bugbounty技巧聚合20210910 - 火线 Zone-安全攻防社区

bugbounty技巧聚合20210910

45813

漏洞报告

Avito

url跳转绕过 https://hackerone.com/reports/956449

挖洞技巧

两个账户劫持漏洞 https://blog.usamav.dev/two-account-takeover-bugs-worth-4300-dollar-bounty

Azure跨账户容器劫持 https://unit42.paloaltonetworks.com/azure-container-instances/

OSINT技巧 https://speakerdeck.com/cyber_unfold/osint-for-bugbounty-and-easy

挖洞工具

key发现小工具 https://github.com/sdushantha/dora

自动发现和利用 DLL 劫持过程 https://github.com/knight0x07/ImpulsiveDLLHijack