bugbounty技巧聚合20220218 - 火线 Zone-安全攻防社区

bugbounty技巧聚合20220218

43999

漏洞报告

子域名接管 750$
https://hackerone.com/reports/1474784

挖洞技巧

SSRF读取元数据RCE
https://cloud.tencent.com/developer/article/1423222
Zabbix - 不安全会话存储的案例研究
https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage
我如何通过特权升级赚取 9000$
https://junoonbro.medium.com/how-i-earned-9000-with-privilege-escalations-b187d1f8f4fe

挖洞工具

邮箱收集工具
https://github.com/Taonn/EmailAll
信息收集工具（DNS/子域/端口/目录）
https://github.com/edoardottt/scilla
Xray批量扫描+微信推送
https://github.com/loecho-sec/All-in-XrayScan