Koti2

Penetration Tester, Security Researcher

[Koti2 @0xkoti2]

Check out https://t.co/306hkpFtb2

[Koti2 @0xkoti2]

@NoBrokerCare, is there a way to delete my account & personal data completely from the NoBroker app?

Many Indian apps lack a "Delete My Account" option — but the DPDP Act 2023 requires it.

#Privacy #DPDPAct

[Ezekiel @ezekiel_aleke]

Don't understand JOINs in SQL?

This will be the last time🔥

Learn it now with code examples:

[Koti2 @0xkoti2]

I just completed module Advanced Deserialization Attacks in HTB Academy!
Truly fascinating and a great learning experience! https://t.co/iw12B4Ny33 #hackthebox #htbacademy #cybersecurity

[Phith0n @phithon_xg]

Talk about 2 POC of DirtyPipe(CVE-2022-0847)
Original POC: https://t.co/QBHYU6i33N is able to overwrite arbitrary file with offset like ./exp /etc/passwd 5 ":0:0:rootx"
Improved POC: https://t.co/qurmceoXI8 is able to overwrite a SUID program like ./exp /usr/bin/su

[forgedhallpass @forgedhallpass]

The first version of the official @pdnuclei template generator @Burp_Suite plugin is now available at:

https://t.co/G2NPlf36q1

Feature requests and bug reports are welcome.
Feel free to 💬 on Discord.

🎥 coming soon

#nuclei #burpsuite #infosec #hackwithautomation #opensource

[Koti2 @0xkoti2]

10 real-world stories of how we've compromised CI/CD pipelines https://t.co/TyYadwWkS4

[Koti2 @0xkoti2]

Thank you @nektos and @github

[Koti2 @0xkoti2]

I just published Security Automation With GitHub Actions Locally (with nektos/act) https://t.co/kFSdb0nTF9

[Koti2 @0xkoti2]

@h4x0r_dz Lol

[Yogesh Ojha 🚀 @ojhayogesh11]

I am excited to announce reNgine 1.0! In a nutshell, a feature-packed major release that will potentially change the way you Recon!
Here is the reNgine 1.0 trailer.
https://t.co/EjQgXo812h
https://t.co/qx8cJbDuDx
#reconnaissance #recon #security
🧵 1/16

[PortSwigger Research @PortSwiggerRes]

Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464) by @artsploit

https://t.co/Fe1zr2PrSJ #exploit #bugbounty

[nilØx42 🚫 @nil0x42]

🔖 Find unlisted #bugbounty programs who (may) give 💲💲💲

"responsible disclosure" intext:"you may be eligible for monetary compensation"

#bugbountytips

[☣ KitPloit - Hacker Tools @KitPloit]

BigBountyRecon - This Tool Utilises 58 Different Techniques To Expediate The Process Of Intial Reconnaissance On The Target Organisation https://t.co/kL8yurA2Jf

[publiclyDisclosed @disclosedh1]

Logitech disclosed a bug submitted by hammodmt: https://t.co/q61o2vq0r9 #hackerone #bugbounty

[Sam Curry @samwcyo]

Huge thanks to @kapytein for sharing this in 2019:
https://t.co/pFYYild7yo

[payloadartist @payloadartist]

Some cool #cybersecurity labs by @digininja for learning web #security topics -

Web Cache Poisoning
https://t.co/VjlFYQwXFw

Vulnerable LDAP
https://t.co/kKGrdYcYmG

CORS
https://t.co/mO1TGwgkXV

GraphQL
https://t.co/YSHAlepsXf

PostMessage
https://t.co/kpHfmB1087

#bugbounty

[Koti2 @0xkoti2]

it is good to have your own dns/private collaborator

redirect?url=https://t.co/US5gt8VSEK --> firewall blocked
redirect?url=https://t.co/CDzzH5bFfP --> redirect success

CC: @Burp_Suite

[shubs @infosec_au]

Good wordlists are so important when discovering content on an asset. At @assetnote, we've built a wordlists site that updates itself on a monthly basis. For added value, we've included some of our best wordlists that we've manually collected too. https://t.co/30SakEajVB