Abhinav Shukla

InfoSec Guy,Pentester

[Hacking Articles @hackinarticles]

Pic of the Day

#infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness

[Nitin Gavhane @NitinGavhane_]

📂 API SECURITY TESTING
┃
┣ 📂 Recon
┃ ┣ 📂 API Endpoint Discovery
┃ ┣ 📂 Swagger / OpenAPI
┃ ┣ 📂 GraphQL
┃ ┣ 📂 API Versioning
┃ ┗ 📂 Hidden Endpoints
┃
┣ 📂 Authentication
┃ ┣ 📂 JWT
┃ ┣ 📂 OAuth
┃ ┣ 📂 Session Handling
┃ ┣ 📂 MFA
┃ ┗ 📂 Password Reset
┃
┣ 📂 Authorization
┃ ┣ 📂 BOLA / IDOR
┃ ┣ 📂 Privilege Escalation
┃ ┣ 📂 Role Manipulation
┃ ┣ 📂 Tenant Isolation
┃ ┗ 📂 Function-Level Access
┃
┣ 📂 Input Testing
┃ ┣ 📂 SQL Injection
┃ ┣ 📂 NoSQL Injection
┃ ┣ 📂 SSRF
┃ ┣ 📂 XSS
┃ ┗ 📂 Command Injection
┃
┣ 📂 Business Logic
┃ ┣ 📂 Rate Limit Bypass
┃ ┣ 📂 Race Conditions
┃ ┣ 📂 Price Manipulation
┃ ┣ 📂 Workflow Bypass
┃ ┗ 📂 Mass Assignment
┃
┣ 📂 Data Exposure
┃ ┣ 📂 Excessive Data
┃ ┣ 📂 Sensitive Fields
┃ ┣ 📂 Debug Information
┃ ┣ 📂 API Errors
┃ ┗ 📂 Metadata Exposure
┃
┣ 📂 Advanced
┃ ┣ 📂 HTTP Request Smuggling
┃ ┣ 📂 GraphQL Abuse
┃ ┣ 📂 WebSocket Security
┃ ┣ 📂 Cache Issues
┃ ┗ 📂 API Chaining
┃
┣ 📂 Tools
┃ ┣ 📂 Burp Suite
┃ ┣ 📂 Postman
┃ ┣ 📂 Nuclei
┃ ┣ 📂 ffuf
┃ ┗ 📂 httpx
┃
┗ 📂 Reporting
┣ 📂 Validation
┣ 📂 Reproduction
┣ 📂 Impact
┣ 📂 PoC
┗ 📂 Remediation

API SECURITY MINDSET:

DISCOVER → MAP → TEST → BYPASS → CHAIN → VALIDATE → REPORT

Don't test endpoints one by one.

Map the entire API attack surface and look for relationships between authentication, authorization, input validation, and business logic.

#APISecurity #BugBounty #CyberSecurity #AppSec #WebSecurity #Pentesting

[Nitin Gavhane @NitinGavhane_]

