"$10,000 for exposed .git to RCE" - great write-up! Good to see our tool used for recon.
What could possibly go wrong if you accidentally deploy your application along with the ".git" folder?
Let's find out:

link.medium.com/VPXQ6v1nTxb

#bugbounty #owasp #AMASS #bugbountytips

Last updated 2 years ago

GuruHiTech · @guruhitech
11 followers · 49 posts · Server mastodon.uno

🎙️ ✨ A new episode has been published on @ITSPmagazine

Show: The Hacker Factory Podcast With Phillip Wylie @phil

Episode: A Conversation With OWASP Amass Creator Jeff Foley

Podcast format: Audio

Enjoy!

👉 itspmagazine.com/the-hacker-fa

#tech #Technology #society #cybersecurity #infosec #hacking #hackers #AMASS #owasp #attacksurface #security #securityresearch

Last updated 2 years ago

magikh0e :unverified: · @magikh0e
130 followers · 132 posts · Server infosec.exchange

Simple Script for Finding Cross
Site Scripting (XSS) vulns

#!/bin/bash

subfinder -d $1 -o domains_subfinder_$1
amass enum --passive -d $1 -o domains_$1

cat domains_subfinder_$1 | tee -a domain_$1
cat domains_$1 | filter-resolved | tee -a domains_$1.txt

cat domains_$1.txt | httprobe -p http:81 -p http:8080 -p https:8443 | waybackurls | kxss | tee xss.txt

github.com/projectdiscovery/su
github.com/OWASP/Amass
github.com/tomnomnom/hacks/tre
github.com/tomnomnom/httprobe
github.com/tomnomnom/waybackur
github.com/tomnomnom/hacks/tre

#bugbounty #bugbountytips #xss #subfinder #httprobe #waybackurls #kxss #AMASS

Last updated 2 years ago

garthoid (he/him) · @garthoid
211 followers · 264 posts · Server infosec.exchange
alexanderadam · @alexanderadam
302 followers · 3369 posts · Server ruby.social

RT @bararchy@twitter.com

Do you like @owasp@twitter.com ? ever wanted to pipe all those shiny domains into a proper web scanner for a full flow?
in @NeuraLegion@twitter.com we're cooking something for you :)
github.com/NeuraLegion/AMASS-t

🐦🔗: twitter.com/bararchy/status/12

#AMASS #appsec

Last updated 4 years ago