Sakthivel M

[Sakthivel M @CyberShakthi]

Come hack on Department of the Treasury: Vulnerability Disclosure Program at https://t.co/rwk9o9bOzg #ItTakesACrowd via @Bugcrowd
Happy Hunting

[Sakthivel M @CyberShakthi]

Stay Hunt 🏹🎯🎯🎯🏹

[Cybernetic Research @cybernetic_res]

CRLF Injection Bypass by @sumit_cfe

#BugBounty #bugbountytips

[X @TheMsterDoctor1]

🔍 #Recon automation for #bughunters

1- Subdomain discovery with Subfinder:
```
subfinder -dL targets.txt -all -recursive -o facebook.txt
cat facebook.txt | wc -l
```

2- Discover subdomains via https://t.co/3SNVM49m71:
```
curl -s https://t.co/3SNVM49m71\?q\=\https://t.co/zPr7Thk72Q\&output\=json | jq -r '.[].name_value' | grep -Po '(\w+\.\w+\.\w+)$' | anew subdomains-faceboo.txt
cat subdomains-faceboo.txt | wc -l
```

3- Check live subdomains with HTTPX:
```
cat subdomains-faceboo.txt | httpx -l subdomains-faceboo.txt -ports 443,80,8080,8000,8888 -threads 200 > subdomains-faceboo-alive.txt
cat subdomains-faceboo-alive.txt | wc -l
```

4- Port scanning with Naabu:
```
naabu -list subdomains-faceboo.txt -c 50 -nmap-cli 'nmap -sV -sC' -o naabu-full.txt
```

5- Directory brute-forcing using Dirsearch:
```
python3 /home/casperino/tools/dirsearch/dirsearch.py -l subdomains-faceboo-alive.txt -x 500,502,429,404,400 -R 5 --random-agent -t 100 -F -o directory-facebook.txt -w /home/casperino/cyber-event/OneListForAll/onelistforallshort.txt
```

6- Gather parameters with Gau:
```
cat subdomains-faceboo-alive.txt | sudo gau > facebook-params.txt
cat facebook-params.txt | wc -l
```

7- Filter parameters with Uro:
```
cat facebook-params.txt | uro -o facebook-filterparameters.txt
cat facebook-filterparameters.txt | wc -l
```

8- Extract JavaScript files:
```
cat facebook-filterparameters.txt | grep ".js$" > facebook-jsfiles.txt
cat facebook-jsfiles.txt | wc -l
```

9- Find secrets with SecretFinder:
```
cat facebook-jsfiles.txt | while read url; do python3 /home/casperino/tools/SecretFinder/SecretFinder.py -i $url -o cli > facebook-secret-finder.txt; done
```

