Bug Bounty Tools & Writeups | Hide Club

GraphQL pentesting focuses on identifying security vulnerabilities in applications that use GraphQL for data querying. Unlike REST APIs, GraphQL allows clients to request specific data, which can expose underlying issues if not properly secured. Key areas of concern include improper authorization checks, excessive data exposure, and insufficient input validation. Pentesters should look for flaws such as introspection queries revealing sensitive schema details, or complex queries leading to denial of service. Ensuring robust input validation, implementing strict authorization checks, and limiting query complexity are essential practices to secure GraphQL endpoints.

🔗 Hacktricks - GraphQL and Security
🔗 Five easy ways to hack GraphQL targets
🔗 Portswigger - Graphql
🔗 ApiSecurity

📱 PayloadsAllTheThings
📱 hacking graphql
📱 Awesome Graphql Security
📱 Hack-graphql

🖤  NahamCon2024: GraphQL is the New PHP
🖤  Finding Your Next Bug: GraphQL
🖤  GraphQL API Pentesting

📕 Black Hat GraphQL
📕 Hacking APIs - Breaking Web Application ...
📕 API Security in Action

🔍 Link Gopher
🔍 Adblock Plus
🔍 FoxyProxy Standard
🔍 Video Speed Controller
🔍 Check XSS
🔍 HackTools
🔍 Bulk URL Opener
🔍 Temp Mail
🔍 JS Beautify CSS HTML
🔍 Multi-Account Containers

🌐 TruffleHog
🌐 Code Formatter
🌐 Freedium Extension
🌐 BuiltWith
🌐 Wappalyzer
🌐 WhatRuns
🌐 Retire.js
🌐 Cookie Extractor
🌐 Wayback Machine
🌐 EXIF Data Viwer
🌐 Shodan
🌐 S3 Bucket List
🌐 Ublock Origin
🌐 Resources Saver
🌐 Dot Git
🌐 EndPointer

All these GitHub Repositories contains 1000+ Hackerone reports to read from which you can learn how bug bounty hunters did recon to find IDOR Vulnerability, I suggest read atleast 300 reports to get your own unique perspective on IDOR Vulnerability.

A team was discovered 119 vulnerabilities in LTE/5G core infrastructure, each of which could lead to persistent denial of cell service for an entire metropolitan area or city. Some of these vulnerabilities may also be exploited to remotely compromise and access the cellular core. Their research encompasses seven LTE implementations (Open5GS, Magma, OpenAirInterface, Athonet, SD-Core, NextEPC, srsRAN) and three 5G implementations (Open5GS, Magma, OpenAirInterface). They found vulnerabilities in every single LTE/5G implementation tested.

xss0rRecon is a versatile bash script designed to facilitate domain enumeration, URL filtering, parameter discovery, and XSS detection. It is not mandatory to use xss0rRecon alongside xss0r, but doing so provides a significant boost to your scanning efficiency and accuracy. The tool is highly customizable and can be tailored to meet individual user requirements.