$700 bugbounty | MySQL injection at Newrelic | bug bounty poc | hackerone

#education #learnEthicalHacking #bugbounty
For education purpose only,
you can learn the numerous ways to do a security testing for a website or mobile apps.
like and subscribe to get notified with the latest exploits.

[@taison0072]

If you explain within video it will be very beneficial

[@PP-km8uh]

Any reference video or blog about this bug? I didn't understand this.

[@HACKERFUDDI]

Error base MySQL database tables name disclosure.
Not quite SQL injection but the disclosure of tables name holds some impact.

[@PP-km8uh]

@@HACKERFUDDI yes, i can see it held $700 impact 😅

[@NinjaTech1337]

What is the security impact of this error?

[@HACKERFUDDI]

MySQL database tables disclosure.

[@Free.Education786]

I am new in bug hunting field. Small question, how to find or how do you know about vulnerability that exists and you exploit it for reporting 🤔. Please educate us. Thanks 🤝🥰🤩❤💚✌💯👍

[@HACKERFUDDI]

First create a base:- start reading blogs, reports, and start doing the same. After a few n/a and time you can build your way.

[@shpockboss3834]

Every 500 Status can cause this issue , or other status can also have this issue, how to automate it?

[@HACKERFUDDI]

I don't think this can be automated.
Just look for the console if there is any error, warning or message.

[@shpockboss3834]

@@HACKERFUDDI Only status with 400,500 can have this issue or any status can have this issue?

[@HACKERFUDDI]

Any of them.

[@ericnyamu9981]

Truly lucky.

[@bitdetaglobal]

thank you

[@mersalmakers1577]

Bro where did you inject the sqli payload? Or you would get only MySQL error? 2:09

[@HACKERFUDDI]

It was just an error.

[@mersalmakers1577]

@@HACKERFUDDI ooo okok bro!

[@aneeltripathy7420]

@@HACKERFUDDI what caused the error ?

[@HACKERFUDDI]

Server side error.

[@aneeltripathy7420]

@@HACKERFUDDI so it didn't happened because of your input error
And server responded an error all the previous time and nobody checked it...

[@kishantodi3534]

Is the error is the palce of vulnerability??
At:- 2:09

[@HACKERFUDDI]

Yep.
MySQL data base.

[@orxanovn5057]

privet kakiy tools pomoqi tebe brat?

[@HACKERFUDDI]

dlya vysheupomyanutogo instrumenta razrabotchika brauzera