All Posts Here

Aug 13
1 min

Bypass Captcha using Turbo Intruder leads to Bruteforce attack - Bug Bounty

In this post, you will learn how to bypass Captcha security on Login page using Turbo Intruder. Requirement:- Learn Burpsuite basics from...

Aditya Singh

Jun 7
1 min

Bruteforce Attack using Burpsuite Intruder - Bug Bounty

In this post, I will show you how to test bruteforce vulnerability on websites login pages using Burpsuite Intruder. Requirement:- Learn...

Aditya Singh

May 11
2 min

Tricks to Bypass Rate Limiting on Login Page - Bug Bounty Tips

When you are hunting on any program, check this below Out of Scope vulnerability. Because this where most of the bug hunters think that...

Aditya Singh

Apr 28
2 min

2FA Secret value disclosure leads to 2FA Bypass - Bug Bounty Writeup

Hello folks, today I am going to share one of my 2FA bypass bugs which I found on a private program. Summary:- I was testing the 2FA...

Aditya Singh

Apr 22
1 min

Find new domains of a company using SSL Certificates - Bug Bounty Recon

crt.sh crt.sh is best website to fetch domains or subdomains with the help of Domain name, Organisation Name, SSL Certificate...

Aditya Singh

Apr 12
2 min

Create your own Discord BOT for Recon - Bug Bounty

In this post, you will learn how to create a Discord BOT and use it for Bug Bounty Recon. Setup First, we will install all these required...

Aditya Singh

Apr 5
1 min

Get your Own VPS for Bug Hunting

Google Cloud Shell Google Cloud shell gives you 16 GB RAM Intel(R) Xeon(R) CPU @ 2.20GHz free for lifetime. The main problem is, that you...

Aditya Singh

Mar 24
2 min

How to find new domains of a Company using tools - Bug Bounty Recon

In this post, you will learn how to find new domains of any company using some of the best recon tools. knockknock This tool is written...

Aditya Singh

Mar 15
2 min

My First Bug on VDP & BBP - Bug Bounty

Hello, Today I am going to share how and what I found my first bug on VDP and BBP. For Those who Don't know what is VDP & BBP? VDP:-...

Aditya Singh

Mar 5
3 min

How we won 2nd Place in HackerOne Brand Ambassador World Cup 2022 - CTF & Public Programs Hunting

Hello folks, Today I am going to share my experience in HackerOne Brand Ambassadors World Cup 2022. There were many teams from different...

Aditya Singh

Feb 7
2 min

What I Found on Sony Vulnerability Disclosure Program

Hello, Today I will share all my findings of Sony VDP HackerOne. Information Disclosure Bugs phpinfo():- Many websites were disclosing...

Aditya Singh

Jan 22
3 min

Look For These Low Hanging Fruits In Bug Bounty

These are few low hanging bugs that you can find on most of the web applications easily. 1. Broken Links These are the links that are not...

Aditya Singh

Jan 16
2 min

XXE in SAML SSO Writeup - Bug Bounty

Today I am going to share how I found an XXE in SAML SSO of one web application. This was a private program on HackerOne and they were...

Aditya Singh

Jan 14
1 min

Google Dorks for Bug Bounty

These are few Google Dorks which I have used in my Bug Hunting. For Recon If you are looking for new domains of any Target, take this...

Aditya Singh

Jan 6
1 min

Open Redirect and Its Bypasses - Bug Bounty

Hello folks, If your open redirect reports is resolved, then try these bypasses. What is Open Redirect? An http parameter may contain a...

Aditya Singh

Dec 25, 2021
2 min

Recon Automation Tips - Bug Bounty

In this post, I will share a few tips for beginners to automate your recon process. Requirement Basic understanding of Linux OS Python...

Aditya Singh

Dec 15, 2021
1 min

How to find Log4shell & Exploit it - BugBounty

Yes I know, everybody want's to wash their hands in this flood. So I will share some tricks to find log4j RCE on vulnerable Web...

Aditya Singh

Dec 12, 2021
2 min

XSS Payload Filter Bypass by xploiterr

Hello guys, In this blog, you will see few tips with real world web application example of XSS payload filter bypass by @xploiterr. You...

Aditya Singh

Dec 10, 2021
1 min

Bug Bounty Notetaking tools

In this blog, I will be sharing few note-taking tools that are best for bug bounty. If you are hacking on big scope program, then you...

Aditya Singh

Dec 3, 2021
1 min

Best Directory Bruteforce Tools - Reconstuff

Hello Folks 👋 , In this blog post you will see best tools for Directory Bruteforcing and better than other tools. Firstly, I would like...

Aditya Singh

Nov 27, 2021
2 min

How to find new/more domains of a company? - Recon Stuff

There are many tools available on GitHub, but these tools are best. There are many bug bounty programs with big scope, so I will show you...

Aditya Singh

Nov 22, 2021
2 min

Get started with Crypto trading

Hello guys, Today I am going to explain how you can start your journey in the Crypto market. Firstly, Crypto trading is highly risky...

Aditya Singh

Nov 21, 2021
1 min

Top Coin to Buy in Nov 2021 - Crypto Market

Hello guys, today I am going to show you our top coin which you can buy now in November 2021 and Hold it for 2-3 month for good profit....

Aditya Singh

Nov 20, 2021
1 min

U.S Department of Defence - Recon #1

Hello guys, these are some of my DOD domains and URL's with interesting features on some of them. pfpa.mil militaryonesource.mil...

All Posts Here

Buy me a Coffee to support my content

Be the first one to get any updates

Menu

Follow us on