漏洞报告【Rocket.Chat】XSS盲打 https://hackerone.com/reports/1091118 【Open-Xchange】#1016691 Guard WKS lookup: Evil WKS server forces connections to last forever https://hackerone.com/reports/1016691 【Shopify】#1363672 Bypass a fix for report #708013 https://hackerone.com/reports/1363672 【UPchieve】身份验证绕过 - 在帐户注册过程中绕过电子邮件验证码 https://hackerone.com/reports/1406471 【UPchieve】CORS跨域漏洞 https://hackerone.com/reports/1404986 挖洞技巧 Bypassing Box’s Time-based One-Time Password MFA https://www.varonis.com/blog/box-mfa-bypass-totp/ 挖洞工具 Anti-Virus-Evading-Payloads/Bypass-AV-Payload-Detection.MD at main · RoseSecurity/Anti-Virus-Evading-Payloads · GitHub https://github.com/RoseSecurity/Anti-Virus-Evading-Payloads GitHub - redcode-labs/AirStrike: Automatically grab and crack WPA-2 handshakes with distributed client-server architecture https://github.com/redcode-labs/AirStrike

bugbounty技巧聚合20211208

【Rocket.Chat】XSS盲打
https://hackerone.com/reports/1091118
【Open-Xchange】#1016691 Guard WKS lookup: Evil WKS server forces connections to last forever
https://hackerone.com/reports/1016691
【Shopify】#1363672 Bypass a fix for report #708013
https://hackerone.com/reports/1363672
【UPchieve】身份验证绕过 - 在帐户注册过程中绕过电子邮件验证码
https://hackerone.com/reports/1406471
【UPchieve】CORS跨域漏洞
https://hackerone.com/reports/1404986

Bypassing Box’s Time-based One-Time Password MFA
https://www.varonis.com/blog/box-mfa-bypass-totp/

Anti-Virus-Evading-Payloads/Bypass-AV-Payload-Detection.MD at main · RoseSecurity/Anti-Virus-Evading-Payloads · GitHub
https://github.com/RoseSecurity/Anti-Virus-Evading-Payloads
GitHub - redcode-labs/AirStrike: Automatically grab and crack WPA-2 handshakes with distributed client-server architecture
https://github.com/redcode-labs/AirStrike