just bagged my first oauth bug! After grinding and reading up for days, I stumbled on this write-up, applied it, instantly found a bug: muhammad-aamir.medium.com/oa…

Hello everyone ♥ a little bit write-up of #bugbountytip #bugbountytips I am going to write here ..... Title: getting unauthorized access on 3rd party's/workspaces & and building your checklist for quickly locating bugs there via massive recon we know that its helpful to look for google groups/docs/etc.. Slack as well just like when the amazing @h4x0r_dz shared days ago .. Use google dork "site:join.slack.com" so I was not in a good mode the last months to doing Google Dorks, so what I did was build a checklist ready for me & very huge one for EX: groups.google.com docs.google.com join.slack.com and here is just an example you can add more similar workspaces for your checklist thin I extracted all internet endpoints and as example here join[.]slack[.]com otx.alienvault.com/api/v1/in… virustotal.com/vtapi/v2/doma… web.archive.org/cdx/search/c… you can use the ready tools to do it such as waymore important note: you have to keep your checklist updated every week and from here I just keep looking for the company name or domain name to see if there's anything connected and mostly the company name or domain name in the URL it self EX: tesla join.slack.com/t/Tesla-Inter… Ex For Bugs found: 1 unauthorized access to the workspaces (PII | Information disclose) 2 account takeover as Ex: valid signup employee link 3 account takeover as Ex: valid reset password employee link now about Slack, as an example if you found an invitation link for tesla Tesla join.slack.com/t/Tesla-Inter… and that link was not valid, don't stop here it will redirect for Ex: tesla-internal[.]slack[.]com here back and start looking manually for endpoints of this subdomain as well EX: web.archive.org/cdx/search/c… now there are a lot of 3rd party's/workspaces I just shared here slack & Google Docs/groups What I wrote is a bit long and annoying to some, so I apologize. I hope, as usual, that this will be useful to all who follow me here. #Bugounty don't forget to retweet if you like it ♥♥♥

I wish i could have a good night, i am sorry for you my mother. Someday you will be proud of me.

Hello everyone ♥ a little bit write-up of #bugbountytip #bugbountytips I am going to write here ..... Title: getting unauthorized access on 3rd party's/workspaces & and building your checklist for quickly locating bugs there via massive recon we know that its helpful to look for google groups/docs/etc.. Slack as well just like when the amazing @h4x0r_dz shared days ago .. Use google dork "site:join.slack.com" so I was not in a good mode the last months to doing Google Dorks, so what I did was build a checklist ready for me & very huge one for EX: groups.google.com docs.google.com join.slack.com and here is just an example you can add more similar workspaces for your checklist thin I extracted all internet endpoints and as example here join[.]slack[.]com otx.alienvault.com/api/v1/in… virustotal.com/vtapi/v2/doma… web.archive.org/cdx/search/c… you can use the ready tools to do it such as waymore important note: you have to keep your checklist updated every week and from here I just keep looking for the company name or domain name to see if there's anything connected and mostly the company name or domain name in the URL it self EX: tesla join.slack.com/t/Tesla-Inter… Ex For Bugs found: 1 unauthorized access to the workspaces (PII | Information disclose) 2 account takeover as Ex: valid signup employee link 3 account takeover as Ex: valid reset password employee link now about Slack, as an example if you found an invitation link for tesla Tesla join.slack.com/t/Tesla-Inter… and that link was not valid, don't stop here it will redirect for Ex: tesla-internal[.]slack[.]com here back and start looking manually for endpoints of this subdomain as well EX: web.archive.org/cdx/search/c… now there are a lot of 3rd party's/workspaces I just shared here slack & Google Docs/groups What I wrote is a bit long and annoying to some, so I apologize. I hope, as usual, that this will be useful to all who follow me here. #Bugounty don't forget to retweet if you like it ♥♥♥

🔥 A new hit on same target: - Victim signs up but website dosen't send mail confirm. - Attacker logs in via Facebook, unchecks email scope. - Site asks for email, attacker enters victim’s. - Site sends confirmation to victim. - Victim clicks, attacker now owns the account.

ان شاء الله هنصور بودكاست مع م.ابراهيم حجازي @Zigoo0 عن السايبر سيكيورتي و رحلته في الشغل في هذا المجال في شركات عالمية كتير زي visa. لو عندك سؤال للضيف، اكتبه في تعليق وان شاء الله نغطيه في البودكاست.

Just dropped ghmon-cli a powerful, zero-config GitHub/GitLab secrets scanner built for speed, signal, and automation. 🔍 TruffleHog-powered 📢 Discord/Telegram alerts 🕵️‍♂️ Continuous monitoring 🛠️ OSS. Clone it → github.com/sl4x0/ghmon #infosec #bugbounty #osint #recon

Hello everyone, I am pleased to announce that I have just published an exceptional write-up on the subject of JWT and the analysis of user IDs in order to identify a successful IDOR vulnerability. medium.com/@M0X0101/how-i-wa… #bugbounty #bugbountytip #bugbountytips #infosec