Maham Farizul

Security Researcher | Bug Bounty Hunter | HackerOne | BugCrowd | CTF Player | Certified AppSec Prectitioner

[Ryx @PadhiyarRushi]

Netlogon has a CVSS 9.8 public exploit!

CVE-2026-41089: stack buffer overflow in CLDAP. Working PoC is available. Domain-joined Windows that still expose the classic Netlogon path should treat this as urgent.

https://t.co/F6zzTjpjsE

#Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #WindowsInternals #ActiveDirectory

[kelvinlina𖤍💜✨ @cybergirl_io]

A Goldmine of Free Ethical Hacking, Blueteaming and Penetration Testing Courses

Download: https://t.co/ATUL6usxeh

Follow
@cybergirl_io for more.
Retweet

[7h3h4ckv157 @7h3h4ckv157]

OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. (Just Sharing)

Credit: https://t.co/rZW0bp96Ca

[HackGit @hack_git]

open-source-web-scanners

A list of open source web security scanners on GitHub and GitLab, ordered by Stars. It does not provide in-depth analysis - for more analysis or a wider range of tools.

https://t.co/HxS5Koq7d3

#cybersecurity #pentesting #bugbounty

[6ugs 🖤 @SirBagoza]

I released a new tool made in 10 minutes xD :D

The idea is created more for pentesters, about checking the leaked data in the `/data/data/com.exmaple.app` directory.

Link: https://t.co/jSZGqznviu

#penetration_testing #mobile_application_security

[VAIDIK PANDYA @h4x0r_fr34k]

Hacking Drupal
Want to Pentest Drupal Web Applications?

1. https://t.co/lCA10aJaIm (Cache Poisioning to XSS)

2.https://t.co/w8KUL6tJGE (Prevention Chechlist)

3. https://t.co/rZgtde3Dn5 (CVE-2019–6340 : RCE)

4. https://t.co/oMb9qibA1j (1-Click RCE)

5. https://t.co/mUOwtMxrJp

6. https://t.co/QhQhqyeXqY

7. https://t.co/bHLzKDCEUT

[Fat @fattselimi]

Fast AEM Detector Called AEM Eye Made by @z0idsec

https://t.co/cC8JsE4nK4

#bugbounty #ethicalhacking #cybersec #cybersecurity #infosec #bugbountytip #bugbountytips

[Monika Sharma @Commanak46]

Recon Methodology !!! by @OmArora1603
LINK: https://t.co/jW0UrmtoEy

#bugbounty #bugbountytips

[Coffin @lostsec_]

so finally wait is over i released my customBsqli tool i hope this will help you all in bbp to find timebased sqli.. https://t.co/IyJHBGLenJ

[Shreyas Chavhan @shreyas_chavhan]

A lot of you guys needed me to share my learnings, resources & experiences. I have tried my best to include possibly every good and bad that I faced in my 12 month journey into bb in this blog, emotionally & stat*lly.

🔗 Link: https://t.co/wlzn2EfATZ

#bugbountytips #BugBounty

[Cybernetic Research @cybernetic_res]

A list of the most common configuration files that you should always check for! 🤠

Credits:@intigriti

#bugbountytips #bugbounty #cybersecurity

[VAIDIK PANDYA @h4x0r_fr34k]

Hacking PhpMyAdmin
6 Blogs to learn phpmyadmin

1. https://t.co/oMCsMY7rDc (Unauthorized Access)

2. https://t.co/IY1W7bxGAd (Wordlist)

3. https://t.co/gP1uuQFEy6

4. https://t.co/ZmLo30PiNL (Vuln List)

5. https://t.co/Dq43cqzCrq

6. https://t.co/IIqF2hNkoR

CHECK PINNED TWEET FOR TRAININGS !

[Rohit Kumar @0xloooser]

Awesome Bug Bounty Bookmarks🔖

A Thread🧵 👇

[Gudetama @gudetama_bf]

Nuclei Template : REFLECTION

Potential XSS, SSRF, Cache Poisoning and Open URL Redirection, OAUTH Redirection

nuclei -t reflection[.]yaml -u target

#bugbountytips #bugbounty

[Luke Stephens (hakluke) @hakluke]

Looking for new wordlists for bruteforcing endpoints?

Make sure to check out @Assetnote's Wordlists!

They'll probably have what you're looking for! 👇

https://t.co/BLWAAdVbaG

[Coffin @lostsec_]

best way to find juicy sensitive information in bbp easy p1

wpscan --url https://t.co/YAruyGyn8C --disable-tls-checks --api-token <here> -e at -e ap -e u --enumerate ap --plugins-detection aggressive --force

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

Bug Bounty Hunting — Complete Guide (Part-23)
https://t.co/R7wWLfuy6K

#bugbounty #bugbountytips #bugbountytip

[Tech Fusionist | Kushal Gangil @techyoutbe]

FREE: AWS Certified DevOps Engineer - Professional (DOP-C02 - English)

(Exam Prep Standard Course)

Enroll for FREE: https://t.co/INSScmpJLt

#awsdevops #DevOps @awscloud

[Coffin @lostsec_]

$$ mass hunting of /.git

cat git.txt | grep "SUCCESS" | gf urls | httpx-toolkit -sc -server -cl -path "/.git/" -mc 200 -location -ms "Index of" -probe
https://t.co/jVWM0Se9YR

[Avix 🍁 @naysec_]

Forgot Password Checklist ✅

https://t.co/LXkTDz5c92