Bug Bounty: Sub-Checker Tool for enumerating sub-domains
Hello Everyone, While doing some bug-bounty research today, I collected subdomains first. But after then some of the subdomains were not accessible and it was too hard to check them one by one. I couldn’t find a tool to check that collected subdomains are accessible and I wrote a small script. With that tool, if you collected some subdomains, you will be able to check their accessibility. I’m sharing it in the hope that it will help you. About Subchecker: Subchecker is a python tool designed ...
Bug Bounty: Sub-Checker Tool for enumerating sub-domains
Hello Everyone, While doing some bug-bounty research today, I collected subdomains first. But after then some of the subdomains were not accessible and it was too hard to check them one by one. I couldn’t find a tool to check that collected subdomains are accessible and I wrote a small script. With that tool, if you collected some subdomains, you will be able to check their accessibility. I’m sharing it in the hope that it will help you. About Subchecker: Subchecker is a python tool designed ...
The Story Of How I Bypass MAC Filter
Hello everyone, In this story, I will tell you one of my penetration test stories. We were a company which has 200 clients and we were doing penetration tests. On this day, I was focused on their wifi. Because even we find critical issues, the following conversation was happening all the time. IT: Hey, you found it, because we give you a LAN cable for connection. ME: What if an attacker, connect to your wifi in some way or your employer attack you? IT: We trust our employers and our wifi has ...
The Story Of How I Bypass MAC Filter
Hello everyone, In this story, I will tell you one of my penetration test stories. We were a company which has 200 clients and we were doing penetration tests. On this day, I was focused on their wifi. Because even we find critical issues, the following conversation was happening all the time. IT: Hey, you found it, because we give you a LAN cable for connection. ME: What if an attacker, connect to your wifi in some way or your employer attack you? IT: We trust our employers and our wifi has ...
The Story Of How I Bypass SSO Login
Hello everyone, I decided to tell you my stories about offensive security. This is the first story I share on my blog. Hope it will be a good start. In these stories, of course, I can not give the company names but I will tell you how it happened and I will use sometimes example pictures or censured pictures. I found this bug in the Hackerone platform. I chose one target and started with the first step. Always my first step is copying the whole domain addresses from the target page and pastin...
The Story Of How I Bypass SSO Login
Hello everyone, I decided to tell you my stories about offensive security. This is the first story I share on my blog. Hope it will be a good start. In these stories, of course, I can not give the company names but I will tell you how it happened and I will use sometimes example pictures or censured pictures. I found this bug in the Hackerone platform. I chose one target and started with the first step. Always my first step is copying the whole domain addresses from the target page and pastin...
