Bug Bounty: Best Way To Find XSS & Bypass WAF | Live Demonstration | 2024

[@erwin166]

The best channel!! Excellent videos!

[@Jamaal_Ahmed]

Wow its amazing , please make video after i got xss what next can i do .

[@akroidofficial]

quality content. i always prefer manual rather than automated

[@madhavanrio3210]

yeah dude automated tools are outdated now, because of WAF or other CDNs so try mannualy, and be unique from the crowd

[@nishantdalvi9470]

Please make one more video in where we try bypassing WAF by inputting in equal to sign in our payload around the angular tags

[@digitalcivilulydighed]

10/10!

[@sir_potraheno3892]

Thx, best video about xss

[@Jabir_AfreDy]

Please teach me how to do price tempering and how to know that this sites we can do price tempering

[@codecore_111]

Bro u are a gem 💎

[@Createrrahul1M]

Bro yeah to client side per ho reha he khud ke browsers me change se kya fark padega

[@SecureByBhavesh]

Informative, Please make video on SQLi

[@RyanGiggs-w7i]

Maybe u check in forget paswword for sqli

[@pak8380]

beautiful bro!!!!

[@Coollinux-c2b]

is the lab that you use available in docker? if yes can you share to us

[@studywork3779]

sir if any value is not reflected in source code what shall we do

[@sarthaksharma9721]

intruder allowed by website or not? plz reply

[@shrabanichakraborty8147]

amazing . Make video on how to write bug bounty report

[@Alpha_Aquila]

Please, I'm looking for that's video where you used Ngrok to demonstrate a vulnerability, please can you direct me there

[@BePracticalTech]

Here you go: ua-cam.com/video/Obu2sMfEiT4/v-deo.htmlfeature=shared

[@wearecrypto9286]

Hi bro i didn't under that adding attributes step by encoding can you please clear it?

[@TheCyberWarriorGuy]

Please make some tutorial on BACs !!!

[@Officialheartlessheart]

Please make a video on "XSS finding Methodology"

[@asshu2004]

make some video on p1 bugs..

[@ronicristian4648]

I have a case, about xss stored, when I input:
'-alert(1)-'
'-alert(document.domain)-'
'-alert(document.cookie)-'
The 3 payloads above successfully bring up the xss popup but when I input this payload to steal cookies, why doesn't it work?
'-src="//example/c.js"-'

[@BePracticalTech]

Maybe they have added a protection to prevent js code to read cookies

[@yasaya9139]

Please make a video xxe basic and next level

[@jvr05]

this is very basic how about where //"" all of these are being detected and blocked ???

[@animelover5849]

How to use subspy pip package

[@pratapmahato3471]

Plz make video over sqlmap on live site not on test web

[@BePracticalTech]

We already covered a lot of videos on sql injection that too on live websites. Check out our playlist: ua-cam.com/play/PLrQwMS8b1fmQkMnul6q06vvZL83BuK9Ud.html

[@im_wander]

good one

[@Arben_Short]

how to download your wallpaper

[@damnn_motivation]

Thanks bro

[@im_szaby9190]

how can i bypass html entity encoding

[@khanshaheb4500]

Where is waf bypassing scenario?

[@uttarkhandcooltech1237]

Please share your window theme

[@whitehatboy005]

if this symbol block what can do

[@BePracticalTech]

Then we need to check where our given value is reflecting. Based on that, there could be other ways to execute xss

[@AgungDimasIrawan]

@@BePracticalTech how, give the examples

[@giatalexandersilaban612]

use this in react js broh

[@sabrirais-rb7bl]

pleasse the background windows

[@mdalifislam7319]

Wow 🎉

[@parthshah7271]

Where can we find this particular lab ?

[@Free.Education786]

Excellent video 📹 brother. How to find vulnerable parameters and endpoints. I found many endpoints and parameters from paramspider collector parameth arjun x8, etc, but all of them failed in sqlmap or Ghauri because they are not injectable. How to solve this crucial problem. Thanks for your help and support. 🎉❤

[@AtulRawatpredator]

I don’t understand how WAF is being bypassed over here.

[@khanshaheb4500]

there is no waf bypassing in this video.

[@AtulRawatpredator]

@@khanshaheb4500 Why does the title say so ?

[@goodboy8833]

​@@AtulRawatpredator not here he is just referring to the context where how u can bypass one

[@whateveritis0]

❤❤❤😊

[@asarahamad9182]