$1700 Bounty | Unauthenticated Command Injection Vulnerability | Bug Bounty Methodology | POC

-----------------------------------------------------------------------
Twitter: / abhishekmorla
Website: abhishekmorla....
Linkedin: / abhishekmorla
------------------------------------------------------------------------
reference :
github.com/swi...
/ command-injection-bypa...
⚠️ Disclaimer: This content is solely for educational purposes and should not be used for unauthorized activities. Always obtain proper authorization before performing any security testing.

[@user-yr6uj4gv5m]

It would be great if you could make a video explaining how you found the bug from the beginning to the end :)

[@lmaoo254]

It's a htb box, named paper, search it up if you want to know how he found the bug. Also you don't get paid ($1700) for solving a htb box

[@Noctuu]

@@lmaoo254why’d he put 1700$ bug bounty in the title then

[@tomdotsh]

I've seen plenty of people do THM / HTB rooms and claim it to be a pirvate program and get paid from it@@Noctuu

[@shainshashaik1473]

Thank you for showing trail and error .. with your video.. i got remote shell .. thanks a lot ❤❤

[@abhishekmorla1]

Glad it helped

[@shuvokumarsaha8478]

It would be great if you could make a video explaining how you found the bug from the beginning to the end :) 2

[@dittonachan]

great bro, learning alot from you, do you have any blog or writeups, I want to start hunting too

[@abhishekmorla1]

Search my name you will get some medium writeups

[@__pain__05]

can you make a video for recon????

[@abhishekmorla1]

sure

[@shreemadav9596]

Great find 💯💪

[@user-xo4rr5en3e]

omg, so cool

[@playmorefunny2340]

this is crazy

[@miteshvalvi1170]

how you find cmd parameter

[@abhishekmorla1]

Thats the recon part..you wont find in this video

[@user-of9qp9ce4g]

🎉🎉🎉🎉🎉

[@Srocify]

what the target name ?

[@abhishekmorla1]

private program

[@Srocify]

keep going dude i hope i can be like you

[@user-hb2rl4zn2m]

​@@abhishekmorla1how did you came to know this this is this file uploaded to rce ? How you came to this post request

[@jomynn]

How to report this bug?

[@abhishekmorla1]

search for hackerone reports regarding same

[@CyberTechwithNikhil]

It's my suggestion bro, try to add some nice hackers songs music😅, to make and and watching experience better it's my suggestion just depend upon you.

[@abhishekmorla1]

Yeah i dont have time for choosing songs bro..😅 but will start again by using some non copyright songs

[@CyberTechwithNikhil]

@@abhishekmorla1 ofcourse you can do that also