📂 FREE PENETRATION TESTING RESOURCES
┃
┣ 📂 Web Security
┃ ┣ 📂 PortSwigger Web Security Academy
┃ ┃ ┗ https://t.co/Mi9v9vIxrI
┃ ┣ 📂 OWASP Web Security Testing Guide
┃ ┃ ┗ https://t.co/eTG4DOC81Q
┃ ┣ 📂 OWASP Top 10
┃ ┃ ┗ https://t.co/M9PtyjkbS1
┃ ┗ 📂 Web Security Labs
┃ ┗ https://t.co/b4TcCVAIkm
┃
┣ 📂 Practice Labs
┃ ┣ 📂 TryHackMe
┃ ┃ ┗ https://t.co/olFszXWsnN
┃ ┣ 📂 Hack The Box
┃ ┃ ┗ https://t.co/N2vxIJl2Xf
┃ ┣ 📂 OverTheWire
┃ ┃ ┗ https://t.co/onVE571SEW
┃ ┣ 📂 PortSwigger Labs
┃ ┃ ┗ https://t.co/ywqWPKq34B
┃ ┗ 📂 OWASP Juice Shop
┃ ┗ https://t.co/quVnlctUjo
┃
┣ 📂 Vulnerability Research
┃ ┣ 📂 CVE Research
┃ ┃ ┗ https://t.co/OnUSVYO00v
┃ ┣ 📂 Exploit Reproduction
┃ ┃ ┗ https://t.co/MLxfeAFtdQ
┃ ┣ 📂 Security Advisories
┃ ┃ ┗ https://t.co/y5f99BqgOo
┃ ┣ 📂 Vulnerability Writeups
┃ ┃ ┗ https://t.co/eLVdN2Ay0m
┃ ┗ 📂 Root Cause Analysis
┃ ┗ https://t.co/fluSlGlxFq
┃
┣ 📂 Pentesting Methodology
┃ ┣ 📂 Reconnaissance
┃ ┃ ┗ https://t.co/eTG4DOC81Q
┃ ┣ 📂 Enumeration
┃ ┃ ┗ https://t.co/Lq520yn1Ep
┃ ┣ 📂 Vulnerability Assessment
┃ ┃ ┗ https://t.co/Mi9v9vIxrI
┃ ┣ 📂 Exploitation
┃ ┃ ┗ https://t.co/NTG0MNiXET
┃ ┣ 📂 Privilege Escalation
┃ ┃ ┗ https://t.co/olFszXWsnN
┃ ┗ 📂 Reporting
┃ ┗ https://t.co/eTG4DOC81Q
┃
┣ 📂 Tools
┃ ┣ 📂 Burp Suite
┃ ┃ ┗ https://t.co/5GJjQJegmX
┃ ┣ 📂 Nmap
┃ ┃ ┗ https://t.co/goMJC9nnrw
┃ ┣ 📂 Wireshark
┃ ┃ ┗ https://t.co/SuoSQwD3Eb
┃ ┣ 📂 Metasploit
┃ ┃ ┗ https://t.co/NTG0MNiXET
┃ ┣ 📂 Nuclei
┃ ┃ ┗ https://t.co/kkUu6Fxysz
┃ ┗ 📂 Gobuster
┃ ┗ https://t.co/sD5nb65dP0
┃
┣ 📂 OS / Network
┃ ┣ 📂 Linux
┃ ┃ ┗ https://t.co/M6BBvvGarM
┃ ┣ 📂 Windows
┃ ┃ ┗ https://t.co/6j7LlHYivF
┃ ┣ 📂 Networking
┃ ┃ ┗ https://t.co/6hcKvJnJbi
┃ ┣ 📂 Active Directory
┃ ┃ ┗ https://t.co/NEfz3gCOTG
┃ ┗ 📂 Wireshark
┃ ┗ https://t.co/yOR67eLjzh
┃
┣ 📂 Source Code Security
┃ ┣ 📂 CodeQL
┃ ┃ ┗ https://t.co/S4XB5jGrUG
┃ ┣ 📂 Semgrep
┃ ┃ ┗ https://t.co/z9XpT2Y5Hh
┃ ┣ 📂 OWASP Secure Coding
┃ ┃ ┗ https://t.co/fwI9ISboWD
┃ ┗ 📂 Dependency Security
┃ ┗ https://t.co/W5tTv1wQSb
┃
┗ 📂 Learning
┣ 📂 CTFs
┃ ┗ https://t.co/3jV6AS7PxM
┣ 📂 Cheat Sheets
┃ ┗ https://t.co/qwXEzfatBk
┣ 📂 Security Blogs
┃ ┗ https://t.co/eLVdN2Ay0m
┣ 📂 GitHub Security Repositories
┃ ┗ https://t.co/jujFSDgEMm
┗ 📂 Research Notes
┗ https://t.co/S8quxKDDaF

Bookmark this. Study. Practice. Build.

