Hemant Relhan

[Hemant Relhan @HemantRelhan]

"Just passed the eLearn Junior Penetration Testing Exam! Excited to take my ethical hacking skills to the next level. #penetrationtesting #ethicalhacking #cybersecurity"

[Hemant Relhan @HemantRelhan]

@TechByMarkandey Course

[payloadartist @payloadartist]

⚒️🤖 PentestGPT

A GPT-empowered #pentesting tool that can solve easy to medium HackTheBox machines, and other CTF challenges 😲

Guess we'll be out of jobs soon 🤔

https://t.co/is1o138qsz

#pentest #redteam #infosec #cybersecurity

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

Below is a list of potential vulnerabilities that could be identified using Burp Suite and a coupon for 85% off our burp suite course:

https://t.co/vaNE3wbbrJ

1. SQL Injection
2. Cross-Site Scripting (XSS)
3. Cross-Site Request Forgery (CSRF)
4. Server Side Request Forgery (SSRF)
5. Remote Code Execution (RCE)
6. XML External Entity (XXE) Injection
7. LDAP Injection
8. Path Traversal
9. Local File Inclusion (LFI)
10. Remote File Inclusion (RFI)
11. Command Injection
12. Unvalidated Redirects and Forwards
13. HTTP Response Splitting
14. Insecure Direct Object References (IDOR)
15. OS Command Injection
16. Code Injection
17. Expression Language Injection
18. HTTP Request Smuggling
19. Directory Traversal
20. Insecure Deserialization
21. Server-side Template Injection (SSTI)
22. Open Redirects
23. HTTP Header Injection
24. Insecure HTTP Methods
25. Session Hijacking
26. Session Fixation
27. Privilege Escalation
28. Weak Session Management
29. Insecure Cookies
30. Cookie Poisoning
31. Insecure CORS Policy
32. Parameter Tampering
33. Unsecured JSONP Endpoints
34. Clickjacking
35. Weak Captcha Implementation
36. Content Spoofing
37. Missing Security Headers
38. HTML Injection
39. Web Cache Poisoning
40. Information Disclosure in Error Messages
41. Inadequate Access Controls
42. Misconfigured S3 Buckets
43. Misconfigured CORS
44. Security Misconfiguration
45. Exposed Administration Panels
46. Default Credentials
47. Misconfigured Security Headers
48. Inadequate Transport Layer Protection
49. Missing HttpOnly Flag on Cookies
50. Missing Secure Flag on Cookies
51. Passwords in Clear Text
52. Broken Authentication
53. Insecure Password Reset Functionality
54. Weak Cryptographic Hashes
55. Weak Encryption
56. Weak Transport Layer Security
57. Using Components with Known Vulnerabilities
58. Buffer Overflow
59. Buffer Underflow
60. Race Condition
61. Timing Attack
62. Host Header Injection
63. Parameter Pollution
64. Cookie Injection
65. DOM-based Vulnerabilities
66. HPP (HTTP Parameter Pollution)
67. HRS (HTTP Response Splitting)
68. Hidden Field Manipulation
69. Insufficient Session Expiration
70. Insecure Configuration Management
71. Forced Browsing
72. Logic Flaws
73. Credential/Session Prediction
74. Form/Function Level Access Control
75. Insufficient Transport Layer Protection
76. Incorrect Session Management
77. Unvalidated URL Redirects
78. Cache Control Misconfigurations
79. Missing Content-Security-Policy (CSP) Headers
80. Autocomplete Enabled on Sensitive Form Fields
81. CRLF Injection
82. Null Byte Injection
83. Parameter Delimiter
84. Shellshock Vulnerability (Bash Bug)
85. Host Header Attack
86. Exposed Debugging Information
87. Exposed Error Handling Information
88. Denial of Service (DoS)
89. Slow HTTP DoS Attack (Slowloris)
90. Integer Overflow or Wraparound
91. Stack Overflow
92. Heap-based Buffer Overflow
93. Double Free
94. Format String Vulnerability
95. Off-by-one Error
96. Uncontrolled Format String

[Netlas.io @Netlas_io]

CVE-2023-25690: Request Smuggling attack on Apache HTTP Server, 9.8 rating 🔥

An old vulnerability with new POC.

