Pratish Bhansali

MS Cybersec | Penetration Tester | Just a normal guy passionate about cybersecurity, offensive security and yes also Memes!!🙂

[Pratish Bhansali @C1pher15]

@HackerGautam Trying to break into shifa’s account are we?😂

[Manas @ManasH4rsh]

A great android checklist to follow:

https://t.co/HInwXZay7z

[Hossein NafisiAsl @MeAsHacker_HNA]

20 Top Videos to Master Recon 👑

#bugbountytips 🧵👇🏻

[Manas @ManasH4rsh]

You will love this article:)

https://t.co/nkchUbkNyO

[devansh ⚡️ @0xAsm0d3us]

🗡️🛡️A data set of Ethereum smart contract bugs

https://t.co/AOZcQz1vSQ

#solidity #ethereum #cybersecurity

[Renganathan @IamRenganathan]

Wanna Hunt on Apple, Nokia, IBM, or Google?

They Have Hundred Thousands of Subdomains

But How to Start?

A Thread 🧵 on #recon in Large Scope Assets

[Yash Devkate 🇮🇳 @rootxyash]

A thread all about CSRF Tips

Pro tip : Bookmark and Retweet this Tweet!

[Nicolas Krassas @Dinosn]

A cheat sheet that contains advanced queries for SQL Injection of all types.

https://t.co/80WrnqjMqn

[devansh ⚡️ @0xAsm0d3us]

An Intentionally designed Vulnerable Android Application built in Kotlin for sharping your mobile hacking skills via exploiting real-world mobile vulnerabilities.

https://t.co/4FfmEm8ouI

#android #hacking #cybsersecurity

[devansh ⚡️ @0xAsm0d3us]

A curated list of blockchain security Capture the Flag (CTF) competitions

https://t.co/W9FaZvlBrQ

#blockchain #ethereum #solidity

[devansh ⚡️ @0xAsm0d3us]

A curated list of awesome malware analysis tools and resources.

https://t.co/CHQfpLHQ7e

#malware #reversing #hacking #cybersecurity

[Muhammad Daffa @daffainfo]

https://t.co/3r30wz8xys

A simple website to guess API Key / OAuth Token

When you do pentest / Github recon and find API key / OAuth token but you don't know what API key it is, you can use my website that I built from javascript

#bugbountytips #bugbounty #infosec

[Pratish Bhansali @C1pher15]

@GrinchWho31 Hey Mr. Grinch... Merry Christmas!!

[Nepal News English @Nepalnews_Eng]

To test XSS + SQLi + SSTI/CSTI with the same payload use :

'"><svg/onload=prompt(5);>{{7*7}}

' ==> for Sql injection

"><svg/onload=prompt(5);> ==> for XSS

{{7*7}} ==> for SSTI/CSTI
#bugbounty #infosec #TogetherWeHitHarder #bugbountyprotip #Pentesting #bugbountytips

[Manas @ManasH4rsh]

This one is so good for iOS hacking.

https://t.co/Bt1YnBFnM8

[Mazin Ahmed @mazen160]

At FullHunt, we developed, log4j-scan: a fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228. It was mainly for our customers. It's now open-source!
https://t.co/PEm7LIFGU4

All FullHunt customers have this RCE resolved now.

[Nuclei by ProjectDiscovery @pdnuclei]

Scanning Log4j RCE - CVE-2021-44228 using Nuclei Template shared by @_melbadry9 @daffainfo @DhiyaneshDK

Template - https://t.co/w4bZ7RFAA1

Reference - https://t.co/szPUqUhNEB

#hackwithautomation #bugbounty #pentest #security

[Manas @ManasH4rsh]

A complete collection of GAME HACKING! Really interesting stuff

https://t.co/W23Pl1dcjc