[{"data":1,"prerenderedAt":900},["ShallowReactive",2],{"announcement":3,"i-tabler:sun":11,"i-tabler:moon":16,"i-tabler:menu-2":18,"i-tabler:x":20,"i-simple-icons:youtube":22,"i-simple-icons:github":24,"i-simple-icons:x":26,"i-simple-icons:linkedin":28,"i-tabler:arrow-up-right":31,"post-live-bug-bounty-hunting":33,"post-nav-live-bug-bounty-hunting":877,"video-live-bug-bounty-hunting":889,"i-tabler:copy":898},{"startsAt":4,"endsAt":5,"scramble":6,"cta":7,"message":10},"2026-10-13","2026-11-30","Cache Poisoning:",{"href":8,"label":9},"\u002Fcache-poisoning-the-cache-you-cant-purge","Read it","The cache you can't purge.",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":15},0,24,false,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0m-5 0h1m8-9v1m8 8h1m-9 8v1M5.6 5.6l.7.7m12.1-.7l-.7.7m0 11.4l.7.7m-12.1-.7l-.7.7\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":17},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M12 3h.393a7.5 7.5 0 0 0 7.92 12.446A9 9 0 1 1 12 2.992z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":19},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 6h16M4 12h16M4 18h16\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":21},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M18 6L6 18M6 6l12 12\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":23},"\u003Cpath fill=\"currentColor\" d=\"M23.498 6.186a3.02 3.02 0 0 0-2.122-2.136C19.505 3.545 12 3.545 12 3.545s-7.505 0-9.377.505A3.02 3.02 0 0 0 .502 6.186C0 8.07 0 12 0 12s0 3.93.502 5.814a3.02 3.02 0 0 0 2.122 2.136c1.871.505 9.376.505 9.376.505s7.505 0 9.377-.505a3.02 3.02 0 0 0 2.122-2.136C24 15.93 24 12 24 12s0-3.93-.502-5.814M9.545 15.568V8.432L15.818 12z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":25},"\u003Cpath fill=\"currentColor\" d=\"M12 .297c-6.63 0-12 5.373-12 12c0 5.303 3.438 9.8 8.205 11.385c.6.113.82-.258.82-.577c0-.285-.01-1.04-.015-2.04c-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729c1.205.084 1.838 1.236 1.838 1.236c1.07 1.835 2.809 1.305 3.495.998c.108-.776.417-1.305.76-1.605c-2.665-.3-5.466-1.332-5.466-5.93c0-1.31.465-2.38 1.235-3.22c-.135-.303-.54-1.523.105-3.176c0 0 1.005-.322 3.3 1.23c.96-.267 1.98-.399 3-.405c1.02.006 2.04.138 3 .405c2.28-1.552 3.285-1.23 3.285-1.23c.645 1.653.24 2.873.12 3.176c.765.84 1.23 1.91 1.23 3.22c0 4.61-2.805 5.625-5.475 5.92c.42.36.81 1.096.81 2.22c0 1.606-.015 2.896-.015 3.286c0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":27},"\u003Cpath fill=\"currentColor\" d=\"M14.234 10.162L22.977 0h-2.072l-7.591 8.824L7.251 0H.258l9.168 13.343L.258 24H2.33l8.016-9.318L16.749 24h6.993zm-2.837 3.299l-.929-1.329L3.076 1.56h3.182l5.965 8.532l.929 1.329l7.754 11.09h-3.182z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":29,"hidden":30},"\u003Cpath fill=\"currentColor\" d=\"M20.447 20.452h-3.554v-5.569c0-1.328-.027-3.037-1.852-3.037c-1.853 0-2.136 1.445-2.136 2.939v5.667H9.351V9h3.414v1.561h.046c.477-.9 1.637-1.85 3.37-1.85c3.601 0 4.267 2.37 4.267 5.455v6.286zM5.337 7.433a2.06 2.06 0 0 1-2.063-2.065a2.064 2.064 0 1 1 2.063 2.065m1.782 13.019H3.555V9h3.564zM22.225 0H1.771C.792 0 0 .774 0 1.729v20.542C0 23.227.792 24 1.771 24h20.451C23.2 24 24 23.227 24 22.271V1.729C24 .774 23.2 0 22.222 0z\"\u002F>",true,{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":32},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M17 7L7 17M8 7h9v9\"\u002F>",{"id":34,"title":35,"body":36,"categories":862,"coverImage":866,"date":867,"description":868,"draft":14,"extension":869,"meta":870,"navigation":30,"noindex":14,"path":871,"readingTime":872,"seo":873,"slug":874,"stem":874,"updatedAt":875,"youtubeId":42,"__hash__":876},"blog\u002Flive-bug-bounty-hunting.md","Live