Pentesting Mindmap

LFI Parameters

If you need to intercept the Android traffic through BurpSuite:
1)Ensure Burp is listening to more than the loopback address
2)Allow inbound traffic on the Firewall
3)Use ADB to run "settings put global http_proxy IP PORT"
4)Download and trust the CA from http://IP/cert
5)WIN

Remote File Inclusion (RFI)

HTTP Status Codes

Rate limit bypass using some custom headers:

X-Forwarded-For: IP
X-Forwarded-IP: IP
X-Client-IP: IP
X-Remote-IP: IP
X-Originating-IP: IP
X-Host: IP
X-Client: IP

403 bypass techniques

Bypassing Rate Limit Protection

When trying for XSS if alert() is blocked you can use an alternative like:

1. Confirm
2. Prompt
3. Eval
4. Write

@WebHacking

Bug Bounty Tip

Want to learn HTTP Request Smuggling?

Check out this incredible Workshop with over 120 minutes of theory, videos, and practice using Docker Labs


https://gosecure.github.io/request-smuggling-workshop/#0

A curated list of bugbounty writeups (Bug type wise)

https://github.com/devanshbatham/Awesome-Bugbounty-Writeups

403 Bypass tricks...