How I Discovering the Origin IP In Bug Bounty — Bug Bounty Tuesday

kerstan

·

Follow

Published in

OSINT Team

·

3 min read

·

Feb 20, 2024

419

1

Listen

Share

Subscribed to: https://medium.com/@kerstan

Hello everyone, I’m Kerstan.

Today is Bug bounty Tuesday, I will share with you how to find your target’s Origin IP during bug bounty hunting.

So, let’s dive right in.

1. Intro

During pentesting, we may encounter different WAFs (Web Application Firewalls) that prevent us from finding the accurate target IP. I am going to share how to find your target’s Origin IP during bug bounty hunting.

When you’re hunting on a bug bounty target and WAF stands in your way, here’s a powerful technique to uncover the Origin IP by scanning the target’s IP range.

I’ll be using a simple yet effective tool called hakoriginfinder by hakluke! Get it!!!

https://github.com/hakluke/hakoriginfinder

2. methodology

Here’s my methodology to find the Origin IP using this tool and technique:

1. Discover your target’s ASN and check : https://bgp.he.net/AS33848#_prefixes