漏洞报告 Glovo #1264805 Reflected XSS on delivery.glovoapp.com R3 #1125143 No DMARC record at cordacon.com MTN Group #925425 CVE-2018-6389 exploitation - using scripts loader UPchieve #1304490 i can join without user and pass in this website https://argocd.upchieve.org/settings/accounts Affirm #1297689 Subdomain takeover of www█████████.affirm.com 工具推荐 AssetFinder: a Solid Subdomain and Domain Mapping Tool xp4xbox/Python-Backdoor: This program is an non-object oriented opensource, hidden and undetectable backdoor/reverse shell/RAT for Windows made in Python 3 which contains many features such as multi-client support and cross-platform server. Thijsvanede/FlowPrint: Original implementation of FlowPrint as in the NDSS '20 paper 挖洞技巧 Stored XSS to RCE Chain as SYSTEM in ManageEngine ServiceDesk Plus | by Chris Lyne | Tenable TechBlog | Aug, 2021 | Medium

bugbounty技巧聚合20210819

Glovo

MTN Group

UPchieve

Affirm