Bug Bounty Hunting 🐛💵",{"type":37,"value":38,"toc":848},"minimark",[39,43,47,52,68,77,80,85,88,93,96,100,127,130,160,171,197,207,240,262,281,285,309,320,354,357,412,415,419,440,451,479,489,493,522,525,549,560,564,598,601,620,623,627,632,635,639,658,668,704,707,711,813,816,821,824,827,830,844],[40,41],"post-media",{"video":42},"yINbDd6Hn4c",[44,45,46],"p",{},"Bug Bounty Hunting! Yep, you heard it right. Recently, it's been one of the most famous topics, and that's why today's article is going to be a little different from my previous ones. In this comprehensive guide, I'm going to walk you through how to find targets, what to look for, and how to handle those bugs like a pro. We'll delve into a range of techniques and tools used by bug bounty hunters to identify and exploit vulnerabilities effectively. So, grab your coffee, get comfortable, and let's dive in.",[48,49,51],"h3",{"id":50},"google-dorking","Google Dorking",[44,53,54,55,67],{},"u can use a tool called ",[56,57,63],"a",{"href":58,"rel":59,"target":62},"https:\u002F\u002Fgithub.com\u002FViralmaniar\u002FBigBountyRecon?utm_source=amrelsagaei.com&utm_medium=referral",[60,61],"noopener","noreferrer","_blank",[64,65,66],"strong",{},"BigBountyRecon","that utilizes 58 different techniques using various Google dorks and open-source tools to expedite the process of initial reconnaissance on the target organization.",[69,70,74],"pre",{"code":71,"language":72,"meta":73},"site:*.domain.com inurl:”*admin | login” | inurl:.php | .asp\n","text","",[75,76,71],"code",{},[44,78,79],{},"Searches for URLs containing admin or login in the domain and with PHP or ASP extensions, potentially revealing login pages or vulnerable scripts.",[69,81,83],{"code":82,"language":72,"meta":73},"site::*.domain.com intext:sql syntax near | intext:syntax error has occurred | intext:incorrect syntax near | intext:unexpected end of SQL command | intext:Warning: mysql_connect() | intext:Warning: mysql_query() | intext:Warning: pg_connect()\n",[75,84,82],{},[44,86,87],{},"Searches for SQL-related error messages in URLs, indicating potential SQL injection vulnerabilities.",[69,89,91],{"code":90,"language":72,"meta":73},"site::*.domain.com inurl:\u002Fgeoserver\u002Fows?service=wfs\n",[75,92,90],{},[44,94,95],{},"Targets URLs related to geoserver services, which could expose sensitive information or functionality.",[48,97,99],{"id":98},"finding-subdomains","Finding Subdomains",[69,101,105],{"code":102,"language":103,"meta":73,"className":104,"style":73},"echo domain.com\u002Fs > target.txt\n","bash","shiki shiki-themes vitesse-dark vitesse-light",[75,106,107],{},[108,109,112,116,120,124],"span",{"class":110,"line":111},"line",1,[108,113,115],{"class":114},"s6_DI","echo",[108,117,119],{"class":118},"sRRDT"," domain.com\u002Fs",[108,121,123],{"class":122},"sfIIG"," >",[108,125,126],{"class":118}," target.txt\n",[44,128,129],{},"Sets up a target file for subdomain enumeration.",[69,131,133],{"code":132,"language":103,"meta":73,"className":104,"style":73},"subfinder -dL target.txt -all -recursive -o Subs01.txt\n",[75,134,135],{},[108,136,137,141,145,148,151,154,157],{"class":110,"line":111},[108,138,140],{"class":139},"swzfi","subfinder",[108,142,144],{"class":143},"se4ZP"," -dL",[108,146,147],{"class":118}," target.txt",[108,149,150],{"class":143}," -all",[108,152,153],{"class":143}," -recursive",[108,155,156],{"class":143}," -o",[108,158,159],{"class":118}," Subs01.txt\n",[44,161,162,163,170],{},"Discovers subdomains recursively and