How can a simple tool help me with bug bounty?

3 years ago 420
BOOK THIS SPACE FOR AD
ARTICLE AD

LinkShare: a website to find info-sec related resources.

AL

The bug bounty world significantly relies on people reading other security researchers’ blogs, videos, reports, and using published tools.

This community is really helpful in sharing knowledge, yet there are issues with reliability and distribution. It’s all over, from Medium to personal blogs to HackerOne reports.

This is where LinkShare comes in. This website was created to provide quick, dependable, and easily accessible information to the community. LinkShare provides both a graphical user interface and a GraphQL playground for viewing its content.

Website to browse data (left) GraphQL playground to fetch data (right)

LinkShare’s tag-based approach to saving and categorizing resources benefits all levels of bug hunters, from the most experienced to the inexperienced.

LinkShare’s robust search bar has a variety of functions to help you find what you’re looking for. The tags field, for example, is the first field and contains a list of tags that have been assigned to each resource in the LinkShare database. You can read more here about the search bar!

You can use a single tag or a group of tags. The tags combine in an AND operation to produce the desired results.

Tag inputs, search bar.

Type out the bug type; if it is included in the list, the drop-down menu will recommend it to you! and still if the need is require you can use the third field.

The third field, can be used to search the keywords or even links, for example:

How third field can be used!

Scenarios?

If you’re a novice hunter or just getting started with a bug type, adding learning AND/OR methodology tags to any bug type will filter results to resources that provide comprehensive knowledge about the bug and will assist you in developing advanced concepts later.

For instance, if you begin with the XSS bug type, adding those two tags will produce results similar to this :

Beginner’s corner

If you are an intermediate to skilled bug bounty hunters, combining multiple tags, such as XSSAND RCE or XSS AND Account takeover, can be extremely time-saving and beneficial. This would return results whenever an XSShad been escalated to a RCE or Account takeover.

For intermediate to advanced users

Not only that, but users may also look for a tool/video/report/blog/news item depending on the tags linked with their search.

What medium you want your source in?

The website is still in its infancy, and while I am working to update data daily, you may encounter 0 results for certain tag combinations. Hopefully, this will not happen in the near future. :)

Registered users can bookmark from these links that are most pertinent to their requirements and make notes on them. Even notes are categorized along with the resources which makes it easy to search.

My notes and how I utilize the links share here

Registrations are still in Alpha phases, should be available for anyone to register very soon.

LinkShare was built by a bug hunter for bug hunters, and the website’s use is solely motivated by the necessity that drove its creation, namely the need for a centralized database that is regularly updated and allows for personalized storage of resources that helps bug bounty hunters obtain resources quickly, conveniently, and reliably, all while remaining community-driven.

Why was LinkShare created!

LinkShare works on the premise that a user creates content and then shares the link/URL here to benefit their views and contribute content to the website on the topic of their knowledge or research.
Initially, a small community of invited or trusted people will help and curate lists, similar to BugBytes by Intigriti, but as the user base expands, the paradigm will transition to the aforementioned user model.

The end goal is to allow anyone to share their blog/post/video/tool here, a community to help community by community!

It also benefits content creators by promoting their blogs/videos/tools in areas they cover but have yet to convey. Imagine how much information they can fit into the title of their blog vs the tags which would be added to the blog to describe it? so its a free real-state people!

Reading articles benefits everyone, and having this tool on hand makes my life so much easier. The critical question is how good the results are?

Several of my reports were produced as a direct result of my ability to swiftly access materials on LinkShare.

Some reports which I was able to mimic after reading the resources on LinkShare.

Consider the following scenario: If you recall a keyword from an article you read but did not save it, will you Google it again? Perhaps you can, but consider which is easier to use: LinkShare or Googling?

Finally, LinkShare does not simply provide resources; it also provides a mechanism for people to master a particular subject by arranging all of these materials in an organized fashion that includes high-quality research, thoughts, and information that individuals freely provide.

In a world of freely distributed but disorganized knowledge, LinkShare is attempting to collect them in one location to make life easier for those entering and working in this industry, one small step at a time.

How you LinkShare is entirely up to you; I am only a modest developer of a tool that will assist you in your workflow.

I hope it helps you! :)

Read Entire Article