Skip to content

Instantly share code, notes, and snippets.

View prinsharma1999's full-sized avatar
🎯
Focusing

prin sharma prinsharma1999

🎯
Focusing
12 followers · 13 following
  • india
View GitHub Profile
@prinsharma1999
prinsharma1999 / bug bounty dorks.txt
Created July 20, 2020 19:57
responsible disclosure reward r=h:UK
site:*.*.nl intext:security report reward
inurl:responsible disclosure reward
inurl:responsible disclosure bounty
inurl:responsible disclosure swag
site:*.*.nl intext:responsible disclosure reward
responsible disclosure reward r=h:eu
@prinsharma1999
prinsharma1999 / bbprograms.txt
Created December 5, 2020 16:31
Saved from https://gist.github.com/onurcyukruk/5e70bd1f16d0428a34aed08d4cff0773
google dork -> site:.co.uk inurl:"responsible disclosure"
https://registry.internetnz.nz/about/vulnerability-disclosure-policy/
http://www.123contactform.com/security-acknowledgements.htm
https://18f.gsa.gov/vulnerability-disclosure-policy/
https://support.1password.com/security-assessments/
https://www.23andme.com/security-report/
https://www.abnamro.com/en/footer/responsible-disclosure.html
https://www.accenture.com/us-en/company-accenture-responsible-disclosure
https://www.accredible.com/white_hat/
https://www.acquia.com/how-report-security-issue
@prinsharma1999
prinsharma1999 / Android_pen-testing.md
Created October 20, 2022 09:30
Saved from https://gist.github.com/thevillagehacker/4d44572180d8baf220fad168a3bc1d08
@prinsharma1999
prinsharma1999 / tips.md
Created October 20, 2022 09:29
Saved from https://gist.github.com/danylokos/a04b5bdd6b9e4d01fcee766a86f7e520

Debugging 3rd party apps on iOS and Android

Part I: iOS

Prerequisites

  • checkra1n
    • A7 - A10 devices (iPhone 5s - iPhone X), iOS 12.0+
    • Dropbear SSH, port 44, root:alpine
  • USB multiplexing daemon usbmuxd (available via brew)
  • Use scp to copy file to/from device

Forward remote (iDevice) port 44 (Dropbear SSH) to local (Mac) 2222

@prinsharma1999
prinsharma1999 / static_dynamic_ios_inspection.md
Created October 20, 2022 09:28
Saved from https://gist.github.com/rustymagnet3000/605c333519cd265c7eac9d556f46dc75
@prinsharma1999
prinsharma1999 / pentesting_ios_apps_on_electra.txt
Created July 25, 2022 11:54
Saved from https://gist.github.com/milo2012/a69f803472d5ecf3f161ff02c9d19cb2
#Burp SSL Certificate on IOS 11
On iOS 11 you can't just install your MITM root cert, you also need to explicitly trust it.
You can do this by:
Settings -> General -> About -> Certificate Trust Settings -> Flip the switch on your cert
----------------------------------------------------------------------------------------------------------------
#GDB on IOS 11
Source: https://shmoo419.github.io/
gdb
ps -ax | grep -i appName
attach [processNo]
@prinsharma1999
prinsharma1999 / static_dynamic_ios_inspection.md
Created July 25, 2022 11:52
Saved from https://gist.github.com/rustymagnet3000/605c333519cd265c7eac9d556f46dc75
@prinsharma1999
prinsharma1999 / html-injection
Last active December 27, 2021 13:08
# # DESCRIPTION HTML injection is a technique used to take advantage of non-validated input to modify a web page presented by a web application to its users. Attackers take advantage of the fact that the content of a web page is often related to a
# # WRITE-UPS
https://www.softwaretestinghelp.com/html-injection-tutorial/
HTML injection (with XSS possible) on the https://www.data.gov/issue/ using media_url attribute https://hackerone.com/reports/263226
Html Injection and Possible XSS in sms-be-vip.twitter.com https://hackerone.com/reports/150179
“I too like to live dangerously”, Accidentally Finding RCE in Signal Desktop via HTML Injection in Quoted Replies https://thehackerblog.com/i-too-like-to-live-dangerously-accidentally-finding-rce-in-signal-desktop-via-html-injection-in-quoted-replies/index.html
@prinsharma1999
prinsharma1999 / BurpDock
Created May 28, 2021 18:11
Saved from https://gist.github.com/ujjwal96/1181d442b2a92067b5f3f111d5b3b69e
How to setup Burp Suite inside a docker container.
@prinsharma1999
prinsharma1999 / sub.sh
Created May 16, 2021 19:17 — forked from cihanmehmet/sub.sh
sub.sh
#!/bin/bash
echo "Online Subdomain Detect Script"
echo "Twitter => https://twitter.com/cihanmehmets"
echo "Github => https://github.com/cihanmehmet"
echo "CURL Subdomain Execute => curl -s -L https://raw.githubusercontent.com/cihanmehmet/sub.sh/master/sub.sh | bash -s bing.com"
echo "██████████████████████████████████████████████████████████████████████████████████████████████████████████████"
if [[ $# -eq 0 ]] ;
then