Core Hacking

#1 online Learning Institute for End to End AI | Data Science | Data Analysis | Machine Learning | Deep Learning | Python | Digital Marketing

[Core Hacking @Core_hacking]

@sundarpichai from last 1 month I was trying google support is Fucked they don't know anything.

I submitted more then 30+ from a billion dollar company that has 0 support.
@Google @GoogleIndia @GooglePlay @googledrive #news #google #googlenews

[Core Hacking @Core_hacking]

@sundarpichai a billion dollar company and the support is really really worst 😞😞😞.
So many people facing this "fgemf-71" search on google.
I was trying to contact them from last 1 month and still no solution.
@Google @GoogleIndia @GooglePlay @googledrive @GoogleWorkspace

[Core Hacking @Core_hacking]

@sundarpichai please look at this problem "fgemf-71" so many users are facing issues and your support suck from the last 1 month I can't find any issue.

@Google @GoogleIndia @GooglePlay

[Core Hacking @Core_hacking]

Does anyone know how to solve this problem

This Google payment issue FGEMF-71

Google support suck it's been more then 30 days.
#googleplay #googlepayment #google #playstore

[Core Hacking @Core_hacking]

@SwiggyCares @Swiggy It's not about the order it's time showing on my screen in your app. And saw this so many times. It's a wrong business practice.

[Core Hacking @Core_hacking]

Look at this @Swiggy how they fool at 10:03PM it was showing 8mins left and at 10:08PM after 5mins it still showed 7mins left.

Why make us fool like this ?

#onlinefood #news #swiggy #food

[Core Hacking @Core_hacking]

@NetflixIndia when Demon Salyer season 4 will be available on Netflix ?
Date & time

[Saakuru Protocol 👾 @saakuru_labs]

Saakuru Gainz is LIVE! 🌟

Explore the $SKR token, tackle daily tasks from partners, and compete for a prize pool of 1.5 million $SKR Tokens! 🎉

🔗 Join now: https://t.co/WcjyRrXOy3

Find out how to win an EXTRA 500,000 $SKR and $9,000 USDC in this thread! 1/5🎉 #SaakuruGainz

[Core Hacking @Core_hacking]

🔥 In 2024, AI like ChatGPT continues to evolve but remains bound by its last update. This highlights a truth: AI can't outdo human creativity. The key to thriving in the AI era? Become a better programmer, using AI as a tool, not a crutch. 💪 #AI #ProgrammingFuture

[Google @Google]

Gemma is a new family of open models that help developers and researchers build AI. Along with the lightweight models, we’re launching tooling that encourages collaboration and a guide to responsible use of these models. Learn more → https://t.co/DCRQ62WYdv

[Core Hacking @Core_hacking]

@Google @GoogleAI i love Gemini AI it's good but I realised it can't create a flowchart?

I used ChatGpt they can create a flowchart. Why are these basic skills missing in Gemini AI?

#geminiai #googleai

[Core Hacking @Core_hacking]

Dive beneath the surface with SkillCodex’s Bug Hunting guide! From OWASP TOP 10 to exploit development, it’s a deep dive into the world of cybersecurity. #BugBounty #InfoSec #CyberSecurity

[BountyHunt3r @Bount3yHunt3r]

A Good Place To Look For High And Critical Vulns

If you have an internal function that is called by multiple external functions, then check if the access control is broken in one of them.

Sometimes, the developers forget to implement the correct access control in all cases, which can allow you call the internal function through a backdoor.

Here is an (oversimplified) example:

The function _mint() takes a target address and mints an NFT to it.

The external function mint() requires the caller to be whitelisted before calling the internal _mint() function.

The function giftNft() accepts a target address, and in case it is non-zero, it checks if it is whitelisted.

Then it decides on the reciever of the NFT it mints. In case target == address(0), then the reciever is msg.sender.

This can allow an attacker to mint an NFT without being whitelisted, by passing the address(0) to the giftNft() function, which will call _mint() for them!

This is not only limited to internal function, but you can also try to abuse storage writing.

For instance, if a two function write to the same mapping, then check to see if you can bypass the access control in one of them and do unauthorized write:

1 - Alice calls addNickname() to link her nickname to her address. it is enforced that the address is the msg.sender.

2 - The function updateNickname() allows any user to link any nickname to any address, which allows bob to point alice's nickname to his address (bob_address)

I hope that was clear!

Let me know if you have any questions!

[Core Hacking @Core_hacking]

🚀 Embark on Your Bug Bounty Journey - 2024 Roadmap 🚀

🌐 Noob to Pro: Unleash Your Potential!
#bugbounty #security #cybersecurity #roadmap #ethicalacking #owasp #bug #hacking #programming #python #cloud #malware #skillcodex #websecurity

[Core Hacking @Core_hacking]

🚀 Embark on Your Bug Bounty Journey - 2024 Roadmap 🚀

🌐 Noob to Pro: Unleash Your Potential!
#bugbounty #security #cybersecurity #roadmap #ethicalacking #owasp #bug #hacking #programming #python #cloud #malware #skillcodex #websecurity

[Core Hacking @Core_hacking]

need your help to create the course like we never had

[Core Hacking @Core_hacking]

🚀 Exciting News: Crafting an Unprecedented Bug Bounty Course! 🌐 Dive into advanced techniques, live challenges, and continuous learning. Contribute insights and stories. Let's build something extraordinary! 💻🌟 #BugBounty #Cybersecurity #EthicalHacking #InfoSec #Upskilling

[Mike Takahashi @TakSec]

Google Dorks - Cloud Storage:

site:s3.amazonaws[.]com "target[.]com"
site:blob.core[.]windows[.]net "target[.]com"
site:googleapis[.]com "target[.]com"
site:drive[.]google[.]com "target[.]com"

Find buckets and sensitive data

[Mike Takahashi @TakSec]

My Top 2 Google Dorks

🐘 PHP
ext:php inurl:? site:example[.]com

🤫 Juicy Extensions
ext:log | ext:txt | ext:conf | ext:cnf | ext:ini | ext:env | ext:sh | ext:bak | ext:backup | ext:swp | ext:old | ext:~ | ext:git | ext:svn | ext:htpasswd | ext:htaccess site:example[.]com