AUTOMATE XSS WITH DALFOX AND WAF BYPASS PAYLOADS.

Поділитися
Вставка
  • Опубліковано 29 вер 2024
  • Automating XSS (Cross-Site Scripting) Vulnerability is not just about the tool, but having a file with payloads capable of bypassing WAF configurations from Firewalls, or CDN's (Content Delivery Network's).
    On This Week's Episode of Tools Friday, A Newbie into Bug-Bounty Hunting or Security Researching will learn a quick skill on the following:
    1. How to use Tools like Burpsuite (oral clue) to crawl a target website.
    2. Exporting these crawled domains into a text-file.
    3. Installing Dalfox tool, by simply exporting the "go binary file" without the need to use the "@go*latest* " GitHub build, and facing technical challenges in installing hacking tools built on golang.
    4. Tricks on being fast in hunting for program with the hackers mindset.
    5. Searching for custom xss WAF bypassing payloads on GitHub Repository.
    6. Live in action, automating xss with a batch-list of valid (atlisan & Jira endpoints), using Dalfox, and custom xss (Cross-Site Scripting) payloads
    7. Other side rants on how to be a good security researcher, bug bounty hunter, and more.
    ==============================================================
    How to Update & Fix Go-GROOT issues permanently:
    • Fixing Go GROOT, Updat...
    How to Install Golang Easily, and Troubleshoot problems in Kali-Linux VirtualBox (Bonus: Installing Subfinder Tool):
    • Tools Friday-08: INSTA...
    ------------------------------------------------------------------------------------------------------------------------- IMPORTANT LINKS FOR YOU -------------------------------------------------------------------------------------------------------------------------
    Website (Read Blogs & Checkout Other Services):
    www.fixitgearw...
    Our Store (Buy Through us From our Affiliates):
    www.fixitgearw...
    Donation & Support (A Good Deed To Keep us Going Thank you):
    www.fixitgearw...
    Sponsor A Program (Let's Share Your Business To Our SM-Family):
    www.fixitgearw...
    -------------------------------------------------------------------------------------------------------------------------OUR SOCIAL LINKS -------------------------------------------------------------------------------------------------------------------------
    LinkedIn:
    / fixitgearware-security
    X (Former Twitter):
    / fixitgearware
    Discord:
    / discord
    Linktree:
    linktr.ee/fixi...
    --------------------------------------------------------------------------------------------------------------------------OTHER CHANNELS TO LEARN SOMETHING NEW
    --------------------------------------------------------------------------------------------------------------------------CyberSec:
    / @fixitgearware
    Q&A Session Cybersecurity:
    / @fixitgearwarecybersec...
    Coding:
    / @fixitgearwarecodingch...
    CyberSec & IT Books:
    / @fixitgearwarebookarti...
    WebApp:
    / @fixitgearwareweb-appd...
    Troubleshoot-Problems:
    / @fixitgearwaretroubles...

КОМЕНТАРІ •