bugbounty技巧聚合20210907 - 火线 Zone-安全攻防社区

bugbounty技巧聚合20210907

45813

漏洞报告

Google

谷歌漏洞三则

https://apapedulimu.click/story-of-idor-on-google-product/

挖洞技巧

盲ssrf利用 https://blog.assetnote.io/2021/01/13/blind-ssrf-chains/#confluence

依赖混淆攻击 https://dhiyaneshgeek.github.io/web/security/2021/09/04/dependency-confusion/

挖洞工具

超强字典 https://github.com/gh0stkey/Web-Fuzzing-Box