Humble Hacker

Ethical Hacker, Pentester, Security Researcher. Most of my tweets are about security.

[Humble Hacker @HackerHumble]

@ashtom Hearty Welcome to India, Thomas!

[Humble Hacker @HackerHumble]

@win3zz I don't think there is any impact here right? As there is no sensitive information as such.
I agree that it is leaking some info, but not sensitive as such.

[Humble Hacker @HackerHumble]

Day 1:

Attackers typically take the below path to attack the organizations:

Reconnaissance -> Identify weakness -> Initial access by exploiting -> Persistence -> Credential access -> Lateral movement -> Command & Control

#hacking #redteaming #hackerhumble

[Humble Hacker @HackerHumble]

I am starting a new series of tweets where I post how attackers typically attack organizations/victims. I will try to post 1 tweet a day.

#security #redteaming #attacks #hacktricks #hackerhumble

[Humble Hacker @HackerHumble]

Interesting article on how GH copilot can leak secrets! https://t.co/SrsT7MhPfF

[Humble Hacker @HackerHumble]

@albinowax @nullcon It was nice meeting you at Nullcon. Many learnings from your talk!

[Humble Hacker @HackerHumble]

@chnsrao112 @PatilVarun64 @vm__one @DysonIndia @Dyson Yes GoWarranty is fake
#fake #GoWarranty

[Humble Hacker @HackerHumble]

@BRSHarish Great message Sir. Why not ban these plates in Telangana then?

[Humble Hacker @HackerHumble]

@joernchen SQLi

[Humble Hacker @HackerHumble]

@Nitesh_patel7 @_Scobby_ You can get the public key from jwks URI using something like below
https://t.co/GyHhKwpIxQ

[Humble Hacker @HackerHumble]

JWT Token Bypasses #2:

1. Capture the JWT token.
2. If the algorithm is RS256 change to HS256 and sign the token with the public key (which you can get by visiting jwks Uri / mostly it will be the public key from the site's https certificate) (1/2)

#bugbountytips #bugbounty

[Anugrah SR 📌| #HackLearnDaily @cyph3r_asr]

📢Parameter pollution on password reset

[email protected]&[email protected]
email[][email protected]&email[][email protected]
[email protected]%[email protected]
[email protected]|[email protected]
[email protected],[email protected]
[email protected]%[email protected]
{"email":"[email protected]","email":"[email protected]"}
{"email":["[email protected]","[email protected]"]}

[Humble Hacker @HackerHumble]

@harshbothra_ O is for Open URL Redirect

The attacker injects the malicious URL typically in the trusted site request params which redirect the user to a malicious site.

Devs out there - Validate the URL before redirecting and if needed show a confirmation.

#security #atozofinfosec

[Humble Hacker @HackerHumble]

@harshbothra_ S is for Subdomain takeover. This happens when there is a dangling subdomain and a CNAME is still pointed to the subdomain which is no longer in use.

Devs out there - Do not forget to remove CNAMEs when you deprovision a subdomain

#security #atozofInfoSec

[Humble Hacker @HackerHumble]

@harshbothra_ B is for Broken Access Control

This happens when there is an IDOR / Privilege escalation.

Devs out there - Do not trust user input. Always validate who is the user and what he is trying to access.

#security #atozofinfosec

[Humble Hacker @HackerHumble]

@harshbothra_ X is for XML External Entity Injection (XXE). When untrusted XML entities are resolved it can lead to Remote code execution.

Devs out there - Disable Entity resolving. If needed resolve only after proper validation and never load DTDs from untrusted servers.

[Humble Hacker @HackerHumble]

@harshbothra_ It used to work earlier 🧑‍💻

[Humble Hacker @HackerHumble]

@AseemShrey I’m willing 🙌

[Humble Hacker @HackerHumble]

Do you remember when you joined Twitter? I do! #MyTwitterAnniversary

[Humble Hacker @HackerHumble]

@Bugcrowd Haha it’s nice to see that the blogpost is also generated by GPT

[Humble Hacker @HackerHumble]

@xtremepentest Firefox