{"uuid": "f27da7e6-2e08-4203-a983-ff94308434db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/bhhub/854", "content": "#BugBountyTips of the Day\nBug: Stored XSS   Tried to input XSS payload through proxy.  Phone Number Field- Through Browser: Only Numeric Digits allowed (Alphabet and Special Characters Blocked)  Through Burp Proxy: 123\"><svg+onload=prompt(document.domain)> (Stored XSS)  #bugbounty #cybersecurity #pentest  https://t.co/fsBO67bRoT\n---\nI struggled with big scope targets so I started using Xmind's @Jhaddix  techniques 2 days ago.  So far: 1 P1 5 P3 (2 duplicated) 29 P4  Helps with your organization, your note process, and believe it or not, your overall understanding of the target!  Thanks @Jhaddix  #BugBounty  https://t.co/aMw8QOZAHV\n---\n\ud83d\udd25 Bug Hunter's Methodology: Application Hacking v1  #NahamCon2022 slides by @Jhaddix  * Tech profiling * Finding CVEs & misconfigs * Port scanning * Content discovery * Spidering * Analyzing JavaScript & params  +tons of tools for \u261d\ufe0f  #bugbountytips   https://t.co/ts4uSTr70I\n---\nAnd this is why I love FOSS, there are a couple of guys out there working on exciting new things for reconftw just for fun:  \ud83d\udd25 The desired web GUI for reconftw will become real \ud83d\udd25  Big shoutout to the authors @_luriel and @mx61tt   #reconftw #bugbounty #recon #hacking  https://t.co/JVfazKCBQM\n---\nQuick Recon \ud83d\udd25\ud83d\udd25 cat roots | assetfinder | naabu -silent -passive |  httpx -silent -nc -p 80,443,8080,8443,8888 | aquatone   https://t.co/hdOk5rvwYV #bugbountytips #bugbountytip #bugbounty\n---\nA few days ago I wrote about my recent finding. Worth $4000. I was not active on Twitter so sharing today #bugbounty  https://t.co/oUBEDLNcFP\n---\nIOS Pentesting resources- ## General - Blogs, Papers and Books   - [Basic iOS Apps Security Testing lab]( https://t.co/rDYzwaE0j6) - [IOS Application security \u2013 Setting up a mobile pentesting platform]( https://t.co/bYEP8m5XsB)  #bugbounty #bugbountytips  1/n\n---\nHave you ever get bounty by using default credentials?  Read this thread \ud83d\udd25    #bugbountytips   \ud83e\uddf5\ud83d\udc47\ud83c\udffb\n---\n https://t.co/5dlSaaMmjg  #bugbountytips #bugbounty #infosec\n---\nExploited F5 BIG-IP CVE-2022-1388 (RCE Vulnerability) Will share the steps soon!  #bugbounty #infosec #cybersecurity  https://t.co/C38epKnf2B", "creation_timestamp": "2022-05-12T13:37:04.000000Z"}