Shadow and Zombie APIs are goldmines for bug bounty hunters. In this video, I’ll show you how to find them using real tools and dorks. Learn to spot forgotten endpoints, dev APIs, and unmonitored endpoints. — Let’s hunt. 🕵️♂️💻
.
.
.
My Website: https://medusa0xf.com/
My Blog: https://medusa0xf.medium.com/
.
.
.
Social media:
Twitter: https://twitter.com/medusa_0xf
Discord: https://discord.com/invite/2PUPD3RHHs
.
.
.
.
Intro (Shadow and Zombie): 0:00
Asset Discovery: 2:33
Google Dorks: 4:52
Shodan Dorks: 7:17
JS Hunting: 11:03
Parameter Fuzzing: 13:53
End: 14:47
.
.
.
Music by Karl Casey @ White Bat Audio
.
.
.
#owasp #apihacking #developer #hackerone #jwt #api #subdomain #portswigger #bugbounty #bola #postman #podcast #pentesting #api #hack #bola #tryhackme #hackerone #apihacking #computerscience #javascript #python #postman #ctf #bughunting #pentesting #hacking #hackingtools #burpsuite #portswigger #ethicalhacking #OAuth #webhacking #programming #websecurity #technology #practical #artificialintelligence #web #recon #bypass