Sahil Ojha's Projects
All about bug bounty (bypasses, payloads, and etc)
š A list of writeups from the Google VRP Bug Bounty program
List of Google Dorks for sites that have responsible disclosure program / bug bounty program
Authenticated SQL Injection to RCE on database server in eScan Management Console
Cross Site Scripting (XSS) in eScan Management Console
Privilege Escalation to access admin user account in eScan Management Console
Reflected Cross Site Scripting (XSS) in eScan Management Console
Stored Cross-Site Scripting (XSS) vulnerability in billing feature of Issabel issabel-pbx v.4.0.0-6
Stored Cross-Site Scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6
CSRF vulnerability in issabel-pbx 4.0.0-6 to delete any user
CSRF vulnerability in issabel-pbx 4.0.0-6 to delete any user group
CSRF vulnerability in issabel-pbx v.4.0.0-6 to delete any new virtual fax of users
Directory Listing vulnerability in issabel-pbx 4.0.0-6 exposing application sensitive files
digMaster is a command-line tool written in Go for performing DNS lookups. It allows users to quickly query DNS records for multiple subdomains specified in a file or entered interactively. This tool is built with an intention to identify subdomain takeover manually from DNS records.
Collection of Facebook Bug Bounty Writeups
Semgrep rules registry
Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
Swagger XSS