TGViewer
#bugbountytips #bugbountytips @bughuntertips · 3.07K subscribers
Post #552 4.72K
🔥 Finding Vulnerable Hosts with LeakIX

LeakIX is a fantastic tool for quickly identifying various types of vulnerabilities.

Here are a couple of examples of how it can be used:

Exposed .git Repositories
Using the query:
+target_name +plugin:"GitConfigHttpPlugin"

This will provide a list of hosts with publicly accessible .git repositories, which often contain sensitive information.

Unauthenticated MySQL Access
Using the query:
+target_name +plugin:"MysqlOpenPlugin"

This will reveal a list of hosts where MySQL is accessible without authentication.

LeakIX offers many other interesting plugins to help uncover various vulnerabilities. You can find the full list of plugins here.

Link to the website: LeakIX

#bugbounty #bugbountytips
  • 🔥 7
  • ❤ 2
More from @bughuntertips
  1. Jan 7, 2026🔍 SwaggerSpy: Automated OSINT for API Intelligence Looking for exposed secrets in API doc…
  2. Dec 23, 2025🔍 Quick Win: Git Exposure → Secret Hunting 🔥 Step 1: Mass Git Config Hunt nuclei -l aliv…
  3. Dec 16, 2025Want to report a scanner finding, but feel like writing it up is too tedious? 😅 Install t…
  4. Dec 5, 2025If you need to generate a target-specific wordlist, make sure to check out GAP extension.…
  5. Dec 4, 2025Cloudflare has recently started blocking proxy tools such as Burp Suite by detecting their…
  6. Nov 9, 2025If you found a package.json file in the wild, you might find some internal packages vulner…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →