bugbountytips
I got €750, just 2 day hunting!!
Tips :
target use the pimcore cms? try this '/js/routing' , '/js/routing?callback=fos.Router.setData'
got admin informations and path,etc,, Bounty €300
#bugbountytips
#bugbounty
I earn a €300 bounty on the Yogosha platform
AEM_Tips:
I analyzed the javascript code, I found this parameter, but I can't bypass of Content-Type
here is the template:
Ref:
Special thanks to
@AEMSecurity
#BugBountyTips
If you found aspx site?
find debug page like this
you will seen Directories,Memory usage,Server Environment,etc,,
Bounty €150
#bugbountytips
#bugbounty
I got Euro 600 + 100 USD Bounty
Thank you
@YogoshaOfficial
Thank you Zapier Security Team
Bug type:
403 Bypass
Rate Limint
Informations Disclosure,etc
#BugBounty