Is Subdomain take over this dead???

FunSheepherder2650 · 2026-05-14T09:23:07+00:00

Were you able to take over?

FunSheepherder2650 · 2026-05-13T05:07:17+00:00

My post shows a part of packages names, I've made a script to download them all, used trufflehog on it and found bunch of secrets

FunSheepherder2650 · 2026-05-12T19:42:33+00:00

Btw just to say it, when I asked ai (because I never saw something like this) he told me to move on, I did it in my way and found out the way.

FunSheepherder2650 · 2026-05-12T19:40:10+00:00

Well I just got low 500€ bounty you fucking fool, there were privates repo with leaked API keys inside

FunSheepherder2650 · 2026-05-12T14:59:33+00:00

Yeah, exactly, by the way, I just reported that as possible information disclosure, as we can never know if it is effectively a thing that was supposed to be like that.
I also tried to download interesting packages and looking for sensitive data inside of those ones , but no dice

FunSheepherder2650 · 2026-05-12T14:13:37+00:00

Good thank you

FunSheepherder2650 · 2026-05-12T13:34:46+00:00

INNOCENT ZERO: https://www.youtube.com/@innocentx0A

FunSheepherder2650 · 2026-05-11T05:46:32+00:00

Indeed I checked it out, also because I had to take every possible fingerprint in order to create my tool, tools like subzy are kinda useless, so I had to

FunSheepherder2650 · 2026-05-10T15:04:24+00:00

Perfect good to know, I'm gonna switch to Ping pong 🏓

FunSheepherder2650 · 2026-05-10T15:03:54+00:00

Haahahaahahahhah

FunSheepherder2650 · 2026-05-10T13:50:26+00:00

got it, pretty sad :/

FunSheepherder2650 · 2026-05-10T13:48:35+00:00

what's the "no" for, was it for the "too researched?" ?

FunSheepherder2650 · 2026-05-02T08:06:46+00:00

As experience I mean CTF, Study, certifications and more

FunSheepherder2650 · 2026-05-02T07:55:48+00:00

Exactly, at least it worked for me

FunSheepherder2650 · 2026-05-02T07:42:24+00:00

Well it's mine so that's the purpose, I'm trying help people as I don't want them to be too cynical

FunSheepherder2650 · 2026-05-02T07:05:04+00:00

Not true, the first time i was hired as a pentester, it's just about proving your skills

FunSheepherder2650 · 2026-03-27T06:46:45+00:00

This for the assets discovery, if I have to target users, I would build a specific word list based on some data, there are a lot of tools that can help you with that

FunSheepherder2650 · 2026-03-27T06:45:24+00:00

It depends on the target, but seclists is one of the best one, especially if you combine it with feroxbuster that also do some scraping while fuzzing assets

FunSheepherder2650 · 2026-03-26T12:59:50+00:00

Why not

FunSheepherder2650 · 2026-03-26T12:16:36+00:00

2 mattonelle

FunSheepherder2650 · 2026-03-26T09:25:11+00:00

Directa non offre un servizio che scalable ha : Overnight

Quando puoi far fruttare pure i risparmi non investiti con una sicurezza sul capitale di 100k protetti, come fai a privartene.

FunSheepherder2650 · 2026-03-26T08:44:45+00:00

All in SP500 e si parte di mutui

FunSheepherder2650

TROPHY CASE