$1700 Bounty | Unauthenticated Command Injection Vulnerability | Bug Bounty Methodology | POC
HTML-код
- Опубликовано: 11 сен 2024
- -----------------------------------------------------------------------
Twitter: / abhishekmorla
Website: abhishekmorla....
Linkedin: / abhishekmorla
------------------------------------------------------------------------
reference :
github.com/swi...
/ command-injection-bypa...
⚠️ Disclaimer: This content is solely for educational purposes and should not be used for unauthorized activities. Always obtain proper authorization before performing any security testing.
It would be great if you could make a video explaining how you found the bug from the beginning to the end :)
It's a htb box, named paper, search it up if you want to know how he found the bug. Also you don't get paid ($1700) for solving a htb box
@@lmaoo254why’d he put 1700$ bug bounty in the title then
I've seen plenty of people do THM / HTB rooms and claim it to be a pirvate program and get paid from it@@Noctuu
Thank you for showing trail and error .. with your video.. i got remote shell .. thanks a lot ❤❤
Glad it helped
It would be great if you could make a video explaining how you found the bug from the beginning to the end :) 2
great bro, learning alot from you, do you have any blog or writeups, I want to start hunting too
Search my name you will get some medium writeups
can you make a video for recon????
sure
Great find 💯💪
omg, so cool
this is crazy
how you find cmd parameter
Thats the recon part..you wont find in this video
🎉🎉🎉🎉🎉
what the target name ?
private program
keep going dude i hope i can be like you
@@abhishekmorla1how did you came to know this this is this file uploaded to rce ? How you came to this post request
How to report this bug?
search for hackerone reports regarding same
It's my suggestion bro, try to add some nice hackers songs music😅, to make and and watching experience better it's my suggestion just depend upon you.
Yeah i dont have time for choosing songs bro..😅 but will start again by using some non copyright songs
@@abhishekmorla1 ofcourse you can do that also