Golang For Bug Hunting (Live)

In these two live sessions, I intended to teach how to write tools with golang for vulnerability hunting.

Video by @raminfp

• Part 1 (Persian language) - https://www.youtube.com/watch?v=GY6vrAH_SuU
• Part 2 (Persian language) - https://www.youtube.com/watch?v=KEMFi0V2zdM

Code

• Recon
  • Port scan slow
  • Port scan fast
  • Port scan no auth database
  • Arvan Cloud
    • CDN Finder
    • S3 Bucket Enum
• Clickjacking
• CORS
• DoS
• OGNL Injection - CVE-2022-26134
• Dependency Confusion
• S3 Bucket Takeover
• Subdomain Takeover
• Path Traversal - CVE-2021-41773
• SSRF
• Race Condition

I hope enjoy,
Thanks, Ramin