Ed Hunter

[Ed Hunter @EdSec666]

@BitK_ @yeswehack @sakiirsecurity Thank you @BitK_ for replying, I'll look at it for any possible solution.

Best!

[Intigriti @intigriti]

You're missing out on a lot of bounties if you're not testing your targets for CSRF vulnerabilities...

Read our latest article that goes in-depth about CSRF vulnerabilities featuring 5 exploitation methods (including advanced cases)! 🤑

Check it out! 👇
https://t.co/q2edxEGd2H

[Gaurav Narwani @gauravnarwani97]

Hello All,
I just passed my Burp Suite Certified Practitioner exam. For those who wish to take the exam, I've written a blog post highlighting the preparation and tips for the exam.
Link to blog: https://t.co/JBSLM71kWL
Please subscribe to the blog!

[Ed Hunter @EdSec666]

@bxmbn Nice finding, Bombon!

[Ed Hunter @EdSec666]

@bxmbn Pregunta seria, tienes un "Upstream Proxy" para ir guardando el historial de la navegación y lo que ya intentaste en un programa para revisiones futuras y búsqueda de cambios en el sitio?

[Ed Hunter @EdSec666]

@bxmbn Broken Auth bug, well done buddy!

[KNOXSS @KN0X55]

Going way beyond what you study for all security certifications out there.

https://t.co/nNqODwAsry - #XSS is not just <script>

[Ed Hunter @EdSec666]

This!👇👌

[MorningStar @0xMstar]

@Bugcrowd Submit as much bugs as possible don’t care about duplicates, duplicates are good, you can bypass them later

[Ed Hunter @EdSec666]

@pranshux0x If anyone is not GitHub logged in, here it is:
https://t.co/nw3i2y3v4n

Your're welcome! :)

[KNOXSS @KN0X55]

Got #KNOXSS and don't know where to start to hunt for #XSS? 🤔

We highly suggest you to be aware of the latest #BugBounty programs: they are less tested and more prone to bugs.

Check this out! 😎👇

By @kleoz_
https://t.co/7SWiQ4np0v

[0x999 🇮🇱 @_0x999]

Just published a Burp Suite extension I wrote for @TomNomNom's tool jsluice🥳

jsluice++ allows you to scan traffic from Burp Suite's Sitemap/Proxy using jsluice while providing a user-friendly UI for easier results inspection and more🔍

Check it out 👇
https://t.co/vkFif1Xyvd

[Ed Hunter @EdSec666]

Do you remember when you joined X? I do! #MyXAnniversary

[@ddǝɐuɐp @DanaEpp]

It’s all @Jhaddix fault.

Let me show you how to improve the performance of your port scans against API servers with the use of Project Discovery's Naabu scanner.

#apihacking #apisecurity

https://t.co/dGlSb9uzJQ

[Justin Gardner @Rhynorater]

Right on the money 🎯

[Justin Gardner @Rhynorater]

Soooo many good vulns are hidden behind paywalls. I recently bought a product for $450 and instantly made 10k+ in bounties. Simple priv esc.

My mentee and I bought a service for $300 and made 25k+ off it.

Just make sure the product is feature rich and there will be bugs.

[Ed Hunter @EdSec666]

#apihacking #apisecurity

[@ddǝɐuɐp @DanaEpp]

It’s all @Jhaddix fault.

Let me show you how to improve the performance of your port scans against API servers with the use of Project Discovery's Naabu scanner.

#apihacking #apisecurity

https://t.co/dGlSb9uzJQ

[Ed Hunter @EdSec666]

full

[Intigriti @intigriti]

Top places to check for client-side template injections!

• Search page (as a search query)
• Email
• Profile (username, first & last name, address)
• Billing Information
• Order information

What else are we missing? 🤔

[ReconOne @ReconOne_bk]

HTTP Request Smuggling videos: https://t.co/ctsyFCcbTq

[Robert Scoble @Scobleizer]

The cult is in the house.

Part I.

It is @DanielMiessler showing me what he is doing with AI.

Shot on Apple Vision Pro.

Part II coming later.