$700 bugbounty | MySQL injection at Newrelic | bug bounty poc | hackerone
HTML-код
- Опубликовано: 11 сен 2024
- #education #learnEthicalHacking #bugbounty
For education purpose only,
you can learn the numerous ways to do a security testing for a website or mobile apps.
like and subscribe to get notified with the latest exploits.
If you explain within video it will be very beneficial
Any reference video or blog about this bug? I didn't understand this.
Error base MySQL database tables name disclosure.
Not quite SQL injection but the disclosure of tables name holds some impact.
@@HACKERFUDDI yes, i can see it held $700 impact 😅
What is the security impact of this error?
MySQL database tables disclosure.
I am new in bug hunting field. Small question, how to find or how do you know about vulnerability that exists and you exploit it for reporting 🤔. Please educate us. Thanks 🤝🥰🤩❤💚✌💯👍
First create a base:- start reading blogs, reports, and start doing the same. After a few n/a and time you can build your way.
Every 500 Status can cause this issue , or other status can also have this issue, how to automate it?
I don't think this can be automated.
Just look for the console if there is any error, warning or message.
@@HACKERFUDDI Only status with 400,500 can have this issue or any status can have this issue?
Any of them.
Truly lucky.
thank you
Bro where did you inject the sqli payload? Or you would get only MySQL error? 2:09
It was just an error.
@@HACKERFUDDI ooo okok bro!
@@HACKERFUDDI what caused the error ?
Server side error.
@@HACKERFUDDI so it didn't happened because of your input error
And server responded an error all the previous time and nobody checked it...
Is the error is the palce of vulnerability??
At:- 2:09
Yep.
MySQL data base.
privet kakiy tools pomoqi tebe brat?
dlya vysheupomyanutogo instrumenta razrabotchika brauzera