Fxlp'z

OffSec • Bypassadores • CTF Player

while(alive) { learn(); test(); repeat(); }

[Nitin Gavhane @NitinGavhane_]

📂 FREE PENETRATION TESTING RESOURCES
┃
┣ 📂 Web Security
┃ ┣ 📂 PortSwigger Web Security Academy
┃ ┃ ┗ https://t.co/Mi9v9vIxrI
┃ ┣ 📂 OWASP Web Security Testing Guide
┃ ┃ ┗ https://t.co/eTG4DOC81Q
┃ ┣ 📂 OWASP Top 10
┃ ┃ ┗ https://t.co/M9PtyjkbS1
┃ ┗ 📂 Web Security Labs
┃ ┗ https://t.co/b4TcCVAIkm
┃
┣ 📂 Practice Labs
┃ ┣ 📂 TryHackMe
┃ ┃ ┗ https://t.co/olFszXWsnN
┃ ┣ 📂 Hack The Box
┃ ┃ ┗ https://t.co/N2vxIJl2Xf
┃ ┣ 📂 OverTheWire
┃ ┃ ┗ https://t.co/onVE571SEW
┃ ┣ 📂 PortSwigger Labs
┃ ┃ ┗ https://t.co/ywqWPKq34B
┃ ┗ 📂 OWASP Juice Shop
┃ ┗ https://t.co/quVnlctUjo
┃
┣ 📂 Vulnerability Research
┃ ┣ 📂 CVE Research
┃ ┃ ┗ https://t.co/OnUSVYO00v
┃ ┣ 📂 Exploit Reproduction
┃ ┃ ┗ https://t.co/MLxfeAFtdQ
┃ ┣ 📂 Security Advisories
┃ ┃ ┗ https://t.co/y5f99BqgOo
┃ ┣ 📂 Vulnerability Writeups
┃ ┃ ┗ https://t.co/eLVdN2Ay0m
┃ ┗ 📂 Root Cause Analysis
┃ ┗ https://t.co/fluSlGlxFq
┃
┣ 📂 Pentesting Methodology
┃ ┣ 📂 Reconnaissance
┃ ┃ ┗ https://t.co/eTG4DOC81Q
┃ ┣ 📂 Enumeration
┃ ┃ ┗ https://t.co/Lq520yn1Ep
┃ ┣ 📂 Vulnerability Assessment
┃ ┃ ┗ https://t.co/Mi9v9vIxrI
┃ ┣ 📂 Exploitation
┃ ┃ ┗ https://t.co/NTG0MNiXET
┃ ┣ 📂 Privilege Escalation
┃ ┃ ┗ https://t.co/olFszXWsnN
┃ ┗ 📂 Reporting
┃ ┗ https://t.co/eTG4DOC81Q
┃
┣ 📂 Tools
┃ ┣ 📂 Burp Suite
┃ ┃ ┗ https://t.co/5GJjQJegmX
┃ ┣ 📂 Nmap
┃ ┃ ┗ https://t.co/goMJC9nnrw
┃ ┣ 📂 Wireshark
┃ ┃ ┗ https://t.co/SuoSQwD3Eb
┃ ┣ 📂 Metasploit
┃ ┃ ┗ https://t.co/NTG0MNiXET
┃ ┣ 📂 Nuclei
┃ ┃ ┗ https://t.co/kkUu6Fxysz
┃ ┗ 📂 Gobuster
┃ ┗ https://t.co/sD5nb65dP0
┃
┣ 📂 OS / Network
┃ ┣ 📂 Linux
┃ ┃ ┗ https://t.co/M6BBvvGarM
┃ ┣ 📂 Windows
┃ ┃ ┗ https://t.co/6j7LlHYivF
┃ ┣ 📂 Networking
┃ ┃ ┗ https://t.co/6hcKvJnJbi
┃ ┣ 📂 Active Directory
┃ ┃ ┗ https://t.co/NEfz3gCOTG
┃ ┗ 📂 Wireshark
┃ ┗ https://t.co/yOR67eLjzh
┃
┣ 📂 Source Code Security
┃ ┣ 📂 CodeQL
┃ ┃ ┗ https://t.co/S4XB5jGrUG
┃ ┣ 📂 Semgrep
┃ ┃ ┗ https://t.co/z9XpT2Y5Hh
┃ ┣ 📂 OWASP Secure Coding
┃ ┃ ┗ https://t.co/fwI9ISboWD
┃ ┗ 📂 Dependency Security
┃ ┗ https://t.co/W5tTv1wQSb
┃
┗ 📂 Learning
┣ 📂 CTFs
┃ ┗ https://t.co/3jV6AS7PxM
┣ 📂 Cheat Sheets
┃ ┗ https://t.co/qwXEzfatBk
┣ 📂 Security Blogs
┃ ┗ https://t.co/eLVdN2Ay0m
┣ 📂 GitHub Security Repositories
┃ ┗ https://t.co/jujFSDgEMm
┗ 📂 Research Notes
┗ https://t.co/S8quxKDDaF

