Hey Folks, today in this tutorial we are going to tell you an open source website from where you can get commands to set up listener and generate payload quickly and easily. Similarly there are many options as well as websites are available but in this project you get some […]
Continue Reading
Hey Folks, today’s article is going to be very interesting and important for bug bounty hunters because in this article we will tell you about a tool by which you can easily find cross site scripting (XSS) vulnerability in any web application through waybackurls. Let’s take a look at it […]
Continue Reading
Hey Folks, today we are going to discuss another bug bounty tool named “Shcheck“. The tool is built to test whether major security is implemented in the web application or not. It simply sends a request to the server via the GET method and in response it receives all the […]
Continue Reading
Hey Folks, as you may already know about the various web crawler tools used to crawl the documents available on the web application and one of them is going to present called “waybackurls“, which works in the same way as other web crawlers. Basically the tool accept line-delimited domains on […]
Continue Reading
Hey Folks, in this tutorial we are going to talk about an advance fuzzer tool for web application penetration testing called “vaf”. Fuzzing is the art of automatic bug finding, and it’s role is to find software implementation faults, and identify them if possible. Likewise, it is also a fast […]
Continue Reading
Hey Folks, today in this tutorial we are going to discuss a web application security testing tool called “hakrawler“. hakrawler is a Go web crawler designed for easy, quick discovery of endpoints and assets within a web application. It can be used to discover : Let’s take a look 😛 […]
Continue Reading
Hey Folks, in this tutorial we will introduce an multi-tool web application scanner called “RapidScan”. The ultimate goal of this program is to solve this problem through automation; viz. running multiple scanning tools to discover vulnerabilities, effectively judge false-positives, collectively correlate results and saves precious time; all these under one […]
Continue Reading
Hey Folks, in this tutorial we are going to talk about another bug bounty tool called “Arjun“. The Arjun tool is specifically designed to find query parameters for URL endpoints. It finds valid HTTP parameters with a huge default dictionary of 10,985 parameter names. The best part of this tool […]
Continue Reading
Hey Folks, this article may be more helpful for bug bounty hunters who usually hunt for bugs in different web applications. In this tutorial we will tell you a tool that will help you bypass the forbidden directories called “DirDar“. You can read below what you can do with the […]
Continue Reading