Of course, Bug Bounty is nothing about firing random attacks without restrictions. What are their preferred techniques and equipment vendors?.What domain names are used? What are their internal domain names? Then proceed with enumerating sub-domains.How many B Class IP addresses are used? How many C Class IPs?.First, I’ll determine how large is the “territory” of the company on the internet, then…try to find a nice entrance to get in, for example: Luckily, in 2012, Facebook launched the Bug Bounty Program, which even motivated me to give it a shot.įrom a pentester’s view, I tend to start from recon and do some research. With the growing popularity of Facebook around the world, I’ve always been interested in testing the security of Facebook. But speaking of finding vulnerabilities, I prefer to find server-side vulnerabilities first. Sometimes, in order to take over the server more elegantly, it also need some client-side vulnerabilities to do the trick. Of course, both vulnerabilities from the server-side and the client-side are indispensable in a perfect penetration test. Why? Because it’s way much cooler to take over the server directly and gain system SHELL privileges. How I Hacked Facebook, and Found Someone’s Backdoor Script (English Version)Īs a pentester, I love server-side vulnerabilities more than client-side ones. Facebook BugBounty RCE Backdoor Reconnaissance Pentest
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |