OP_Vnom

“First, solve the problem. Then, write the code.” – John Johnson

if (brain!=empty)
{
keepCODING();
}
else{
orderCoffee();
}

[TGV Cinemas 🇲🇾 @TGVCinemas]

The release of 'Karuppu' has been delayed. We are currently waiting for updates and refunds will be given to affected sessions.

Stay tuned for updates.

[DarkShadow @darkshadow2bd]

Bug: passive vertical privilege escalation
Severity: 9.8 (critical)

Tips to find:
1. Signup as normal user (no payload)
2. Browse all options of the account
3. Search keywords in burp: role, admin, is_admin, balance etc.
4. Change the value

Join telegram https://t.co/IQMHfSZASe

[Aircorridor @_aircorridor]

Cloudflare hides 19.3% of all websites—but not perfectly.

CloudRip scans subdomains to find IPs not behind Cloudflare protection, exposing the real origin server:
https://t.co/cRzA62yQ5q
@three_cube

[Jenish Sojitra @_jensec]

I usually brute-force API paths with "Debug":true parameter and often it leads to reveal internal debug info to reverse proxies exposing API secrets and tokens.

[Cyber Security News @The_Cyber_News]

⚠️ EY Data Leak - Massive 4TB SQL Server Backup Exposed Publicly on Microsoft Azure

Read more: https://t.co/2U5pBNA6oN

A massive 4TB SQL Server backup file belonging to global accounting giant Ernst & Young (EY) was discovered publicly accessible on Microsoft Azure.

The file's naming convention screamed SQL Server backup (.BAK format), which typically contains full database dumps, including schemas, user data, and, crucially, embedded secrets such as API keys, credentials, and authentication tokens.

A simple HEAD request designed by researchers to retrieve metadata without downloading content revealed a massive size: 4 terabytes of data, which is equivalent to millions of documents or the contents of an entire library.

To Get Daily Security Updates, add Cyber Security News ® as your preferred source on Google -> https://t.co/N1wthFiEi3

#cybersecuritynews

[Harshleen @0xharshleen]

Web Application Penetration Testing Checklist👾
Credits: @e11i0t_4lders0n
🔗https://t.co/z0Mu5mZmST

[Mike Takahashi @TakSec]

Google Dork - Internal Test Environments ⚙️

inurl:test | inurl:env | inurl:dev | inurl:staging | inurl:sandbox | inurl:debug | inurl:temp | inurl:internal | inurl:demo site:example[.]com

Find forgotten endpoints, try techniques 👨‍💻

[chux @chux13786509]

Hackers 🔥
This code contains at least 2 serious vulnerabilities.
Can you spot them? 😋
What would be your exploit? 🤔

[vx-underground @vxunderground]

Some group, who is Scattered Spider, or Scattered Spider-adjacent, is going schizo right now online.

They're showing incredibly sensitive details from Burger King, Victoria Secret, Subaru, etc.

Can someone tell me what these screenshots mean? They're posting these too

[payloadartist @payloadartist]

A T-Mobile bug worth $12k, found by @albinowax :

Simply sending a valid "Expect: 100-continue" was enough to trigger a https://t.co/wR1PgGrNH4 desync. A broken front-end Expect implementation that forwards headers fine, but chokes when the back-end sends a non-100 reply, forgetting it still needs the body.

#bugbounty #bugbountytips

[Cristiano Ronaldo @Cristiano]

Sem o vosso apoio nada seria possível. Os melhores 🇵🇹

[payloadartist @payloadartist]

🪲 Interesting SOQL injection bug in "contentDocumentId" parameter in Salesforce applications found by @m4st3rspl1nt3r, exposing user docs

https://t.co/BMK7mJP80g

[Cristiano Ronaldo @Cristiano]

É NOSSA!!!!!! 🏆

[doomerhunter (Victor Poucheret) @DoomerOutrun]

Hit some huge bounties collaborating with some of the top French bug hunters @0xLupin, Snorlhax, @Blaklis_ accross campaigns and the H1-6102 LHE. Never had so many large rewards in a small timeframe 🤯

Most fun I had in a long time !

[Coffin @lostsec_]

Finally added the recon module! You can now perform more detailed reconnaissance on any target using data from multiple sources. Special thanks to @Karthik__hr and @madhusudan91263 for their contributions and for continuously helping improve it day by day.
site: https://t.co/pjFfqTxbZO

[Coffin @lostsec_]

add this in your hunting list:

ffuf -w subdomains.txt:SUB -w payloads/senstivejs.txt:FILE -u https://SUB/FILE -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" -fs 0 -c -mc 200 -fr false -rate 10 -t 10

for checking in burpsuite:
ffuf -w subdomains.txt:SUB -w payloads/senstivejs.txt:FILE -u https://SUB/FILE -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" -fs 0 -c -mc 200 -fr false -rate 10 -t 10 -x http://localip:port
and check for response size and words if its big or something unique you can check it manually also make sure cut https:// http:// protocol before ffuf by using this command cat subdomains.txt | sed 's|https\?://||g' >finalsubs.txt

[Coffin @lostsec_]

Largest DDOS Attack on our website with 1 Billion+ requests still its not down 🗿
site:https://t.co/eC3MzUgJXM

[Coffin @lostsec_]

This is the best xss automation methodlogy i ever made 🔥this will save your lots of time on hunting must checkout:https://t.co/bQtpAENISa

[Meydi @mehdiparandin]

Explore my blog on XSS WAF bypass, covering various tricks and techniques:
https://t.co/EFYI1dnzPL
#bugbounty #bugbountytip #xss

[Mike Takahashi @TakSec]

New look on the Google Dorking tool! Thank you @wthmanas

Link in thread