Author: nav1n

Categories
Infosec

//Hello World//

Welcome to nav1n.com

Nothing much to see here yet!, please come back again.

-NS

Connect me on twitter: @admin

N$ 🍥Follow

🤖

N$ 🍥
nav1n0xN$ 🍥@nav1n0x·
21h

If you have a JSON login page, test blind-SQL injection directly in the username and/or password fields like below. #BugBounty #SQLInjection #bugbountytips

Payload injected in username input field:

Reply on Twitter 1642123884076969985Retweet on Twitter 1642123884076969985158Like on Twitter 1642123884076969985602Twitter 1642123884076969985
nav1n0xN$ 🍥@nav1n0x·
23h

In March, I submitted 25 vulnerabilities to 1 program on @Hacker0x01. I cant believe I worked on a single target whole March🧐🧐🧐. And 14 out of 25 were Critical and High severity bugs.

#TogetherWeHitHarder https://hackerone.com/last-month

Reply on Twitter 1642096974773239808Retweet on Twitter 16420969747732398087Like on Twitter 1642096974773239808224Twitter 1642096974773239808
nav1n0xN$ 🍥@nav1n0x·
27 Mar

Scored 10/10 in CVSS today. Both SQL injections were full db + Server takeover using OS shell. #BugBounty

Reply on Twitter 1640391409961254919Retweet on Twitter 164039140996125491915Like on Twitter 1640391409961254919360Twitter 1640391409961254919
nav1n0xN$ 🍥@nav1n0x·
27 Mar

There's an opening for 2x Cyber Security Architects with 7 years experience in Saudi Arabia, if anyone interested DM me, will share the connection.

Reply on Twitter 1640279915625865218Retweet on Twitter 16402799156258652184Like on Twitter 164027991562586521850Twitter 1640279915625865218
nav1n0xN$ 🍥@nav1n0x·
25 Mar

SQL Injection on JSON body POST request. It took me some time, but finally found the right technique and injection point. ``sqlmap -r request.txt --level=5 --risk=3 --force-ssl --ignore-code=500 --dbs`` #SQLInjection #BugBounty

4
Reply on Twitter 1639601064428093442Retweet on Twitter 1639601064428093442319Like on Twitter 16396010644280934421179Twitter 1639601064428093442
Load More...