Akash Katare

Security Consultant | Passionate about infosec |
Web | API | AWS | Android | iOS | ThickClient application Penetration Tester | Source Code Reviewer 😎

[Akash Katare @AkashKatare18]

🔗 Mastering vphone-cli (Part 1): Building a Jailbroken iOS 26.1 Virtual iPhone on Apple Silicon:
https://t.co/sBBrVdRZKX
🔗 Mastering vphone-cli (Part 2): Configuring the Jailbroken iOS 26.1 Virtual iPhone for Mobile Application Security Testing:
https://t.co/AUBCL4fUnG

[Akash Katare @AkashKatare18]

Just published
Assessing Security Risks of Local Storage on Non-Jailbroken iOS Devices
https://t.co/HkramlmquT (Part-1)

Unlocking Potential: Exploring Frida & Objection on Non-Jailbroken Devices without Application Patching (Part-2)
https://t.co/a0IyrIgYlw

#infosecurity #ios

[Akash Katare @AkashKatare18]

@anotherkhanhtq @immunefi @0xMackenzieM ,,

[Vaishali_Nagori @NagoriVaishali]

"8 Ways To Bypass SSL Pinning in iOS Application", my second blog with @appknox

https://t.co/wbQ0yUP6EQ

#penetrationtesting #hacker #bugbountytips #iossecurity
#freelancer #Dancer #bugbountywriteup

[Akash Katare @AkashKatare18]

@PanegavSharan Noiseeeeee sirji @PanegavSharan l33t👌👌

[Sharan Panegav @PanegavSharan]

Just wrote a blog on hackish way to capture 'XMPP' traffic of mobile applications

RT if you found useful 😀 #bugbounty #xmpp

https://t.co/AqbDsjuvfI

[bugcrowd @Bugcrowd]

If you're hunting for low-hanging bugs in source code, grep and regex can help you to identify hotspots. For example, you might find basic rXSS in PHP with something like this:

grep -r "echo.*\$_\(GET\|REQUEST\|POST\)" .

[Akash Katare @AkashKatare18]

LFI via Downloading Documents
1)Found download button to download documents
2)Capture request in burp & found document location was defined in "filepath" parameter
3)Replace ?filepath=/etc/passwd
4)Boom LFI .....
#bugbountytips #bugbounty

[Akash Katare @AkashKatare18]

@Pratik_S_CEH @NagoriVaishali Congratulations bro .......

[Akash Katare @AkashKatare18]

@RakeshMane10 Awesome sirji

[Akash Katare @AkashKatare18]

I have just published blog on Hands-on AWS S3 Bucket Takeover -
Suggestions & feedback are appreciated
#awssecurity #BugBounty https://t.co/ypzfbJjgxr

[Akshaey @w3bw01f]

I just published Introduction To Json Web Tokens(JWT). Feedback are always welcomed. https://t.co/iI5ULDw1WQ

[Akshaey @w3bw01f]

I just published Second blog on Abusing JSON Web Tokens.
Feedback are highly appreciated. https://t.co/ykD5ecTHjN

[Akash Katare @AkashKatare18]

The second Blog Post of AWS penetration Testing is out
Exploiting Amazon S3 Bucket Vulnerabilities
#AWS #PenetrationTesting #Security
https://t.co/XoJcSHQLmG

[Akash Katare @AkashKatare18]

Hello guys i have just started to write about AWS penetration testing series, Part -1) is published stay connected for upcoming blog posts about AWS penetration Testing..
Feedbacks and retweets are appreciated 👨‍💻😊
Thank you @SandeepL337 sir for all help.
https://t.co/ESratXIOd1

[Akash Katare @AkashKatare18]

@AdeshKolte @SandeepL337 Its available on 👉👉 https://t.co/Upwm5y3Uke

[Akash Katare @AkashKatare18]

@SecureLayer7 @ved_wayal Congratulations vedant sir!!!

[Akash Katare @AkashKatare18]

@ved_wayal @Hacker0x01

[Akash Katare @AkashKatare18]

@ved_wayal @Hacker0x01 @RakeshMane10 Congratulations sirji👌👌