#CyberSecurity #PenetrationTesting #Pentesting #BugBounty #WebSecurity #AppSec #InfoSec #EthicalHacking #CyberSecurityResources #SecurityResearch

[Nitin Gavhane @NitinGavhane_]

📂 PENETRATION TESTING
┃
┣ 📂 Information Disclosure
┃ ┣ 📂 Sensitive Data Exposure
┃ ┣ 📂 Debug Information
┃ ┣ 📂 Backup Files
┃ ┗ 📂 Configuration Exposure
┃
┣ 📂 File Upload
┃ ┣ 📂 Extension Bypass
┃ ┣ 📂 MIME Validation
┃ ┣ 📂 Content-Type Manipulation
┃ ┣ 📂 File Processing
┃ ┗ 📂 Upload → RCE
┃
┣ 📂 Open Redirect
┃ ┣ 📂 URL Parameters
┃ ┣ 📂 Redirect Validation
┃ ┣ 📂 Allowlist Bypass
┃ ┗ 📂 Redirect Chains
┃
┣ 📂 File Inclusion
┃ ┣ 📂 LFI
┃ ┣ 📂 RFI
┃ ┣ 📂 Path Traversal
┃ ┣ 📂 Filter Bypass
┃ ┗ 📂 Inclusion Chains
┃
┣ 📂 XSS
┃ ┣ 📂 Reflected XSS
┃ ┣ 📂 Stored XSS
┃ ┣ 📂 DOM XSS
┃ ┣ 📂 Context Analysis
┃ ┗ 📂 Filter Bypass
┃
┣ 📂 SQL Injection
┃ ┣ 📂 Error-Based
┃ ┣ 📂 Boolean-Based
┃ ┣ 📂 Time-Based
┃ ┣ 📂 Union-Based
┃ ┗ 📂 Blind SQLi
┃
┣ 📂 Command Injection
┃ ┣ 📂 OS Command Injection
┃ ┣ 📂 Blind Command Injection
┃ ┣ 📂 Argument Injection
┃ ┗ 📂 Filter Bypass
┃
┣ 📂 CSRF
┃ ┣ 📂 Token Validation
┃ ┣ 📂 SameSite Cookies
┃ ┣ 📂 Origin Validation
┃ ┗ 📂 CSRF Chains
┃
┣ 📂 SSRF
┃ ┣ 📂 Basic SSRF
┃ ┣ 📂 Blind SSRF
┃ ┣ 📂 SSRF Bypass
┃ ┣ 📂 Redirect Chains
┃ ┗ 📂 SSRF Chains
┃
┣ 📂 CORS
┃ ┣ 📂 Origin Validation
┃ ┣ 📂 Credentials
┃ ┣ 📂 Wildcard Origins
┃ ┗ 📂 Misconfigurations
┃
┣ 📂 API Security
┃ ┣ 📂 Authentication
┃ ┣ 📂 Authorization
┃ ┣ 📂 BOLA / IDOR
┃ ┣ 📂 Mass Assignment
┃ ┗ 📂 Rate Limiting
┃
┣ 📂 GraphQL
┃ ┣ 📂 Introspection
┃ ┣ 📂 Authorization
┃ ┣ 📂 Query Complexity
┃ ┗ 📂 Information Disclosure
┃
┣ 📂 Web Cache
┃ ┣ 📂 Cache Poisoning
┃ ┣ 📂 Cache Deception
┃ ┣ 📂 Cache Key Analysis
┃ ┗ 📂 Cache Bypass
┃
┣ 📂 CVE Research
┃ ┣ 📂 Log4Shell
┃ ┣ 📂 Version Detection
┃ ┣ 📂 Vulnerability Research
┃ ┗ 📂 Patch Validation
┃
┣ 📂 Study Resources
┃ ┣ 📂 Cheat Sheets
┃ ┣ 📂 Payload References
┃ ┣ 📂 Writeups
┃ ┗ 📂 Research Notes
┃
┗ 📂 Scripts
┣ 📂 Recon
┣ 📂 Enumeration
┣ 📂 Fuzzing
┣ 📂 Automation
┗ 📂 Custom PoCs

GitHub:
https://t.co/RtriK5TN8w

RECON → DISCOVER → TEST → BYPASS → VALIDATE → CHAIN → REPORT

A useful collection for learning web security,
penetration testing, and bug bounty methodology.