saves the results to a file using ",[56,164,167],{"href":165,"rel":166,"target":62},"https:\u002F\u002Fgithub.com\u002Fprojectdiscovery\u002Fsubfinder?utm_source=amrelsagaei.com&utm_medium=referral",[60,61],[64,168,169],{},"SubFinder",".",[69,172,174],{"code":173,"language":103,"meta":73,"className":104,"style":73},"subenum -l target.txt -u wayback,crt,abuseipdb,bufferover,Findomain,Subfinder,Amass,Assetfinder -o Subs02.txt\n",[75,175,176],{},[108,177,178,181,184,186,189,192,194],{"class":110,"line":111},[108,179,180],{"class":139},"subenum",[108,182,183],{"class":143}," -l",[108,185,147],{"class":118},[108,187,188],{"class":143}," -u",[108,190,191],{"class":118}," wayback,crt,abuseipdb,bufferover,Findomain,Subfinder,Amass,Assetfinder",[108,193,156],{"class":143},[108,195,196],{"class":118}," Subs02.txt\n",[44,198,199,200,170],{},"Enumerates subdomains using various sources and tools, consolidating the results into a single file using ",[56,201,204],{"href":202,"rel":203,"target":62},"https:\u002F\u002Fgithub.com\u002Fbing0o\u002FSubEnum?utm_source=amrelsagaei.com&utm_medium=referral",[60,61],[64,205,206],{},"SubEnum",[69,208,210],{"code":209,"language":103,"meta":73,"className":104,"style":73},"cat Subs*.txt | anew | tee AllSubs.txt\n",[75,211,212],{},[108,213,214,217,220,223,226,229,232,234,237],{"class":110,"line":111},[108,215,216],{"class":139},"cat",[108,218,219],{"class":118}," Subs",[108,221,222],{"class":143},"*",[108,224,225],{"class":118},".txt",[108,227,228],{"class":122}," |",[108,230,231],{"class":139}," anew",[108,233,228],{"class":122},[108,235,236],{"class":139}," tee",[108,238,239],{"class":118}," AllSubs.txt\n",[69,241,243],{"code":242,"language":103,"meta":73,"className":104,"style":73},"cat AllSubs.txt | httpx -o AliveSubs.txt\n",[75,244,245],{},[108,246,247,249,252,254,257,259],{"class":110,"line":111},[108,248,216],{"class":139},[108,250,251],{"class":118}," AllSubs.txt",[108,253,228],{"class":122},[108,255,256],{"class":139}," httpx",[108,258,156],{"class":143},[108,260,261],{"class":118}," AliveSubs.txt\n",[44,263,264,265,272,273,280],{},"These steps help refine your target list and ensure you're focusing on live, responsive subdomains, and if ",[56,266,269],{"href":267,"rel":268,"target":62},"https:\u002F\u002Fgithub.com\u002Fprojectdiscovery\u002Fhttpx?utm_source=amrelsagaei.com&utm_medium=referral",[60,61],[64,270,271],{},"httpx","works slowly u can use something like ",[56,274,277],{"href":275,"rel":276,"target":62},"https:\u002F\u002Fblog.amrelsagaei.com\u002Fsegfault-your-ultimate-cybersecurity-workspace\u002F?utm_source=amrelsagaei.com&utm_medium=referral",[60,61],[64,278,279],{},"SegFault","for a better internet connection.",[48,282,284],{"id":283},"collecting-and-analyzing-urls","Collecting and Analyzing URLs",[69,286,288],{"code":287,"language":103,"meta":73,"className":104,"style":73},"cat AliveSubs.txt | waybackurls | tee urls.txt\n",[75,289,290],{},[108,291,292,294,297,299,302,304,306],{"class":110,"line":111},[108,293,216],{"class":139},[108,295,296],{"class":118}," AliveSubs.txt",[108,298,228],{"class":122},[108,300,301],{"class":139}," waybackurls",[108,303,228],{"class":122},[108,305,236],{"class":139},[108,307,308],{"class":118}," urls.txt\n",[44,310,311,312,319],{},"Retrieves archived URLs using ",[56,313,316],{"href":314,"rel":315,"target":62},"https:\u002F\u002Fgithub.com\u002Ftomnomnom\u002Fwaybackurls?utm_source=amrelsagaei.com&utm_medium=referral",[60,61],[64,317,318],{},"Wayback Machine"," for further analysis.",[69,321,323],{"code":322,"language":103,"meta":73,"className":104,"style":73},"cat