10- Sort wordlist:
```python
# Code snippet in https://t.co/o3R7Tf87NW

# Read the word list from the file
with open('/home/casperino/cyber-event/facebook-filterparameters.txt', 'r') as file:
lines = file.readlines()

# Sort the lines
lines.sort()

# Take the first 10,000 lines
lines = lines[:10000]

# Write the sorted list to a new file
with open('sorted_wordlist_10000.txt', 'w') as file:
file.writelines(lines)

11- Scan with Nuclei:
```
nuclei -l sorted_wordlist_10000.txt -c 70 -rl 200 -fhr -lfa -t /home/casperino/tools/nuclei/Custom-Nuclei-Templates/ -o facebook-nuclei.txt -es info
```

🔗 Additional resources:
1- Shodan Dorks: https://t.co/kHA1DyC0OJ
2- Github Dorks: https://t.co/gMHzPd6TxF
3- Google Dorks: https://t.co/rGhdbquDD2…

#automation #pentesting #infosec #bugbounty #cybersecurity101

[Sakthivel M @CyberShakthi]

https://t.co/mD3hEVoidF

[Sakthivel M @CyberShakthi]

https://t.co/gt0lOQLksj

[Sakthivel M @CyberShakthi]

I completed the Web Security Academy lab:
Stored DOM XSS

@WebSecAcademy
https://t.co/QGS6439XUH

[ProjectDiscovery @pdiscoveryio]

🚀 Unveiling the power of DNS Recon with dnsX v1.2.0!

Get all the DNS data you need for your domain or subdomain list with the new "-recon" option 🔍

🔗 GitHub Release: https://t.co/VRmU7w5qdY

#dns #recon #opensource

💡 Improve your recon game with dnsX! 👨‍💻👩‍💻

[X @TheMsterDoctor1]

👽How to HACK INTO RANDOM PEOPLE'S CAMERAS IN MINUTES! 👽👾

1. Go on google.

2. Write one or a combination of two of these Strings:

inurl:/views.shtml
inurl:ViewerFrame?Mode=
inurl:ViewerFrame?Mode=Refresh
inurl:axis-cgi/jpg
inurl:view/views.shtml
liveapplet
intitle:"live view" intitle:axis
intitle:liveapplet
intitle:axis intitle:"video server"
intitle:"EvoCam" inurl:"webcam.html"
inurl:indexFrame-shtml Axis
intitle:start inurl:cgistart
intitle:snc-z20 inurl:home/
intitle:snc-cs3 inurl:home/
intitle:snc-rz30 inurl:home/
https://t.co/3o3pae819f
intitle"Toshiba Network Camera" user login
intitle"i-Catcher Console - Web Monitor"

3. Search for a result which looks "weird" (without any information under the main title and/or with an IP address as a main title)

Disclaimer : Don’t try to access a password protected camera or you might get into real trouble . Doing Hacking is punishable under Law and we hold no responsibility of what you do with this information . Purely for Educational Purposes

🔔Unmute Notification & Share Channel For More Content ✅
🦠 @TheMsterDoctor1 🦠
        Share and Support us.

[Sakthivel M @CyberShakthi]

Google Dorking - I have just completed this room! Check it out: https://t.co/q3XRCC9d3M #tryhackme #osint #googledorking #dork #beginner #webapp #research #researching #googledorking via @tryhackme

[X @TheMsterDoctor1]

🔐 Unlocking the World of Cybersecurity: OSCP Edition 🔐

🚀 Ready to elevate your cybersecurity game? Look no further! 🚀

🎓 Meet the Ultimate Master Teacher: OSCP 🎓

🔒 What's OSCP, you ask? It's the Offensive Security Certified Professional, a globally recognized certification that puts you on the fast track to becoming a cybersecurity powerhouse! 💪

🌐 Dive into the World of OSCP with us:

1️⃣ Hands-On Learning: OSCP isn't your typical certification. It's a hands-on, real-world challenge that immerses you in the nitty-gritty of penetration testing. Get ready to roll up your sleeves and dive into practical scenarios!

2️⃣ Comprehensive Curriculum: Master the art of ethical hacking with a curriculum that covers everything from web application exploits to network penetration testing. OSCP leaves no stone unturned!

3️⃣ 24/7 Lab Access: Need a playground to hone your skills? OSCP provides round-the-clock access to a virtual lab environment, giving you the freedom to experiment and learn at your own pace.

