It’s been a while since my last update, but I’m thrilled to share some exciting news about my project called Fback

1/5
#bugbounty #bugbountytips #bugbountytools #recon #hacking #CyberSecurity

Subdomain Enumeration - Finding subdomains that are hidden in the cloud.

We need to conduct a certificate search on the IP ranges of cloud providers such as Amazon, Digital Ocean, Google, and Microsoft. 1/3

I’ve added a new feature to Robofinder, and now you can extract old parameters from archived robots.txt files. This is very useful for your recon process because you may find hidden or deprecated parameters that other tools might miss.

Github: github.com/Spix0r/robof...

Robots.txt File And #Reconnaissance

What is a robots.txt file?

The robots.txt file is designed to restrict web crawlers from accessing certain parts of a website. However, it often inadvertently reveals sensitive directories that the site owner prefers to keep unindexed.

1/3

Writeup-Miner is live again on T.me/Daily_Writeups

Join to be among the first to access the latest cybersecurity write-ups!

Source Code: github.com/Spix0r/write...

I’ve created a tool called Writeup-Miner to fetch the latest write-ups on any topic (specified by #hashtags) from Medium, store them in MongoDB or .txt, and send notifications to Telegram/Discord.

You can access the tool here:
github.com/Spix0r/write...

I've put together a comprehensive guide for anyone interested in configuring a #DNS server for Out-Of-Band ( #OOB ) data #exfiltration. This resource will enhance your understanding of how DNS operates. 1/3

I’ve analyzed numerous tools, blogs, tweets, and other resources on bypassing 403 #Forbidden errors using HTTP Headers #Fuzzing techniques. After extensive research, I’ve compiled a list of headers you can fuzz to potentially #bypass 403 restrictions. 1/2

#BugBounty #bugbountytips #infosec #pentest

Bluesky now has over 10 million users, and I was #318,252!