pikpikcu
LightNews LightNews
banner
pikpikcu.bsky.social
pikpikcu
@pikpikcu.bsky.social
11 followers 6 following 6 posts
Stay kiddie stay wannabe 😊
Posts Replies Media Videos
pikpikcu.bsky.social
Find bugbounty targets bb.pikpikcu.com
January 1, 2025 at 1:18 PM
pikpikcu.bsky.social
CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).

blog.doyensec.com/2024/07/02/c...
github.com/doyensec/CSP...
GitHub - doyensec/CSPTPlayground: CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).
CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT). - doyensec/CSPTPlayground
github.com
October 25, 2024 at 6:34 AM
pikpikcu.bsky.social
CVE-2024-9264 - Grafana Post-Auth DuckDB SQL Injection (File Read)

POC: github.com/nollium/CVE-...
Search Engine Dork:
SHODAN: product:"Grafana (Open Source)"
FOFA: app="Grafana"

#Vulnerability #bugbounty
GitHub - nollium/CVE-2024-9264: Exploit for Grafana arbitrary file-read (CVE-2024-9264)
Exploit for Grafana arbitrary file-read (CVE-2024-9264) - nollium/CVE-2024-9264
github.com
October 25, 2024 at 6:01 AM
pikpikcu.bsky.social
Custom ffuf fork that relies on modified net/http and net/url libraries to avoid strict header and URL parsing.

github.com/sw33tLie/uff
GitHub - sw33tLie/uff: unleashed ffuf
unleashed ffuf. Contribute to sw33tLie/uff development by creating an account on GitHub.
github.com
October 25, 2024 at 5:54 AM
pikpikcu.bsky.social
hostinject (Host Header Injection) Tool is a Python script that allows you to perform host header injection vulnerability testing on a target URL or a list of URLs. It injects various header values and checks for potential vulnerabilities.

github.com/pikpikcu/hos...
GitHub - pikpikcu/hostinject: hostinject (Host Header Injection) Tool is a Python script that allows you to perform host header injection vulnerability testing on a target URL or a list of URLs. It in...
hostinject (Host Header Injection) Tool is a Python script that allows you to perform host header injection vulnerability testing on a target URL or a list of URLs. It injects various header values...
github.com
October 24, 2024 at 9:51 AM
pikpikcu.bsky.social
JS Finding can be used to extract JavaScript (JS) files from either a single domain URL or a list of domains. The tool supports various extraction methods and provides additional options for file download and wordlists creation.

github.com/pikpikcu/js-...
GitHub - pikpikcu/js-finding: JS Finding can be used to extract JavaScript (JS) files from either a single domain URL or a list of domains. The tool supports various extraction methods and provides ad...
JS Finding can be used to extract JavaScript (JS) files from either a single domain URL or a list of domains. The tool supports various extraction methods and provides additional options for file d...
github.com
October 24, 2024 at 9:45 AM