4️⃣ Proven Methodology: OSCP follows a tried-and-true methodology that mirrors real-world cyber attacks. You'll learn to think like a hacker, identifying vulnerabilities and exploiting them to secure systems effectively.

5️⃣ Supportive Community: Join a vibrant community of like-minded individuals on the OSCP journey. Share insights, exchange tips, and celebrate victories together. The OSCP community is a valuable resource that makes the learning experience even more enriching!

🚨 Ready to Level Up? 🚨

Whether you're a seasoned professional or just starting in cybersecurity, OSCP is your passport to the exciting world of ethical hacking. Unleash your potential, sharpen your skills, and become a certified OSCP professional.

👉 DM me for the link!

👉Just type "X" to receive it privately.

Let's embark on the OSCP journey together! 🔐 #OSCP #Cybersecurity #EthicalHacking

👉👉*Disclaimer: I don't own this channel or any content. It's simply a recommendation to join the conversation!*

💡 Your journey to mastering cybersecurity begins here. 💡 #OSCP #Cybersecurity #EthicalHacking #InfoSec #LearnSecurity #HackThePlanet 🌐🔐

[X @TheMsterDoctor1]

👁500 TB Tutorials + Books + Courses + Trainings + Workshops + Educational Resources 😀

💀Data science
💀Python
💀Artificial Intelligence .
💀AWS Certified .
💀Cloud
💀BIG DATA
💀Data Analytics
💀BI
💀Google Cloud Platform
💀IT Training
💀MBA
💀Machine Learning
💀Deep Learning
💀Ethical Hacking
💀SPSS
💀Statistics
💀Data Base
💀Learning language resources ( English , French , German )

📣 LINK: https://t.co/Qo3WGhp5uQ

[X @TheMsterDoctor1]

⛔TRYHACKME ROADMAP FOR OSCP⛔

# Level 5 - Reverse Engineering
- [ ] Intro to x86 64 https://t.co/TjIlhIFWT6
- [ ] CC Ghidra https://t.co/uFrvLQCzZZ
- [ ] CC Radare2 https://t.co/hFjWCNAzOe
- [ ] CC Steganography https://t.co/jsfprJFbRu
- [ ] Reverse Engineering https://t.co/aDbVgHE3Ov
- [ ] Reversing ELF https://t.co/33XgObDb48
- [ ] Dumping Router Firmware https://t.co/aamg9EM0kZ

# Level 6 - PrivEsc
- [ ] Sudo Security Bypass https://t.co/zhA3CJpbr0
- [ ] Sudo Buffer Overflow https://t.co/RyIeGVDEXd
- [ ] Windows Privesc Arena https://t.co/fupr34NP0v
- [ ] Linux Privesc Arena https://t.co/1CBPzs1sm1
- [ ] Windows Privesc https://t.co/mxXb1GgyxI
- [ ] Blaster https://t.co/3V94hikpaO
- [ ] Ignite https://t.co/ITc2xTLbH2
- [ ] Kenobi https://t.co/0QYna9wcZ3
- [ ] Capture the flag https://t.co/dNBueZJlAK
- [ ] Pickle Rick https://t.co/8SldQ8v5lN

# Level 7 - CTF practice
- [ ] Post Exploitation Basics https://t.co/wc6VFOMSLH
- [ ] Smag Grotto https://t.co/AQzrAZYZVu
- [ ] Inclusion https://t.co/XOK1MpM0Zf
- [ ] Dogcat https://t.co/Ih6EZOpVVA
- [ ] LFI basics https://t.co/bAdbMN3DG8
- [ ] Buffer Overflow Prep https://t.co/0UxGacBPbc
- [ ] Overpass https://t.co/hWgAP5c6xf
- [ ] Break out the cage https://t.co/ZFVfhF7voE
- [ ] Lian Yu https://t.co/I48JGiGMyK

🍺 Famous Platforms to practice Pentesting 🍺

tryhackme
https://t.co/wqfK3Rytyx

bWAPP
https://t.co/dBAZbnDZbK

flAWS Cloud
https://t.co/uj6ejckqIM

Hack Yourself First
https://t.co/FfgzepXSPm

OWASP Juice Shop
https://t.co/sgN2ATli42

Google Gruyere
https://t.co/R2Wl99iof9

Hack Me
https://t.co/ygwmCcKyKm

HackTheBox
https://t.co/vnyB82OzOT

Root-Me
https://t.co/dqzMVgwvqQ

XSS Game
https://t.co/Mr881ZrKFw

Pentesterlab
https://t.co/nJ9tttX2gB

OverTheWire
https://t.co/nhRg4vFh1H

Hacking Lab
https://t.co/tF51peNlFa

IO
https://t.co/yFtmM1pfIG

smashthestack
https://t.co/8Xpr8Kyahy

microcorruption
https://t.co/QuISlflVB6

ExploitMe Mobile
https://t.co/OF91ZPmCeF

Hax.Tor
https://t.co/zme2uRJJ7v

Java Vulnerable Lab
https://t.co/Nrxacs6iCx

Pwnos
https://t.co/txpapYdKkc

Ringzero
https://t.co/q0ApehUbdt

Avatao