Bookmark this. Study. Practice. Build.

#CyberSecurity #PenetrationTesting #Pentesting #BugBounty #WebSecurity #AppSec #InfoSec #EthicalHacking #CyberSecurityResources #SecurityResearch

[Mohit @codewith55]

Switch to Linux you will never regret it
Switch to Linux you will never regret it
Switch to Linux you will never regret it
Switch to Linux you will never regret it
Switch to Linux you will never regret it
Switch to Linux you will never regret it
Switch to Linux you will never regret it
Switch to Linux you will never regret it

Agree?

[Fxlp'z @FelipeBuffer]

Alguém tem algum método do DeepSeek free, tava rodando via opencode no Hermes, mas começo a buga a API faz 3 dias

[Brute @BRuteLogic]

Brute Testbeds

XSS
https://t.co/FTSFzqwIlZ

Recon
https://t.co/BZwnE3wYOS

403
https://t.co/DojmXqystb

JWT
https://t.co/DdhdyLZcIh

OAuth
https://t.co/IRUieJmz68

https://t.co/HZrTkxdNwF

[hackersOnSteroids @hos_dot_team]

hackersOnSteroids is #9 on HTB's worldwide team leaderboard.

previous peak was #12. still Brazil's #1 team, but this is the highest global spot we've held.

let's keep up the great work.

https://t.co/wMq6DDz3Ip

[Gaurav @Leapofcode]

Guys, rate my wallpaper.

[Bhavya @Bhavyaztwt]

Linux is free
Docker is free
Kubernetes is free
Git is free
GitHub is free
GitHub Actions is free
GitLab is free
Python is free
Node.js is free
Go is free
PostgreSQL is free
MySQL is free
MongoDB is free
Redis is free
Terraform is free
Ansible is free
Jenkins is free
Prometheus is free
Grafana is free
NGINX is free
Apache is free
VS Code is free
Postman is free
Figma is free
Vercel is free
Netlify is free
AWS is free tier
GCP is free tier
Azure is free tier

ChatGPT is free
Claude is free
Gemini is free
Perplexity is free
Hugging Face is free
Ollama is free
Stable Diffusion is free
TensorFlow is free
PyTorch is free
LangChain is free

What’s stopping you from becoming the greatest engineer?

[Python Programming @PythonPr]

As a developer, do you choose Linux or Windows?

[Fxlp'z @FelipeBuffer]

De estagiário direto pra pleno! muito feliz em avisar que minha primeira vaga oficial na área de cybersec já é como analista pleno. terça feira começo nessa nova jornada metendo a mão em blue team e pentest. o corre compensa dms.

#cybersecurity #infosec #purpleteam

[pira;) @0xPira]

trabalhar com tecnologia tem um poder de mudança de vida muito foda

tô longe de ter o salário dos sonhos que muita gente daqui tem, mas aos 21 ser a pessoa da minha familia que mais recebe eh louco demais

[korz3yn @webenstein_]

Building a Security Research GitHub?