Search on https://t.co/hv7QKSqxTR (>20kk res):
👉🏻 Link (tags): https://t.co/jACANLgspf
👉🏻 Link (no tags): https://t.co/DB1skILSBI

#vulnerability_map #cybersecurity

[Luke Stephens (hakluke) @hakluke]

For anyone starting out in cybersecurity, heed this warning:

Social proof is easy to manufacture. There are a few cybersecurity-focused accounts with a lot of followers who have no idea what they're talking about.

When deciding who to follow: don't rely on social proof solely.

[ROHIT SHARMA✨ @ROHITSH42367350]

@bughunty gau [host] -subs | cut -d"?" -f1 | grep -E "\.js+(?:on|)$" | tee urls.txt
sort -u urls.txt | fff -s 200 -o out/
"After we save response from known URLs, it's time to digging for secrets."
"Usage"
for i in `gf -list`; do [[ ${i} =~ "_secrets"* ]] && gf ${i}; done

[Bug Hunty @bughunty]

Find sensitive information disclosure with gf by this patterns

#bugbounty #bugbountytips #cybersecurity #pentesting #hacking

[Nick Aleks @Nick_Aleks]

Free Black Hat GraphQL book giveaway! Retweet for your chance to win! #hacking #book #blackhatgraphql #giveaway

[vulnX @vuln_X]

How about "Top 10 Free Labs to Master Web Security"
Thread 🧵:👇

1) PortSwigger Web Security Academy: This lab provides free online training in web application security. Through a variety of fun lessons, it shows you how to find and exploit web application vulnerabilities.

[Hemant Relhan @HemantRelhan]

Sant Nirankari Charitable Foundation
Sant Nirankari Mission
#projectamrit
#SwachhJalSwachhMann
#ServiceWithHumility
#AzadiKaAmritMahotsay
#karnal
#haryana
#Water #savewater

[Shubham Sharma @Shubham_pen]

Security 360 cheat sheet

#cybersecurity #pentesting #informationsecurity #hacking #DataSecurity #CyberSec #Hackers #tools #bugbountytips #Linux #websecurity #Network #NetworkSecurity #cybersecurityawareness

[BowTiedCyber | Evan Lutz @BowTiedCyber]

Cybersecurity = 💰💰💰

Data Science = 💰💰💰

Cybersecurity + Data Science = 💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰💰

Here’s how 👇

[ROHIT @rynosec]

Starting a new #bugbounty target? Here's a quick guide to help you hit the ground running 🧵👇 :

#bugbounty #bugbountytips #cybersecurity

[Security Trybe @SecurityTrybe]

Here are some FREE Cybersecurity Courses on edX

Enroll and become MIT, IBM, RITx… Cybersecurity Certified

[BowTiedCyber | Evan Lutz @BowTiedCyber]

Study Cybersecurity for FREE

Cybersecurity Career Roadmap: https://t.co/2py4gFROuZ

Intro to Networking: https://t.co/uDq1AUNk3j

Intro to Security: https://t.co/1Bz3NeWlGB

Intro to Linux: https://t.co/wP8zifxGI1

Intro to Python: https://t.co/OhEwJqriJr

[chrisdior @chrisdior777]

Guys, I know web3 security is very lucrative and interesting for most of you, but understand this:

YOU HAVE TO PUT THE HOURS IN!

Spend a lot of time reading smart contracts (later I will write a tweet for the most important ones to get started). 👇

[ReconOne @ReconOne_bk]

Want to improve your Recon skills but don't know where to start?

This thread will guide you through the process step by step. 👇 🧵

#recon #AttackSurface #bugbountyhelp #bugbounty #cybersecurity #recontips

[BowTiedCyber | Evan Lutz @BowTiedCyber]

You want to start a Cybersecurity Career

But you don't have $22,417 for a 12 month bootcamp

I'll show you how to do it FASTER AND BETTER

FOR FREE

IN A RECESSION

(Free resources with links for EVERYTHING you need to start an $80k/y Cybersecurity Career in 90 days):

[Gabrielle 💻🗝 @Gabrielle_BGB]

[𝐅𝐑𝐄𝐄 𝐑𝐄𝐒𝐎𝐔𝐑𝐂𝐄𝐒 - 𝐌𝐎𝐁𝐈𝐋𝐄 𝐀𝐏𝐏 𝐏𝐄𝐍𝐓𝐄𝐒𝐓]
Want to know more about Mobile App pentest? Here is a list of resources

👉 Android Bug Bounty Hunting: Hunt Like a Rat by @theXSSrat
https://t.co/1j2rWY83YU