L

I am a nerd

[Ahmed Najeh @im4x7]

#bugbountytips #bugbounty #cybersecurity #Pentesting #Hacking #bugcrowd #Hackerone #IDOR #XSS #SQLI
How I found #SQLI in an unexpected place

Welcome
Through my search on one of the sites
I found a file named https://t.co/MOVmFZ1Gli\administrator
When I click on it, it redirects (302) me to the main page of the site /index.php
Here everyone expects this unimportant file and you leave it

But here I tried to try something else inside him
where I take the request to Burp ,,,,
I decided to add a new Header with a name
X-Forwarded-For :1

I tried to find out the type of database, and I knew it was MySQL, so I decided to use a command that makes the server sleep for a specific number of seconds,

X-Forwarded-For:1"AND(SELECT1(SELECT(SLEEP(5)))im4x)-- im4x
Will reply after 5
X-Forwarded-For:1"AND(SELECT1(SELECT(SLEEP(2)))im4x)-- im4x
Will reply after 2
So I learned that there is BLIND SQLI
#SQLMAP _____________TIME______________
I just use this and dump all data :D

sqlmap -u "https://t.co/YZHmNoGfmu" --header="X-Forwarded-For: 1*" --dbs

Happy Injecting

[Hai vaknin @VakninHai]

Cortana Living of the land.

1) Create LNK file under and name it however you like .
c:\users\***\appdata\Roaming\Microsoft\Windows\Start Menu\Programs

2) Open Cortana and ask her nicely to open Koko for example.

3) parent process will be win32bridge.server.exe.

#lolbas

[Octoberfest7 @Octoberfest73]

On the heels of the recent articles concerning using Microsoft Teams for phishing... tool drop Wednesday
#redteam #malware #cybersecurity

[Barnacules Nerdgasm @Barnacules]

Did you know that @Cloudflare has public DNS servers that block Malware -or- Adult Content? 🤔

1.1.1.1 - Resolve Everything
1.1.1.2 / 1.0.0.2 - Block Malware
1.1.1.3 / 1.0.0.3 - Block Malware & Adult

Like, Follow & Share if you enjoy these Tweets! #TechTalk #Networking #Tips

[L @ArrogancyCG]

@ionstorm Not an authority on Devo but the only gripe I have is dealing with another query language and it not being very intuitive.

[TCM Security @TCMSecurity]

If you have a tight budget and want to become an ethical hacker, we've compiled all the free (or very cheap) resources you need for your journey. You can check out all of the wonderful resources here: https://t.co/T1KUtTNxEM

[L @ArrogancyCG]

@RustySowers @cyb3rops Wouldn't that require intimate knowledge of how the sensor communicates?

[Luke Stephens (hakluke) @hakluke]

How to hack web applications in 2023: Part 1 🚀

💻 Types of web apps
⚙️ Setting up for testing
🪲 RCE
🐞 SQLi
🐛 XXE
🪳 Insecure Deserialization
🐜 XSS

And that's just Part 1! 😱 👇 #hacking #pentesting #bugbounty

https://t.co/uHIDJu0if2

[Luke Stephens (hakluke) @hakluke]

The ultimate OSCP guide: Part 1 - Is OSCP for you?

🤔 Would I recommend it?
⏰ How much time do you need?
🧑‍🔬 How much lab time should you purchase?
🙋 How to ask good questions
💡 Exam tips

Some info is out of date but most is very relevant.

https://t.co/wxSk8kiLiI

[The DFIR Report @TheDFIRReport]

IcedID Macro Ends in Nokoyawa Ransomware

➡️Initial Access: IcedID XLS Macro
➡️Credentials: LSASS, Creds in Files
➡️Persistence: Scheduled Task
➡️Lateral: RDP, SMB, WMI, WinRM, Psexec
➡️C2: IcedID, Cobalt Strike, VNC
➡️Impact: Nokoyawa Ransomware

https://t.co/mcUEFopyvu

1/X

[MalwareHunterTeam @malwrhunterteam]

😂

[The DFIR Report @TheDFIRReport]

Are you or your team creating custom rules in your EDR/SIEM/etc?

Discuss why or why not⬇️

[Florian Roth ⚡️ @cyb3rops]

- I've created a YARA rule generator for the #LOLDrivers project by @M_haggis @_josehelps @nas_bench
- it auto-generated 290 rules
- they matched on 370 samples in a @virustotal retrohunt
- 273 hashes are yet unknown

Results
https://t.co/NGduy38w6z

PR
https://t.co/Ath3mkjcgM

[Luke Stephens (hakluke) @hakluke]

Some programs will upgrade the severity of your XSS bugs if you show impact with weaponised payloads!

Here’s an example JavaScript payload that will create a new administrative Wordpress user.

Keep an eye on those vulnerable WordPress plugins 👀

[John Hammond @_JohnHammond]

𝗧𝗵𝗶𝘀 𝘁𝘄𝗲𝗲𝘁 𝗰𝗼𝗻𝘁𝗮𝗶𝗻𝘀 𝗺𝗮𝗹𝗶𝗰𝗶𝗼𝘂𝘀 𝗰𝗼𝗻𝘁𝗲𝗻𝘁 𝗮𝗻𝗱 𝗵𝗮𝘀 𝗯𝗲𝗲𝗻 𝗯𝗹𝗼𝗰𝗸𝗲𝗱 𝗯𝘆 𝘆𝗼𝘂𝗿 𝗮𝗻𝘁𝗶𝘃𝗶𝗿𝘂𝘀 𝘀𝗼𝗳𝘁𝘄𝗮𝗿𝗲.

[Troy Hunt @troyhunt]

One day, I'm going to do a NSFW only conference talk on the weirdest data breaches I've ever processed. The one I just got sent is going to be right up there at the top of the list. HOLY. SHIT.

[Samir @SBousseaden]

spoofing ppid via seclogo service is a really a cool evasion technique (often a known FP excluded from traditional ppid spoofing detections) I wonder why im not yet seeing it widely adopted :)

https://t.co/zPPJ4uhxuS

[haksec.io @haksecio]

Top 10 Youtube Channels for hackers

🎥 John Hammond
https://t.co/omBSnYMqju

🎥 Nahamsec
https://t.co/DZdHNWa678

🎥 STÖK
https://t.co/lALKmdTLV1

🎥 Farah Hawa
https://t.co/4xZmMBWfkS

🎥 Codingo
https://t.co/lUte01UwLK

Thread 🧵👇

[HackGit @hack_git]

XSS Automation Tool

This tool is designed to help hackers identify and exploit cross-site scripting (XSS) vulnerabilities in web applications. XSS vulnerabilities occur when an application includes user-supplied data in its responses without properly … https://t.co/cbQoWR9te1

[Hakin9 @Hakin9]

Lupo - Malware IOC Extractor and Debugging module for Malware Analysis Automation

Want to learn more?

Check out our article on the website:

https://t.co/VcPFnlc2vS

#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #Linux #windows