urls.txt | grep '=' | tee param.txt\n",[75,324,325],{},[108,326,327,329,332,334,337,341,344,347,349,351],{"class":110,"line":111},[108,328,216],{"class":139},[108,330,331],{"class":118}," urls.txt",[108,333,228],{"class":122},[108,335,336],{"class":139}," grep",[108,338,340],{"class":339},"sy_C3"," '",[108,342,343],{"class":118},"=",[108,345,346],{"class":339},"'",[108,348,228],{"class":122},[108,350,236],{"class":139},[108,352,353],{"class":118}," param.txt\n",[44,355,356],{},"Filters URLs with parameters and saves them for parameter-based testing.",[69,358,360],{"code":359,"language":103,"meta":73,"className":104,"style":73},"cat urls.txt | grep -iE '.js'|grep -ivE '.json'|sort -u | tee js.txt\n",[75,361,362],{},[108,363,364,366,368,370,372,375,377,380,382,385,388,391,393,396,398,400,403,405,407,409],{"class":110,"line":111},[108,365,216],{"class":139},[108,367,331],{"class":118},[108,369,228],{"class":122},[108,371,336],{"class":139},[108,373,374],{"class":143}," -iE",[108,376,340],{"class":339},[108,378,379],{"class":118},".js",[108,381,346],{"class":339},[108,383,384],{"class":122},"|",[108,386,387],{"class":139},"grep",[108,389,390],{"class":143}," -ivE",[108,392,340],{"class":339},[108,394,395],{"class":118},".json",[108,397,346],{"class":339},[108,399,384],{"class":122},[108,401,402],{"class":139},"sort",[108,404,188],{"class":143},[108,406,228],{"class":122},[108,408,236],{"class":139},[108,410,411],{"class":118}," js.txt\n",[44,413,414],{},"Extracts JavaScript files from URLs for analysis.",[48,416,418],{"id":417},"nuclei-for-vulnerability-scanning","Nuclei for Vulnerability Scanning",[69,420,422],{"code":421,"language":103,"meta":73,"className":104,"style":73},"nuclei -list urls.txt -t \u002Ffuzzing-templates\n",[75,423,424],{},[108,425,426,429,432,434,437],{"class":110,"line":111},[108,427,428],{"class":139},"nuclei",[108,430,431],{"class":143}," -list",[108,433,331],{"class":118},[108,435,436],{"class":143}," -t",[108,438,439],{"class":118}," \u002Ffuzzing-templates\n",[44,441,442,443,450],{},"Scans URLs using Nuclei's ",[56,444,447],{"href":445,"rel":446,"target":62},"https:\u002F\u002Fgithub.com\u002Fprojectdiscovery\u002Ffuzzing-templates?utm_source=amrelsagaei.com&utm_medium=referral",[60,61],[64,448,449],{},"fuzzing templates"," to identify potential vulnerabilities.",[69,452,454],{"code":453,"language":103,"meta":73,"className":104,"style":73},"nuclei -list AliveSubs.txt -t \u002Fnuclei-templates\u002Fvulnerabilities -t \u002Fnuclei-templates\u002Fcves -t \u002Fnuclei-templates\u002Fexposures\n",[75,455,456],{},[108,457,458,460,462,464,466,469,471,474,476],{"class":110,"line":111},[108,459,428],{"class":139},[108,461,431],{"class":143},[108,463,296],{"class":118},[108,465,436],{"class":143},[108,467,468],{"class":118}," \u002Fnuclei-templates\u002Fvulnerabilities",[108,470,436],{"class":143},[108,472,473],{"class":118}," \u002Fnuclei-templates\u002Fcves",[108,475,436],{"class":143},[108,477,478],{"class":118}," \u002Fnuclei-templates\u002Fexposures\n",[44,480,481,482,170],{},"Scans for specific vulnerabilities such as CVEs, exposures, and SQL injection based on predefined ",[56,483,486],{"href":484,"rel":485,"target":62},"https:\u002F\u002Fgithub.com\u002Fprojectdiscovery\u002Fnuclei-templates?utm_source=amrelsagaei.com&utm_medium=referral",[60,61],[64,487,488],{},"templates",[48,490,492],{"id":491},"xss-automation","XSS Automation",[69,494,496],{"code":495,"language":103,"meta":73,"className":104,"style":73},"cat urls.txt | uro | gf xss > xss.txt\n",[75,497,498],{},[108,499,500,502,504,506,509,511,514,517,519],{"class":110,"line":111},[108,501,216],{"class":139},[108,503,331],{"class":118},[108,505,228],{"class":122},[108,507,508],{"class":139}," uro",[108,510,228],{"class":122},[108,512,513],{"class":139}," gf",[108,515,516],{"class":118}," xss",[108,518,123],{"class":122},[108,520,521],{"class":118}," xss.txt\n",[44,523,524],{},"Detects XSS patterns in URLs and saves the results to a file.",[69,526,528],{"code":527,"language":103,"meta":73,"className":104,"style":73},"dalfox file xss.txt  | tee XSSvulnerable.txt\n",[75,529,530],{},[108,531,532,535,538,541,544,546],{"class":110,"line":111},[108,533,534],{"class":139},"dalfox",[108,536,537],{"class":118}," file",[108,539,540],{"class":118}," xss.txt",[108,542,543],{"class":122},"  |",[108,545,236],{"class":139},[108,547,548],{"class":118}," XSSvulnerable.txt\n",[44,550,551,552,559],{},"Uses ",[56,553,556],{"href":554,"rel":555,"target":62},"https:\u002F\u002Fgithub.com\u002Fhahwul\u002Fdalfox?utm_source=amrelsagaei.com&utm_medium=referral",[60,61],[64,557,558],{},"Dalfox","for fast and accurate XSS detection.",[48,561,563],{"id":562},"local-file-inclusion-lfi-detection","Local File Inclusion (LFI) Detection",[69,565,567],{"code":566,"language":103,"meta":73,"className":104,"style":73},"cat AliveSubs.txt | gau | uro | gf lfi | tee lfi.txt\n",[75,568,569],{},[108,570,571,573,575,577,580,582,584,586,588,591,593,595],{"class":110,"line":111},[108,572,216],{"class":139},[108,574,296],{"class":118},[108,576,228],{"class":122},[108,578,579],{"class":139}," gau",[108,581,228],{"class":122},[108,583,508],{"class":139},[108,585,228],{"class":122},[108,587,513],{"class":139},[108,589,590],{"class":118}," lfi",[108,592,228],{"class":122},[108,594,236],{"class":139},[108,596,597],{"class":118}," lfi.txt\n",[44,599,600],{},"Detects LFI patterns in URLs and saves the results to a file.",[69,602,604],{"code":603,"language":103,"meta":73,"className":104,"style":73},"nuclei -list target.txt -tags lfi\n",[75,605,606],{},[108,607,608,610,612,614,617],{"class":110,"line":111},[108,609,428],{"class":139},[108,611,431],{"class":143},[108,613,147],{"class":118},[108,615,616],{"class":143}," -tags",[108,618,619],{"class":118}," lfi\n",[44,621,622],{},"Specifically scans for LFI vulnerabilities based on tags.",[48,624,626],{"id":625},"cross-origin-resource-sharing-cors-testing","Cross-Origin Resource Sharing (CORS) Testing",[69,628,630],{"code":629,"language":72,"meta":73},"site=$(cat target.txt); gau $site | while read url; do target=$(curl -sIH Origin: https:\u002F\u002Fevil.com -X GET $url) | if grep 'https:\u002F\u002Fevil.com'; then [Potentional CORS Found] echo $url; else echo Nothing on $url; fi; done\n",[75,631,629],{},[44,633,634],{},"Checks for potential CORS vulnerabilities by sending requests with different origins.",[48,636,638],{"id":637},"sql-injection-sqli-testing","SQL Injection (SQLi) Testing",[69,640,642],{"code":641,"language":103,"meta":73,"className":104,"style":73},"python3 sqlifinder.py -d domain.com\n",[75,643,644],{},[108,645,646,649,652,655],{"class":110,"line":111},[108,647,648],{"class":139},"python3",[108,650,651],{"class":118}," sqlifinder.py",[108,653,654],{"class":143}," -d",[108,656,657],{"class":118}," domain.com\n",[44,659,660,661,170],{},"Discovers SQL injection vulnerabilities on the domain using ",[56,662,665],{"href":663,"rel":664,"target":62},"https:\u002F\u002Fgithub.com\u002Famerico\u002Fsqlifinder?utm_source=amrelsagaei.com&utm_medium=referral",[60,61],[64,666,667],{},"SqliFinder",[69,669,671],{"code":670,"language":103,"meta":73,"className":104,"style":73},"sqlmap -m param.txt --batch --random-agent --level 1 | tee sqlmap.txt\n",[75,672,673],{},[108,674,675,678,681,684,687,690,693,697,699,701],{"class":110,"line":111},[108,676,677],{"class":139},"sqlmap",[108,679,680],{"class":143}," -m",[108,682,683],{"class":118}," param.txt",[108,685,686],{"class":143}," --batch",[108,688,689],{"class":143}," --random-agent",[108,691,692],{"class":143}," --level",[108,694,696],{"class":695},"sUQhE"," 1",[108,698,228],{"class":122},[108,700,236],{"class":139},[108,702,703],{"class":118}," sqlmap.txt\n",[44,705,706],{},"Performs SQL injection testing on parameters.",[48,708,710],{"id":709},"open-redirect-detection","Open Redirect Detection",[69,712,714],{"code":713,"language":103,"meta":73,"className":104,"style":73},"cat urls.txt | grep -a -i =http | qsreplace 'evil.com' | while read host do;do curl -s -L $host -I| grep evil.com && echo $host 3[0;31mVulnerable\\n ;done\n",[75,715,716],{},[108,717,718,720,722,724,726,729,732,735,737,740,742,745,747,749,753,756,759,762,766,769,773,777,780,782,784,787,790,793,796,799,802,804,807,810],{"class":110,"line":111},[108,719,216],{"class":139},[108,721,331],{"class":118},[108,723,228],{"class":122},[108,725,336],{"class":139},[108,727,728],{"class":143}," -a",[108,730,731],{"class":143}," -i",[108,733,734],{"class":118}," =http",[108,736,228],{"class":122},[108,738,739],{"class":139}," qsreplace",[108,741,340],{"class":339},[108,743,744],{"class":118},"evil.com",[108,746,346],{"class":339},[108,748,228],{"class":122},[108,750,752],{"class":751},"sR8n-"," while",[108,754,755],{"class":114}," read",[108,757,758],{"class":118}," host",[108,760,761],{"class":118}," do",[108,763,765],{"class":764},"somML",";",[108,767,768],{"class":751},"do",[108,770,772],{"class":771},"sG2Fq"," curl -s -L ",[108,774,776],{"class":775},"snInM","$host",[108,778,779],{"class":771}," -I",[108,781,384],{"class":122},[108,783,336],{"class":139},[108,785,786],{"class":118}," evil.com",[108,788,789],{"class":764}," &&",[108,791,792],{"class":114}," echo",[108,794,795],{"class":775}," $host",[108,797,798],{"class":118}," 3[",[108,800,801],{"class":695},"0",[108,803,765],{"class":764},[108,805,806],{"class":139},"31mVulnerable\\n",[108,808,809],{"class":764}," ;",[108,811,812],{"class":751},"done\n",[44,814,815],{},"Checks for open redirects by replacing URLs with a malicious domain and observing the response.",[817,818,820],"h2",{"id":819},"conclusion","Conclusion",[44,822,823],{},"In this guide, we've covered some basic reconnaissance techniques commonly used in bug bounty hunting. However, when you start targeting a platform like HackerOne, BugCrowd, or Intigriti, your approach needs to be thorough and systematic.",[44,825,826],{},"Take notice of everything. Begin by thoroughly examining the target's website. Dedicate time to each step of the process to ensure you uncover what you're looking for. For instance, when discovering subdomains, don't stop there. Investigate each subdomain for potential vulnerabilities, including fuzzing for backup files and log files. This meticulous approach is crucial in bug bounty hunting.",[44,828,829],{},"Remember, recon takes time. Rushing through this phase can lead to missed opportunities. What we've covered here is just the tip of the iceberg. The real magic happens when you invest time and effort into each step, uncovering vulnerabilities that others might overlook. Happy hunting!",[44,831,832,835,842],{},[64,833,834],{},"If you have any questions about this tutorial please leave a comment below or reach out to me on