🚨noWAFpls🚨
👉Burp Plugin to Bypass WAFs through the insertion of Junk Data

🔗 https://github.com/assetnote/nowafpls

🚨CVE-2024-23692: Unauthenticated RCE Flaw in Rejetto HTTP File Server

👉It allows remote attackers to execute arbitrary code on affected servers without authentication, potentially leading to data breaches, ransomware attacks, and complete system compromise.

💥PoC: https://github.com/rapid7/metasploit-framework/pull/19240

💥Dorks:
Hunter: /product.name="HTTP File Server" and web.body="Rejetto"
FOFA: product="HFS"
SHODAN: product:"HttpFileServer httpd"

#Rejetto #HFS #bugbounty #bugbountytips #cybersecurity #pentesting

How are you guys? and how is everything in life?

Found this on twitter. The POC is very informative. What you think?

Good Morning Everyone!
What topic should I post today. Let me know on discussion:) Thanks!

Surprisingly Havij - SQL injection tool helped me to achieve a error based sqli on ferrari 😳

Subdomain Enumeration from different sources

Simple but effective method to narrow down your scope, sometimes it helps to think simple.

waybackurls --dates domain(.)com | grep '?id='

Payload : if(now()=sysdate(),SLEEP(8),0)

By:@ynsmroztas

#bugbountytips #bugbounty

Rejetto HTTP File Server - Template injection

🚨CVE-2024-29849~29852: Veeam’s Backup Nightmare, Full System Access Exposed

⚠Veeam Backup Enterprise Manager has been issued 4 critical vulnerabilities, allowing unauthorized access, account takeover, and data exposure.

💥PoC: https://github.com/sinsinology/CVE-2024-29849

💥Dorks:
Hunter:/product.name="Veeam Backup Enterprise Manager"

FOFA:app="Veeam-Backup-Enterprise-Manager"

SHODAN:http.noscript:"Veeam Backup Enterprise Manager"

#Veeam #backup #infosec #infosecurity #Infosys #Vulnerability #bugbounty #bugbountytips

Thank You Everyone for the Support 🫶

Nahamsec Reconnaissance Guide

🌐🕵️‍♂️Ominis: OSINT: Web Hunter 🌐🕵️‍♂️

👉It gathers online information by querying Google with a user-inputted query. The tool then extracts relevant details like noscripts, URLs, and mentions of the query from the search results.

Targetable and Actionable Results 🎯
1. Identifying Potential Threats 🚨
2. Monitoring Competitors 🕵️‍♂️
3. Gathering Human Intelligence 👥
4. Detecting Brand Mentions 📣
5. Investigating Individuals 🔍
6. Uncovering Financial Insights 💰
7. Mapping Digital Footprints 🗺️
8. Tracking Online Campaigns 📊
9. Monitoring Regulatory Compliance 📝
10. Forecasting Emerging Risks 📈
11. Google Search Filtering 🖇

🔗Download: https://github.com/AnonCatalyst/Ominis-OSINT

For Tryhackme and Hackthebox Vip+ Vouchers DM me.
Available For India Only. Dm @wtf_yodhha