Start with this projects;

• Malware analysis reports
• CVE reproductions
• Vulnerability write-ups
• Reverse-engineering notes
• PoCs in controlled labs
• YARA/Sigma rules
• Threat intelligence research
• Binary analysis projects

[Vandalius Vinícius. 💻 @HyperViniccius]

Introdução à computação e à programação – parte I:

🧵

[korz3yn @webenstein_]

How I built my cybersecurity skills:

Networking → VAPT → SOC → IR → Security Research → Reverse Engineering.

I explored almost everything until I found what clicked.

Eventually, I fell in love with Security Research.

[Nitin Gavhane @NitinGavhane_]

Cybersecurity creators & accounts worth following:

1. @PortSwigger
2. @Hacker0x01
3. @Bugcrowd
4. @intigriti
5. @owasp
6. @tryhackme
7. @hackthebox_eu
8. @offme_official
9. @SANSInstitute
10. @rapid7
11. @pdiscoveryio
12. @nmap
13. @Burp_Suite
14. @zseano
15. @Jhaddix
16. @NahamSec
17. @LiveOverflow

Learn → Practice → Hunt → Report → Repeat.

#BugBounty #CyberSecurity #EthicalHacking #Pentesting #InfoSec #WebSecurity #BugHunter

[Nitin Gavhane @NitinGavhane_]

📂 BUG BOUNTY
┃
┣ 📂 Recon
┃ ┣ 📂 Subdomain Enumeration
┃ ┣ 📂 Asset Discovery
┃ ┣ 📂 Port Scanning
┃ ┣ 📂 HTTP Probing
┃ ┣ 📂 DNS Enumeration
┃ ┗ 📂 Tech Detection
┃
┣ 📂 Web
┃ ┣ 📂 IDOR
┃ ┣ 📂 XSS
┃ ┣ 📂 SSRF
┃ ┣ 📂 SQLi
┃ ┣ 📂 CSRF
┃ ┣ 📂 SSTI
┃ ┗ 📂 File Upload
┃
┣ 📂 API
┃ ┣ 📂 API Discovery
┃ ┣ 📂 BOLA
┃ ┣ 📂 Authentication
┃ ┣ 📂 Authorization
┃ ┣ 📂 Rate Limiting
┃ ┗ 📂 Mass Assignment
┃
┣ 📂 Auth
┃ ┣ 📂 OAuth
┃ ┣ 📂 JWT
┃ ┣ 📂 Sessions
┃ ┣ 📂 MFA
┃ ┗ 📂 Account Takeover
┃
┣ 📂 Automation
┃ ┣ 📂 Recon Automation
┃ ┣ 📂 Nuclei
┃ ┣ 📂 Custom Scripts
┃ ┣ 📂 Asset Monitoring
┃ ┗ 📂 Workflow Orchestration
┃
┣ 📂 Burp Suite
┃ ┣ 📂 Proxy
┃ ┣ 📂 Repeater
┃ ┣ 📂 Intruder
┃ ┣ 📂 Extensions
┃ ┗ 📂 Match & Replace
┃
┣ 📂 Cloud
┃ ┣ 📂 AWS
┃ ┣ 📂 Azure
┃ ┣ 📂 GCP
┃ ┣ 📂 S3
┃ ┗ 📂 Misconfigurations
┃
┣ 📂 Reporting
┃ ┣ 📂 Validation
┃ ┣ �� PoC
┃ ┣ 📂 Impact
┃ ┣ 📂 Severity
┃ ┗ 📂 Report Writing
┃
┗ 📂 Growth
┣ 📂 Writeups
┣ 📂 CVE Research
┣ 📂 New Attack Surfaces
┣ 📂 Workflow Optimization
┗ 📂 Continuous Learning

The goal isn't to use more tools.

It's to build a workflow where every step feeds the next.

Recon → Discover → Test → Validate → Report

That's bug bounty orchestration.

#BugBounty #CyberSecurity #AppSec

[Fxlp'z @FelipeBuffer]

@matazzo0 @anderson_xn MN entendo totalmente, eu deixo um vídeo rando no fundo, pode parecer meme mas gosto de deixa vídeo de gameplay ksksksks principalmente de Mine

[Fxlp'z @FelipeBuffer]

@cyberleaak Am I the only one who saw RDR3 there?