bcvbc

摘要： https://www.cnblogs.com/blue1997/p/14678462.html 阅读全文

摘要： https://hackerone.com/reports/952166 阅读全文

摘要： https://github.com/canc3s/cIPR go get github.com/canc3s/cIPR go run cIPR.go url.txt (url.txt的域名不带http或者https) 阅读全文

摘要： 阅读全文

摘要： 345 将base64解密后的sub的值从user改为admin,然后重新导入cooike,访问/admin/即可 346 347 和上一题就多了一个爆破 348 还是爆破 349 私钥泄露 import jwt public = open('private.key', 'r').read() pa 阅读全文

摘要： https://www.jianshu.com/p/87f32d8cbeac java -jar apktool_2.5.0.jar d iFlyIME_v10.0.20.9982.apk -o fly nuclei.exe -t mobile -target fly 阅读全文

摘要： https://www.youtube.com/watch?v=9DYEg_j-_hw 阅读全文

摘要： 文章https://pentester.land/list-of-bug-bounty-writeups.html#bug-bounty-writeups-published-in-2021https://infosecwriteups.com/https://hackerone.com/hackt 阅读全文

摘要： https://github.com/dirsoooo/Recon 阅读全文

摘要： howtohunt https://kathan19.gitbook.io/howtohunt/ HackTricks https://book.hacktricks.xyz/pentesting-web/2fa-bypass https://github.com/EdOverflow/bugbou 阅读全文