Twitter",[56,836,839],{"href":837,"rel":838,"target":62},"https:\u002F\u002Ftwitter.com\u002Famrelsagaei?utm_source=amrelsagaei.com&utm_medium=referral",[60,61],[64,840,841],{},"@amrelsagaei",[64,843,170],{},[845,846,847],"style",{},"html pre.shiki code .s6_DI, html code.shiki .s6_DI{--shiki-default:#B8A965;--shiki-light:#998418}html pre.shiki code .sRRDT, html code.shiki .sRRDT{--shiki-default:#C98A7D;--shiki-light:#B56959}html pre.shiki code .sfIIG, html code.shiki .sfIIG{--shiki-default:#CB7676;--shiki-light:#AB5959}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html pre.shiki code .swzfi, html code.shiki .swzfi{--shiki-default:#80A665;--shiki-light:#59873A}html pre.shiki code .se4ZP, html code.shiki .se4ZP{--shiki-default:#C99076;--shiki-light:#A65E2B}html pre.shiki code .sy_C3, html code.shiki .sy_C3{--shiki-default:#C98A7D77;--shiki-light:#B5695977}html pre.shiki code .sUQhE, html code.shiki .sUQhE{--shiki-default:#4C9A91;--shiki-light:#2F798A}html pre.shiki code .sR8n-, html code.shiki .sR8n-{--shiki-default:#4D9375;--shiki-light:#1E754F}html pre.shiki code .somML, html code.shiki .somML{--shiki-default:#666666;--shiki-light:#999999}html pre.shiki code .sG2Fq, html code.shiki .sG2Fq{--shiki-default:#DBD7CAEE;--shiki-light:#393A34}html pre.shiki code .snInM, html code.shiki .snInM{--shiki-default:#BD976A;--shiki-light:#B07D48}",{"title":73,"searchDepth":849,"depth":849,"links":850},3,[851,852,853,854,855,856,857,858,859,860],{"id":50,"depth":849,"text":51},{"id":98,"depth":849,"text":99},{"id":283,"depth":849,"text":284},{"id":417,"depth":849,"text":418},{"id":491,"depth":849,"text":492},{"id":562,"depth":849,"text":563},{"id":625,"depth":849,"text":626},{"id":637,"depth":849,"text":638},{"id":709,"depth":849,"text":710},{"id":819,"depth":861,"text":820},2,[863,864,865],"Bug Bounty","Linux","Penetration Testing","\u002Fimages\u002Fblog\u002Flive-bug-bounty-hunting\u002Flive-recon.webp","2024-04-18","A full live hunting walkthrough: Google dorking, subdomain discovery, URL collection and analysis, Nuclei scanning, XSS automation and LFI detection.","md",{},"\u002Flive-bug-bounty-hunting",null,{"title":35,"description":868},"live-bug-bounty-hunting","2025-02-05","BLgInCe9yIWUzCh1lvWIRlSKotkd_IDfFno0_QCoN-0",{"older":878,"newer":883,"total":888},{"slug":879,"title":880,"date":881,"position":882},"create-your-blackhatchat-right-now","Create Your BlackHatChat RIGHT NOW! 🚀🌐","2024-04-01",50,{"slug":884,"title":885,"date":886,"position":887},"irobot-live-bug-bounty-hunting","🤖 iRobot | Live Bug Bounty Hunting 🕵️‍♂️","2024-05-01",48,68,{"id":42,"title":890,"published":891,"url":892,"description":893,"durationSeconds":894,"viewCount":895,"thumbnail":896,"thumbnailSrcset":897},"Live Bug Bounty Hunting  🐛💵","2024-04-16T18:30:39Z","https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=yINbDd6Hn4c","Today, we're jumping into a live program on HackerOne to test out some serious vulnerabilities. We'll be digging into Google Dorking 🔍, XSS 🛡️, LFI 🕵️‍♂️, CORS 🌐, open redirect ➡️, information disclosure 💬, and a bunch more.",1086,127838,"\u002Fimages\u002Fvideos\u002FyINbDd6Hn4c-800.webp","\u002Fimages\u002Fvideos\u002FyINbDd6Hn4c-800.webp 800w, \u002Fimages\u002Fvideos\u002FyINbDd6Hn4c-1280.webp 1280w",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":899},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M7 9.667A2.667 2.667 0 0 1 9.667 7h8.666A2.667 2.667 0 0 1 21 9.667v8.666A2.667 2.667 0 0 1 18.333 21H9.667A2.667 2.667 0 0 1 7 18.333z\"\u002F>\u003Cpath d=\"M4.012 16.737A2 2 0 0 1 3 15V5c0-1.1.9-2 2-2h10c.75 0 1.158.385 1.5 1\"\u002F>\u003C\u002Fg>",1791941259412]