Ayman Rbati

A simple hacker

[Suhrad @SuhradMakwana]

The powerful checklist I use while doing bug bounty or pentesting assessment

It's @owasp based checklist and has 500+ Test Cases

https://t.co/jUkDV6IeYX

#bugbountytip #bugbounty #Pentesting #infosecurity #cybersecurity #Security

[Nicolas Krassas @Dinosn]

Explanation and full RCE PoC for CVE-2025-55182
https://t.co/J4raVgQAeg

[Abhishek Meena @aacle_]

We've curated entire API Pentesting Series into a single, auto-updating Notion page.

• All existing parts
• Future parts added automatically
• One link to bookmark

Access the full library here: https://t.co/sndMacHPYJ

[AI Edge @aiedge_]

You don't need to do more.

You just need to double down on what actually moves the needle.

This prompting framework helps you identify the highest-impact tasks on your to-do list in seconds.

Let's build it👇

__________________________________________________________________________

Step 1. Dump your task list

The more context you give GPT (or any model), the better.

Full prompt: "I want to offload every task, responsibility, and open loop currently taking up mental space. This includes work projects, personal errands, admin tasks, things I’ve been procrastinating, and even vague ideas I haven’t acted on. As I type them out in a freeform list, don’t analyze yet, just observe and capture. Once I’ve finished dumping the list, organize everything into a structured table grouped by category (e.g., work, personal, urgent, recurring, etc.). The goal is to get everything out of my head and into a system so I can focus on what really matters."

Step 2. Identify high-impact tasks

Once you've dumped your entire list, have AI identify the highest-leverage tasks of your day.

Full prompt: "Here’s a full list of tasks I just dumped (paste your organized list or table). Now, act as a strategic productivity coach. Analyze this list and identify the top 3–5 tasks that will create the highest leverage based on impact, urgency, and alignment with my long-term goals. For each one, briefly explain why it matters and what kind of result it unlocks. Ignore tasks that are busywork or low value. I want you to help me focus only on what actually drives progress."

Step 3. Eliminate low-leverage tasks

Now, it's time to filter low-leverage tasks.

Full prompt: "Here’s the full list of tasks again (paste task list). Based on your earlier analysis of what matters most, act as my operations advisor and help me either eliminate or delegate the remaining low-leverage tasks. For each one, tell me: 1) if I should cut it entirely, 2) if I should delegate it to AI, a tool, or a person, and 3) how to delegate it effectively. Keep your answers direct and focused on helping me buy back time without sacrificing results."

Step 4. Action plan

The hard work is done. Now its time to map an actionable plan.

Full prompt: "Based on the refined task list and priorities above, act as my time management strategist. Create a simple action map for the day, broken into time blocks. Assign the highest-impact tasks to specific hours based on typical energy levels (early, mid, or late day), and include buffer space for interruptions or overflow. Make sure it’s realistic and not overloaded. The goal is to stay focused, not just busy."

Full to-do list mapping in <10M.

Bookmark this to clean up your task list.

[Mayfly @M4yFly]

New Active Directory Mindmap v2025.03! 🚀

📖 Readable version: https://t.co/gQd6WsLnzG

🔧 Now fully generated from markdown files—way easier to update and maintain!

💡 Got improvements? PRs welcome! 👉 https://t.co/o52PAmek7b

[T3nb3w @T3nb3w]

🚀 New Blog &amp; PoC: Abusing IDispatch for COM Object Access &amp; PPL Injection

Leveraging STDFONT via IDispatch to inject into PPL processes &amp; access LSASS. Inspired by James Forshaw's research!

🔍 Blog: https://t.co/TKdtwuj509
💻 Code: https://t.co/tlppakaLPO

[Katie Paxton-Fear @InsiderPhD]

So what does make APIs special and different? #apisecurity #apihacking #apis #pentesting

1) Interconnectedness, even if you're sure you don't have APIs, I bet your suppliers do
2) Large attack surfaces that are poorly documented, they balloon into hundreds of endpoints quickly

[Ayman Rbati @AymanRbati]

Abusing JWT public keys without the public key https://t.co/td62JuTy8w

[Elon Musk @elonmusk]

🤣🤣

[Ayman Rbati @AymanRbati]

@AlanTradingYT Thanks for sharing

[Ayman Rbati @AymanRbati]

@AlanTradingYT Hold toujours ?

[Ayman Rbati @AymanRbati]

@AlanTradingYT C’est une bonne idée de rajouter ? Ou la chute peut être rapide ?

[7h3h4ckv157 @7h3h4ckv157]

🚨 OT Penetration Testing 🔥

- Guide to Operational Technology (OT) Security
https://t.co/97AwmjiyP9

- OT Penetration Testing Overview
https://t.co/bnTAdnXq7d

- OT Security Career Path | How to get ready for OT Cybersecurity
https://t.co/PTg9GFmgXa

- OT Security Lesson 1: Top Threats to Industrial Control Systems
https://t.co/pI8H9XQChp

#cybersecurity #Pentesting #Hacking #bugbountytips #infosec #cybersecuritytips #redteam #CTF #pwn #100DaysOfHacking #networksecurity #100DaysOfCyberSecurity

[Coffin @lostsec_]

so finally wait is over i released my customBsqli tool i hope this will help you all in bbp to find timebased sqli.. https://t.co/IyJHBGLenJ

[0x6rss @0x6rss]

My first blog post: Creating a PDF Dropper by Injecting Malicious JavaScript into a PDF with a Cobalt Strike Payload
For the source code and PoC, check out my blog post:👇 https://t.co/sD0lBBNjQs

[Logan Goins @_logangoins]

I wrote a fun write-up on ADCS exploitation, including explanations and custom built examples of practical exploitation for all 13 ESC vulnerabilities. It's available on my blog: https://t.co/zZReyPgeMi

Hope this helps anyone who's interested in #activedirectory security :)

[I am Jakoby @I_Am_Jakoby]

I made a powershell module to work with the LOLBAS project website to automate LOLBIN hunting and execution on your system

this is a really cool way to learn what the current active lolbins are and how to use them

[ACE Responder @ACEResponder]

How Windows access tokens work.

#ThreatHunting #DFIR #Windows

[MATT GRAY @matt_gray_]

Rising Early Is the Ultimate Life Hack

Don't take my word for it. Try it yourself. Wake up 15 minutes earlier tomorrow. Then, 15 more the next day. Build slowly.

You have the power to take control of your time and potential.

What time will you set your alarm for?

[Ayman Rbati @AymanRbati]

Bypassing CSP with policy injection - @PortSwiggerRes
https://t.co/zjfpJE1oi3