Это видео недоступно.
Сожалеем об этом.
How to Find XmlRpc Vulnerability and Exploit it ! | Bug bounty poc
HTML-код
- Опубликовано: 1 ноя 2023
- in this video i am going to show you how to find wordpress xmlrpc vulnerability and how to exploit it.
This video is only for Education purpose only.
#xmlrpc #bugbounty
Disclaimer: This video is for strictly educational and informational purpose only. I own all equipment used for this demonstration. Hacking without permission is illegal so always ensure you have proper authorization before using security tools in any network environment. thanks.
Fun fact. xmlrpc is a faster way to bruteforce useraccounts, and tools such as wpscan uses it as default if possible to speed things up.
yes you can send unlimited data in one single request like 1000+ passwords in just one request thats why its so much powerful..
I learned a lot from you, thanks
my pleasure ❤️😇
Bro is this xxe vulnerability and where you get these payloads
its xmlrpc bug
Dude that's amazing!
learned very much from this channel alone.
thx
❤️😇 thanks for supporting more advance practicle comming soon..
Brother, I filed a report, but they are saying that it will not be accepted and marked as not applicable. When I checked, they had fixed it. Please help me.
xmlrpc are nowdays outofscopes
@@lostsecc thanks for reply man i hope you are my inspiration
Bro, i hav one doubt, this xmlrpc vulnerability what impact create?
yes but for bbp its not in scope nowdays
good
But it’s dns pingback ?? Kya ye apki ip hai ?
its from server
can i get payload
dm in telegram
@@lostsecc pls check @th3y_callme_gd
Blind ssrf ?
yes
great video! is this job worth to work in it?
ys
@@lostseccthanks
Na/ there's no internal impact
now days it n/a
I have found this vuln and got duplicated 🙂
keep going duplicate means you doing good but not so early..
@@lostsecc yeah, and thanks for the all videos and telegram group brother. Iam a beginner in bug hunting and learnt a lot from you. Keep going ✨
soon i uploading full deep hunting video from start recon to end
@@lostsecc that's nice! I have a doubt while I fuzzing a search input parameter for xss it shows 200 status code but it's not reflecting on the web page, could you please help?
which program hackerone/bugcrowd ?
not bountty program
@@lostsecc do u contact th em without a bounty program ?
hey sir
can you give me responce on your gmail
coffinxp7@proton.me
give responce on gmail.please
why you not give responce