bugbounty技巧聚合20210913 - 火线 Zone-安全攻防社区

bugbounty技巧聚合20210913

45813

漏洞报告

Mattermost

#1114617 Privilege Escalation leading to post in channel without having privilege

Shopify

#1257428 Create free Shopify application credits.

MTN Group

#925519 [play.mtn.co.za] Application level DoS via xmlrpc.php

Node.js

#1178337 Improper handling of untypical characters in domain names

挖洞技巧

CVE-2021-40444 跟踪 https://cve.report/CVE-2021-40444

挖洞工具

https://github.com/lockedbyte/CVE-2021-40444