Varun Thorat

Cyber Security Consultant | Bug-bounty Hunter
"In God we Trust; Rest We Test"

[ANI @ANI]

#WATCH | Thane, Maharashtra: Citizens form a massive human chain demanding the protection and conservation of the Sanjay Gandhi National Park land.

[Somdev Sangwan @s0md3v]

Hi,

I wrote an article about quickly learning things and why being good at multiple things is important. I hope it helps.

https://t.co/yIl2GqaS8d

[Ricardo Iramar @ricardo_iramar]

A simple tool to detect vulnerabilities described here https://t.co/UBj2r93hDI.
https://t.co/NsOxO6iWS3

[Somdev Sangwan @s0md3v]

🚨 ALERT 🚨

Python's ctx library and a fork of PHP's phpass have been compromised. 3 million users combined.

The malicious code sends all the environment variables to a heroku app, likely to mine AWS credentials.

[Varun Thorat @Extrins1c]

@AseemShrey @SaveToNotion

#thread

[Ricardo Iramar @ricardo_iramar]

Me: open redirect, XSS, host any content, etc. (in scope)
Shopify: Thanks! but no impact :(
Me: Disclose?
Shopify: Only when the issue is RESOLVED.
Me: OK! Will improve the PoC.
40 min late...
Shopify: Sorry, the issue is fixed now.

https://t.co/xUurAPn5Bx

[Harsh Bothra @harshbothra_]

All MindMap that I have made so far
1. Forget Password Vulns: https://t.co/8ueUhYNDjn
2. XML Attacks: https://t.co/4fkOKcalgp
3. 2FA Bypass Techniques: https://t.co/HPi5ZP2SKG
4. Android PT Checklist: https://t.co/FB6UGyVFkW
(1/2)

#AppSec #hacking #bugbountytips #websecurity

[Varun Thorat @Extrins1c]

@daminisoni19 @troyhunt What a joke!! 😂

[KNOXSS @KN0X55]

*** 1st #KNOXSS GIVEAWAY! ***

Like and RT this to have a chance to win one of the following:

* 1 KNOXSS Pro Subscription 3-month
* 1 KNOXSS Pro Subscription 6-month
* 1 KNOXSS Pro Subscription 1-year

Winners of this draw will be announced in 72hs, good luck! 😀

[Varun Thorat @Extrins1c]

@intigriti program

[Varun Thorat @Extrins1c]

@ZephrFish Rick-rolling at its peak 😂

[Andy Gill @ZephrFish]

#honeypoc lives on 🤣

[Chess.com - India @chesscom_in]

BREAKING!

India 🇮🇳 and Russia 🇷🇺 are joint winners of the @FIDE_chess #ChessOlympiad

[Varun Thorat @Extrins1c]

@ReheSamay Hoping for a fair fight.

[Varun Thorat @Extrins1c]

@fatrat_v2 @NCIIPC Indeed @fatrat_v2 !! It was really an amazing experience.

[Varun Thorat @Extrins1c]

@im_sahil12 @fs0c131y Here to reply on hidden comment.

[Varun Thorat @Extrins1c]

@messlicious

[Varun Thorat @Extrins1c]

@mccamon @owasp Any Contacts to whom i can reach out in
@owasp
about a security flaw which is leaking sensitive information?

[Varun Thorat @Extrins1c]

@ExclusifeWorld Trying to reach you about a vulnerability in your website. Please get in touch.

[Varun Thorat @Extrins1c]

@mccamon @OWASPDirPrjTech I am trying to reach you guys from a long time now. Please get in touch.

[Varun Thorat @Extrins1c]

Any Contacts to whom i can reach out in @owasp about a security flaw which is leaking sensitive information?