Finally the report has been triaged after 2 months!

Tip: Make sure to check all the links from passive enumeration.

Want to learn more about bug bounty or reconnaissance? If yes, then check out my latest courses which i am giving for max discount on this special occasion of reaching 16K Subscribers!
[Discount will expire in 2 days]

Hi everyone! New video is releasing today. Stay Tuned!

Hi everyone! I have created a new video on how i found a critical zero day vulnerability in over 10,00 uniway routers:
Video Link: https://youtu.be/AROY1VO8o4A

🌟 Exciting Giveaway Alert! 🎉

Hello everyone! We're launching a thrilling giveaway for our course, "The Art Of Web Reconnaissance"! Want to be one of the first 100 to get FREE access? Here’s how you can join:

Share Your Thoughts: Create a LinkedIn post about any video from our BePracticalTech YouTube channel. Tell us why you loved the video and our channel!

Add a Link: Make sure to include the YouTube channel link in your post.(Channel Link: https://www.youtube.com/@BePracticalTech)

Connect with Me? (Optional) Feel free to mention my LinkedIn (https://www.linkedin.com/in/faiyaz-ahmad-64457520b/).

Use the Hashtag: Don’t forget to tag your post with #faiyazbbounty.


Looking forward to your participation! Let's make this event a blast! 💖

Note: Last date to post: 6th May 2024

Sample Post

Sample Post: https://www.linkedin.com/feed/update/urn:li:activity:7192817729953841152/

Another bounty!

Hi everyone, Just a small reminder that today is the last day for this giveaway. If you are interested to get the course for free then make sure to post on linkedIn. Keep learning & Keep Hacking

Hi everyone checkout the new tool Dnsbruter which is an asynchronous Dns brutforcing and Fuzzing tool to brutforce and get subdomains which can handle high loads wordlist, threads etc with custome resolvers which will be a new replacing tool for puredns to not crash your network anymore, to install the Dnsbruter see here: https://github.com/RevoltSecurities/Dnsbruter

Hi everyone! Finally here's a new video on our channel after a long time! I have created a new video which will help you to learn everything about subdomain takeover from scratch with live demonstrations!
Check it out:https://youtu.be/IrzZtsG0q0M
Also, I would like to give you all a simple challenge! After watching this video, Try to takeover this subdomain takemeover.bepractical.tech and post it on linkedin

Hope you all will enjoy watching this video. Keep Hacking!

Subdomain: takenover.bepractical.tech

Congratulations Vikas Anand for solving this lab!

Hi everyone! We've just hit over 17K Subscribers on our YouTube channel!!! I just can't thank you all enough for the support you guys given me. It is an honor that i was able to contribute back my knowledge to the cyber security community and the support you all gave was just amazing!
On this special occasion, I am giving away my "The Art Of Web Reconnaissance" course for Free!(This is the only time we will be giving this course for free) [First 50 people]
Use the link below to enrol into the course:
https://www.udemy.com/course/the-art-of-web-reconnaissance-bug-bounty-ethical-hacking/?couponCode=1825751DB64982D1F28D

Please note that the coupon will expire tomorrow at 6pm IST.

We are working on creating a new tool for content discovery! A tool that can be used to find interesting endpoints. Hoping to release it soon❤

Hey everyone releasing a new Vulnerability Detection and Exploitation Tool for CVE-2024-24919 and easily grab your targets from shodan using the Shodanx tool:

Shodanx Command: shodanx custom -cq '"Server: Check Point SVN" "X-UA-Compatible: IE=EmulateIE7" 200' -fct ip -o targets.txt

Install tool here: https://github.com/RevoltSecurities/CVE-2024-24919

Update: We have added new videos in "the art of web reconnaissance" course.
Soon we will add:
-> S3 Bucket Enumeration
-> Fuzzing Like A Pro!
-> Content Discovery With Google Dorks

Stay Tuned & Keep Hacking!

Course Link: https://www.udemy.com/course/the-art-of-web-reconnaissance-bug-bounty-ethical-hacking/?referralCode=25FFF9BA65C3368C2C2C

Hi everyone! Recently I was able to bypass waf & execute xss on a private program.. Took me 5 straight hrs but the end result was just amazing!
I am going to create a new video on how to look for xss in 2024 & trust me you will love it.
Keep hacking❤️

Hi everyone! First of all, I am really sorry that there's no new video since 3 weeks. There are actually many personal and work related reasons for it, But the main reason is that my end semester exams were going on and i am finally graduated now! I'll be uploading the next video in this week and try my best to be active. And as always, thank you so much for your support & keep hacking!