Learning & Methodology to find File Read from top 5 POCs by Elite hackers
Hi geeks, it4chis3c (Twitter) came-up with another bounty earning write-up in the Bug Bounty Hunting Series:
Bug Bounty Hunting Series
Hello readers, I read different bug POCs on a daily basis, so I thought to share you some of the top & unique most bounty earned POCs (discovered by other top ranked hackers). If you want me to share more such POCs, kindly comment yes so that I can continue this series.
1. Steps to Find Endpoint:
1: Create test repo
git init lgtm-test
cd lgtm-test
echo "public class Main {}" > Main.java
2. Create valid build config
cat > lgtm.yml <<EOF
extraction:
java:
index:
build_command: ["./build.sh"]
EOF
3. Verify LGTM behavior
- Push to GitHub and enable LGTM at https://lgtm.com