https://t.co/Ywkh77Gbo1

GameOver
https://t.co/CcAW3lWjav

HSCTF3
https://t.co/7s3ucO47RR

Share nd support 🤟😉

[X @TheMsterDoctor1]

⛔TRYHACKME ROADMAP FOR OSCP⛔

# Level 1 - Intro
- [ ] OpenVPN https://t.co/4nBJGlbwEx
- [ ] Welcome https://t.co/HZtuYk4iMC
- [ ] Intro to Researching https://t.co/MHhzpRLyht
- [ ] Learn Linux https://t.co/NYODSqiibw
- [ ] Crash Course Pentesting https://t.co/1NR4I5MhAo

Introductory CTFs to get your feet wet

- [ ] Google Dorking https://t.co/rG03FfnoQm
- [ ] OHsint https://t.co/YLog4E2MU4
- [ ] https://t.co/hAJWjHqlW8 https://t.co/gk8mUS7DjB

# Level 2 - Tooling
- [ ] Tmux https://t.co/W5mvjZzM1h
- [ ] Nmap https://t.co/Vtx1aPhOzP
- [ ] Web Scanning https://t.co/qge76Wzswz
- [ ] Sublist3r https://t.co/uH4snvK7qR
- [ ] Metasploit https://t.co/Iv37MBPIwN
- [ ] Hydra https://t.co/7ENItnN333
- [ ] Linux Privesc https://t.co/BH640QBTi7
- [ ] Web Scanning https://t.co/qge76Wzswz

More introductory CTFs
- [ ] Vulnversity - https://t.co/mJNSql684Z
- [ ] Blue - https://t.co/AZM3k5O9mB
- [ ] Simple CTF https://t.co/CF7Z4AyNUO
- [ ] Bounty Hacker https://t.co/1pVJBpuESJ

# Level 3 - Crypto & Hashes with CTF practice
- [ ] Crack the hash https://t.co/P3s7MbALiG
- [ ] Agent Sudo https://t.co/LbwdQvWYaJ
- [ ] The Cod Caper https://t.co/16pRvHTYxQ
- [ ] Ice https://t.co/1SEGxGTdPx
- [ ] Lazy Admin https://t.co/6MNIXy4ymj
- [ ] Basic Pentesting https://t.co/Hky8gOjHtm

# Level 4 - Web
- [ ] OWASP top 10 https://t.co/ioK9ubTwQV
- [ ] Inclusion https://t.co/XOK1MpM0Zf
- [ ] Injection https://t.co/SXQVClfiDi
- [ ] Vulnversity https://t.co/mJNSql684Z
- [ ] Basic Pentesting https://t.co/Hky8gOjHtm
- [ ] Juiceshop https://t.co/69PzwbC9Tr
- [ ] Ignite https://t.co/ITc2xTLbH2
- [ ] Overpass https://t.co/hWgAP5c6xf
- [ ] Year of the Rabbit https://t.co/SIXAhsHdKX
- [ ] DevelPy https://t.co/xGaZGM8QKP
- [ ] Jack of all trades https://t.co/9kn5AGs3AA
- [ ] Bolt https://t.co/LKQfOsJwhi

[Sakthivel M @CyberShakthi]

SMB signing required by default POC

Elevate your Python projects with the SMBProtocol library🚀. Seamlessly integrate with the Server Message Block (SMB) protocol - no SMB signing required by default.
Explore more:[https://t.co/f2VYbjGaiG]
#Python #SMB #Finstein #cybersnippets

[Mike Takahashi @TakSec]

XSS Bypass w/ ChatGPT

Prompt #1:
explain <iframe src=javascript:alert()>

Prompt #2:
list 10 that keep everything except don't use the word "javascript" intact in unique ways but still work, label with how, and make sure the to format as html code.

[Sakthivel M @CyberShakthi]

ShodanQuery http.component Part-6

http.component:"Adobe CQ"
http.component:"WebSphere"
http.component:"OAM/1.0.10"

#finstein #CyberSecurity @shodanhq @SoloShakthi
@TheHackersNews #cyberattacks #Pentesting #Hackathon @Manikandanbas03 #LeoHits400crores
#LeoIndustryHit

[Sakthivel M @CyberShakthi]

ShodanQuery http.component Part-5

http.component:"SAP NetWeaver"
http.component:"Resin-4.0.40"
http.component:"GoAhead-Webs"
http.component:"Tengine"
http.component:"Bistri"
http.component:"Chamilo"
http.component:"Coyote"
http.component:"EventMachine"
http.component:"litespeed"

[Sakthivel M @CyberShakthi]

Shodan Query http.component Part-4

http.component:"IBM WebSphere"
http.component:"GoAhead-Webs"
http.component:"EventMachine"
http.component:"litespeed"
http.component:"Adobe CQ"
http.component:"WebSphere"
http.component:"SAP NetWeaver"
http.component:"Resin-4.0.40"

[Sakthivel M @CyberShakthi]

Shodan Query http.component Part-3

http.component:"phpMyAdmin"
http.component:"Gunic n"
http.component:"GlassFish"
http.component:"Beaker"
http.component:"Caddy"
http.component:"Cherokee"
http.component:"IBM_HTTP_Server"
http.component:"uWSGI"
http.component:"Varnish"