#CyberSecurity #BugBounty #Pentesting #WebSecurity #InfoSec

[Duty @duty_1g]

🚀 x64dbg-MCP Server — fully automated, dynamic, agentic reverse engineering for x64dbg.

🧠 71 MCP tools
🤖 Fully automated & dynamic agentic RE
🔴 22 debugger event callbacks
⚡ Native Zig plugin — zero dependencies
🛠️ Breakpoints, memory, registers, tracing, xrefs, PE analysis & more
🌐 Streamable HTTP + SSE
📦 x32 + x64
Let your AI agent control, analyze, debug, and dynamically reverse engineer binaries directly through x64dbg.
🔗 https://t.co/5gmqJw6SVm
#x64dbg #MCP #AgenticAI #ReverseEngineering #CyberSecurity #RedTeam #MalwareAnalysis #Zig

[Hacking Articles @hackinarticles]

Pic of the Day

#infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness

[Abhinav Shukla @92abhinav]

Fantastic experience flying from Rewa to Pune with @IndiGo6E and @RewaAirport20!
Special thanks to Shizan for making the boarding process smooth and hassle-free. Your professionalism, guidance, and friendly support made the journey even better.

PNR: EBPHRT
#IndiGo #RewaAirport

[Abhinav Shukla @92abhinav]

@jagograhakjago

[Sourav sharma @Souravs211091]

@JioMart @JioMart_Support Return request for my Symphony 100L Maxwind Cooler was raised on 2 June. It's been over a week and pickup is still pending. I've followed up 4 times, but keep getting the same response: "awaiting approval." Please arrange pickup and resolve this issue.

[Abhinav Shukla @92abhinav]

@flipkartsupport @Flipkart @Walmart @WalmartNews @WalmartWorld @_DigitalIndia @consaff @consaffcircle @aajtak
This is not a solution. I have clearly asked for my refund, nothing else.
#Flipkart #FlipkartFraud #CustomerHarassment #BadCustomerService
#fraud

[Abhinav Shukla @92abhinav]

1) @Flipkart @flipkartsupport @2GUD Flipkart ka experience ab seriously frustrating ho chuka hai.
Mera phone order do baar bina kisi valid reason ke cancel kar diya gaya, lekin jab main charger order cancel karna chahta hoon to bol rahe ho "policy allow nahi karti"

[Abhinav Shukla @92abhinav]

@flipkartsupport @Flipkart @jagograhakjago @jagograhak4444 @PMOIndia @amazonIN @amazon @aajtak @DDNewslive @ABPNews @consaff @consaffcircle @_DigitalIndia @ani_digital @CNBCTV18News @timesofindia @ndtv @ndtvindia @narendramodi @AmitShah @BCCI @CricketNDTV @ICC 10)
This is not a solution. I have clearly asked for my refund, nothing else.
@Flipkart @FlipkartSupport please stop sending scripted responses and actually resolve the issue.
#Flipkart #FlipkartFraud #CustomerHarassment #BadCustomerService

[Abhinav Shukla @92abhinav]

@flipkartsupport @Flipkart @jagograhakjago @jagograhak4444 @PMOIndia @amazonIN @amazon @aajtak @DDNewslive @ABPNews @consaff @consaffcircle @_DigitalIndia @ani_digital @CNBCTV18News @timesofindia @ndtv @ndtvindia @narendramodi @AmitShah @BCCI @CricketNDTV @ICC 9)Now the same thing is happening again in DM. The only response I keep getting is the same copy-paste message saying “a solution has already been provided”.
What solution exactly?Cancelling my phone order twice and then forcing me to keep a charger for a phone I don’t even have?

[Abhinav Shukla @92abhinav]

@flipkartsupport Thanks for the template reply, but this doesn’t solve anything. I already wasted 50+ minutes on customer care, and all I heard was the same scripted line “policy, policy, policy.”

[Abhinav Shukla @92abhinav]

@flipkartsupport Don't worry about my account security. My main concern is that Flipkart itself is doing these kinds of fraud practices.
Cancelling my phone order twice without reason, but refusing to cancel a simple charger order by hiding behind "policy".