All Posts Here

When you are hunting on any program, check this below Out of Scope vulnerability. Because this where most of the bug hunters think that...

Hello folks, today I am going to share one of my 2FA bypass bugs which I found on a private program. Summary:- I was testing the 2FA...

crt.sh crt.sh is best website to fetch domains or subdomains with the help of Domain name, Organisation Name, SSL Certificate...

In this post, you will learn how to create a Discord BOT and use it for Bug Bounty Recon. Setup First, we will install all these required...

Google Cloud Shell Google Cloud shell gives you 16 GB RAM Intel(R) Xeon(R) CPU @ 2.20GHz free for lifetime. The main problem is, that you...

In this post, you will learn how to find new domains of any company using some of the best recon tools. knockknock This tool is written...

Hello, Today I am going to share how and what I found my first bug on VDP and BBP. For Those who Don't know what is VDP & BBP? VDP:-...

Hello folks, Today I am going to share my experience in HackerOne Brand Ambassadors World Cup 2022. There were many teams from different...

Hello, Today I will share all my findings of Sony VDP HackerOne. Information Disclosure Bugs phpinfo():- Many websites were disclosing...

These are few low hanging bugs that you can find on most of the web applications easily. 1. Broken Links These are the links that are not...

Today I am going to share how I found an XXE in SAML SSO of one web application. This was a private program on HackerOne and they were...

These are few Google Dorks which I have used in my Bug Hunting. For Recon If you are looking for new domains of any Target, take this...

Hello folks, If your open redirect reports is resolved, then try these bypasses. What is Open Redirect? An http parameter may contain a...

In this post, I will share a few tips for beginners to automate your recon process. Requirement Basic understanding of Linux OS Python...

Yes I know, everybody want's to wash their hands in this flood. So I will share some tricks to find log4j RCE on vulnerable Web...

Hello guys, In this blog, you will see few tips with real world web application example of XSS payload filter bypass by @xploiterr. You...

In this blog, I will be sharing few note-taking tools that are best for bug bounty. If you are hacking on big scope program, then you...

Hello Folks 👋 , In this blog post you will see best tools for Directory Bruteforcing and better than other tools. Firstly, I would like...

There are many tools available on GitHub, but these tools are best. There are many bug bounty programs with big scope, so I will show you...

Hello guys, Today I am going to explain how you can start your journey in the Crypto market. Firstly, Crypto trading is highly risky...

Hello guys, today I am going to show you our top coin which you can buy now in November 2021 and Hold it for 2-3 month for good profit....

Hello guys, these are some of my DOD domains and URL's with interesting features on some of them. pfpa.mil militaryonesource.mil...

My Sony recon https://ebookstore.sony.jp/ ​--- XSS found in search field and fixed, Signup/signin forms found, Open redirect found...

Hello Folks 👋 , this is my first blog post where I will show you a secret path which can lead you to the success in bug bounty on...