English
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어
Sharo_k_h's profile picture. Junior Hunter🙂 My Github: https://github.com/SharokhAtaie

Sharo K h

@Sharo_k_h

Junior Hunter🙂 My Github: https://github.com/SharokhAtaie

969Posts 1KFollowers 907Following
You might like
Pinned
Sharo_k_h's profile picture.
Sharo K h
 @Sharo_k_h
Jul 11, 2023

I submitted my first critical vulnerability and awarded $3500 on @Hacker0x01 Bug: Default WordPress Installation lead to RCE Tip: cat subdomains.txt | httpx -title -fr Result: [WordPress > Installation] Watch on your Targets🙂 Thanks to @voorivex and @dollarisho_com

Sharo_k_h's tweet image. I submitted my first critical vulnerability and awarded $3500 on @Hacker0x01 Bug: Default WordPress Installation lead to RCE Tip: cat subdomains.txt | httpx -title -fr Result: [WordPress > Installation] Watch on your Targets🙂 Thanks to @voorivex and @dollarisho_com
49
53
496
113
27K
Sharo_k_h's profile picture.
Sharo K h
 @Sharo_k_h
Aug 10

🚀 New Tool Alert! Easily parse _buildManifest.js files from Next.js web apps 🔍 🛠 Try it online: sharokhataie.github.io/build-manifest… 💻 Source code: github.com/SharokhAtaie/b… #BugBounty #JS #NextJS #WebSecurity

Sharo_k_h's tweet image. 🚀 New Tool Alert! Easily parse _buildManifest.js files from Next.js web apps 🔍 🛠 Try it online: sharokhataie.github.io/build-manifest… 💻 Source code: github.com/SharokhAtaie/b… #BugBounty #JS #NextJS #WebSecurity
5
39
210
161
18K
Sharo_k_h's profile picture.
Sharo K h
 @Sharo_k_h
May 8

۳ تا cve ساده که قبلا زده بودم اگه دوست داشتید حتما بخونید t.me/gotocvechat/27… مرسی از علی جان بابت وقتی که برا ما میذاره🙏❤️ @soltanali0

5
3
38
5
2K
Sharo K h reposted
Ali_4fg's profile picture.
A L I
 @Ali_4fg
Nov 14, 2024

🧵 Bug Bounty Methodology 🧵 After reading countless write-ups and checklists, I created my own methodology that has helped me find vulnerabilities effectively. #BugBounty #Infosec #Cybersecurity #ethicalhacking #bugbountytip #bugbountytips #methodology

2
6
41
51
6K
Sharo_k_h's profile picture.
Sharo K h
 @Sharo_k_h
Oct 3, 2024

I have created a chrome extension for extract endpoints and urls from js files. You can use it for modern web app which this tool watch for new js files that loaded (lazyload). github.com/SharokhAtaie/e… #BugBounty #tools #PenTest

Sharo_k_h's tweet card. Extractify extension is a Chrome extension designed for web security testing, enabling users to efficiently extract JavaScript files and their associated relative paths and endpoints from any webpa...
GitHub - SharokhAtaie/extractify-extension: Extractify extension is a Chrome extension designed for...
Source: github.com
5
11
75
40
3K
Sharo_k_h's profile picture.
Sharo K h
 @Sharo_k_h
Jul 23, 2024

JsFuck ❌ FuckJS ✅ We also bypassed a very strict Cloudflare WAF with @ehsan_nkd @0xb0hl00l . Hint: When you face a WAF that allows you to use `javascript:` scheme but blocks every payload that you know, DEFINE variables! #HiveCommunity #BugBounty #hackerone #XSS

Sharo_k_h's tweet image. JsFuck ❌ FuckJS ✅ We also bypassed a very strict Cloudflare WAF with @ehsan_nkd @0xb0hl00l . Hint: When you face a WAF that allows you to use `javascript:` scheme but blocks every payload that you know, DEFINE variables! #HiveCommunity #BugBounty #hackerone #XSS
5
6
83
45
13K
Sharo_k_h's profile picture.
Sharo K h
 @Sharo_k_h
May 19, 2024

Discovered an XSS vulnerability but Imperva WAF blocked it? Try this XSS payload to bypass Imperva's protection. <details x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:2 open ontoggle=&#x0000000000061;lert&#x000000028;origin&#x000029;> #bugbounty #bypass_imperva #xss #hacking

Sharo_k_h's tweet image. Discovered an XSS vulnerability but Imperva WAF blocked it? Try this XSS payload to bypass Imperva&apos;s protection. &amp;lt;details x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:2 open ontoggle=&amp;amp;#x0000000000061;lert&amp;amp;#x000000028;origin&amp;amp;#x000029;&amp;gt; #bugbounty #bypass_imperva #xss #hacking
Sharo_k_h's tweet image. Discovered an XSS vulnerability but Imperva WAF blocked it? Try this XSS payload to bypass Imperva&apos;s protection. &amp;lt;details x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:2 open ontoggle=&amp;amp;#x0000000000061;lert&amp;amp;#x000000028;origin&amp;amp;#x000029;&amp;gt; #bugbounty #bypass_imperva #xss #hacking
13
57
347
262
20K
Sharo_k_h's profile picture.
Sharo K h
 @Sharo_k_h
Mar 12, 2024

XSS Tip: If you have two parameter reflections in a JavaScript context and can't close the script tag or break the string with ( " ), you can use a backslash ( \ ) to escape the ( " ) of the first reflection and inject your JavaScript payload in the second reflection.

Sharo_k_h's tweet image. XSS Tip: If you have two parameter reflections in a JavaScript context and can&apos;t close the script tag or break the string with ( &quot; ), you can use a backslash ( \ ) to escape the ( &quot; ) of the first reflection and inject your JavaScript payload in the second reflection.
Sharo_k_h's tweet image. XSS Tip: If you have two parameter reflections in a JavaScript context and can&apos;t close the script tag or break the string with ( &quot; ), you can use a backslash ( \ ) to escape the ( &quot; ) of the first reflection and inject your JavaScript payload in the second reflection.
Sharo_k_h's tweet image. XSS Tip: If you have two parameter reflections in a JavaScript context and can&apos;t close the script tag or break the string with ( &quot; ), you can use a backslash ( \ ) to escape the ( &quot; ) of the first reflection and inject your JavaScript payload in the second reflection.
12
69
326
197
16K

United States Trends

You might like

Something went wrong.


Something went wrong.