bug bounty tips(10-21 2022)

Digital Ocean Tugboat相关配置

cloud/.tugboatIs (github  recon)

org:company filename:.tugboatorg:company filename:.tugboatorg:company filename:.tugboatuser:name authentication AND api_keyuser:name authentication AND api_key

示例:

---authentication:  client_key: 383c8164d4bdd95d8b1bfbf4f540d754 # Informative  api_key: 3b6311afca5bd8aac647b316704e9c6d # Risk.ssh:  ssh_user: admin # Informative  ssh_key_path: "~/.ssh/deploy.pem"  ssh_port: '22'defaults:  region: nyc2  image: ubuntu-18-04-x64  size: '512mb'  ssh_key: ''  private_networking: 'false'  backups_enabled: 'false'

information disclosure常见的测试接口

其它学习教程。