bugbounty技巧聚合20211130

漏洞报告

【 U.S. Dept Of Defense】Expired SSL Certificate allows credentials steal
https://hackerone.com/reports/1344951

【 U.S. Dept Of Defense】Unauthenticated Access to Admin Panel Functions at xxx
https://hackerone.com/reports/1394910

【 U.S. Dept Of Defense】
Unauthenticated Access to Admin Panel Functions at xxx
https://hackerone.com/reports/1397564

挖洞技巧

A tale of making internet pollution free – BSides Ahmedabad 2021
https://speakerdeck.com/s1r1us/a-tale-of-making-internet-pollution-free-bsides-ahmedabad-2021

挖洞工具

一个辅助平常渗透测试项目或者攻防项目快速打点的综合工具，由之前写的工具AG3改名而来。是一款轻便、小巧、快速、全面的扫描工具。多用于渗透前资产收集和渗透后内网横向渗透。工具从项目上迭代了一些懒人功能（比如提供扫描资产文件中，可以写绝大部分的各种形式的链接/CIDR,并在此基础上可以添加任意端口和路径）
https://github.com/P1-Team/AlliN

Fugu14 is an untethered iOS 14.3-14.5.1 jailbreak
https://github.com/LinusHenze/Fugu14

403/401 Bypass Methods + Bash Automation + Your Support ?
https://github.com/Dheerajmadhukar/4-ZERO-3

文字来源于- 火线 Zone-云安全社区，安全小天地只做文章分享，如有侵权，请联系站长删除