Gaurav Nayak

#Information security consultant #learning binary exploitation #trekking lover

[Gaurav Nayak @4auvar]

Shared my experience of code review and common Security mistakes of developers.

https://t.co/ltpycNYHwh

Cc: @payatulabs

[Altered Security @AlteredSecurity]

Congratulations to @4auvar for clearing our Certified Red Team Professional exam!
#ADLab #CRTP #AlteredSecurity cc @nikhil_mitt
https://t.co/Ieu8xslU8q

[Luke Jahnke @lukejahnke]

🧵Can you work out how to bypass this vulnerable CSRF protection? Read all about this gotcha in my latest blog post

[manuel valdez⛩️ @saur1n]

I'm going to explain how I found two OS command injection vulnerabilities a few days ago.

The vulnerabilities were quite easy to exploit once the injection points were identified.

[Gaurav Nayak @4auvar]

@suchetadalal @MoneylifeF @Moneylifers @MoneylifeIndia I am facing the same issue from @StarHealthIns

Really disappointed with their services.

[Gaurav Nayak @4auvar]

Pathetic service @StarHealthIns

Their doctors are not even validating the documents provided and just keep on repeating the same blunder.

Even after submitting all the required documents they denied reimbursement.

[Gaurav Nayak @4auvar]

😡Absolutely frustrated with StarHealth insurance provider! It's been nearly 2 months since I submitted my reimbursement claim, and I still haven't seen a dime.
Sent many emails as well but no satisfactory response.
Is this what we pay premiums for?
@StarHealthIns @irdaindia

[Bassem M bazzoun @bassemmbazzoun]

Bypassing Two-Factor Authentication for Facebook Accounts ($25,300)

#bugbounty #bugbountytips #cybersecurity #hackerone #ethicalhacking #vulnerability #facebook #meta #instagram #networksecurity #programming #cybersec #infosec
https://t.co/PC3cb4ZkZ5

[NULLCON @nullcon]

🎧Wear your headsets 🌋Volume up for this one!

The flagship HackIM CTF 15th Edition is now open for you to register ➡️https://t.co/o0HsEPdpZ0

⭐Sponsored by @ChaleitG | 🧠Challenges designed by @ENOFLAG

#NullconGoa2023 #Infosec #Conference

[Gaurav Nayak @4auvar]

Good read 👌, super work @win3zz 💪

[Bipin Jitiya @win3zz]

From code execution to S3 data leak, my latest blog post is on the journey of discovering a bug in Meta (Facebook).
You don't want to miss this!
#infosec #hacking #pentesting
https://t.co/UkaQLHUFtL

[Intigriti @intigriti]

Were you able to spot the vulnerability in yesterday's code snippet? 🕵️‍♂️
✅ Yes? That’s impressive!
❌ No? Don't worry. This is your chance to learn, so let's take a look at the writeup 👇
🧵 Be sure to keep reading this thread for more resources and the winner of our swag!

[NULLCON @nullcon]

👨‍💻Learning new #infosec techniques alongside your peers with Hands-On lab sessions will give you the headstart you need for 2023!

👉Register here for the #onlinetrainings ➡️https://t.co/BglvKRrXgB

#Nullcon #Cybersecurity #securecoding #cloudsec #OWASPTop10 #reverseengineering

[Bipin Jitiya @win3zz]

I wonder why some sys-admins configure the server with sudo privileges! 🤔
Tip: Always test for Expression Language Injection like OGNL when you see *.do and *.action file extensions.
#security #bugbountytip #hacking

[Gaurav Nayak @4auvar]

@win3zz Nice find Bipin 🔥

[Gaurav Nayak @4auvar]

Very well written. Must read blog.

[Bipin Jitiya @win3zz]

Check out my latest blog on how I compromised a banking server by exploiting some vulnerabilities.
The journey from AFR to RCE.
I hope you'll like it. 🥂

#security #infosec #hacking
https://t.co/pxC6xjJiuI

[Intigriti @intigriti]

9 Google Dorks you NEED to know about! 🧵

Google knows everything about your target. Google Dorking is using the search engine to find juicy stuff!

Here are some quick examples to show you the POWER of dorks 👇

[ICC @ICC]

The KING is back 👑

Take a bow, Virat Kohli 🙌

#T20WorldCup | #INDvPAK

[NULLCON @nullcon]

💡How often do you revisit the past patched vulnerability?👾There could be a malicious code still hiding in plain sight!

🧠End this year on a progressive note by💻upskilling at Nullcon #OnlineTrainings

🎟️Early Bird offer is activated👉https://t.co/U82ZRoFVen

#Nullcon #Infosec

[Rohit Jadav @saucyvip3r]

[2/100] #100DaysOfCloud Today I researched on AWS logging and monitoring best practices. Below are the points: 👇🧵

[NULLCON @nullcon]

👨‍💻Learn #securecoding

💡Gaurav @4auvar & Mihir @m1h1rd with this training will provide a guide to make the code secure, understand the common mistakes at the code level & guard against #security #vulnerabilities

🖥️Checkout & register here➡️https://t.co/xbSqsuEpqg

#Nullcon

[BSides Delhi @bsidesdelhi]

Proud to have @ChaleitG as Workshops Sponsor for #BSidesDelhi
@SecurityBSides
#securitybsides #bsidesdelhi2022 #infosec