Ja_ks_n

[The SecOps Group @TheSecOpsGroup]

🛑 𝗙𝗿𝗲𝗲 𝗖𝗡𝗦𝗣 𝗘𝘅𝗮𝗺 𝗚𝗶𝘃𝗲𝗮𝘄𝗮𝘆 𝗶𝘀 𝗡𝗼𝘄 𝗟𝗶𝘃𝗲 🛑
𝗙𝗼𝗿 𝗮𝗻 𝟴𝟬% 𝗱𝗶𝘀𝗰𝗼𝘂𝗻𝘁 𝗼𝗻 𝗮𝗹𝗹 𝗼𝘁𝗵𝗲𝗿 𝗲𝘅𝗮𝗺𝘀, 𝘂𝘀𝗲 𝘁𝗵𝗲 𝗱𝗶𝘀𝗰𝗼𝘂𝗻𝘁 𝗰𝗼𝗱𝗲: BF-80

We’ve dropped the 𝗕𝗜𝗚𝗚𝗘𝗦𝗧 𝗚𝗜𝗩𝗘𝗔𝗪𝗔𝗬 𝗼𝗳 𝘁𝗵𝗲 𝗬𝗲𝗮𝗿! 𝗙𝗿𝗲𝗲 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗲𝗱 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗿𝗮𝗰𝘁𝗶𝘁𝗶𝗼𝗻𝗲𝗿 (𝗖𝗡𝗦𝗣) 𝗘𝘅𝗮𝗺! 🎉

👉 We’re giving away 𝗙𝗥𝗘𝗘 𝗮𝗰𝗰𝗲𝘀𝘀 to one of our most popular entry-level pentesting exam 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗲𝗱 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗿𝗮𝗰𝘁𝗶𝘁𝗶𝗼𝗻𝗲𝗿 (𝗖𝗡𝗦𝗣), exclusively for the 𝗳𝗶𝗿𝘀𝘁 𝟭,𝟬𝟬𝟬 𝘂𝘀𝗲𝗿𝘀 and available only for a 𝗹𝗶𝗺𝗶𝘁𝗲𝗱 𝘁𝗶𝗺𝗲!

🚀 𝗛𝗼𝘄 𝘁𝗼 𝗚𝗲𝘁 𝗬𝗼𝘂𝗿 𝗙𝗿𝗲𝗲 𝗖𝗡𝗦𝗣 𝗘𝘅𝗮𝗺 𝗦𝗹𝗼𝘁
Just follow these 4 𝘴𝘪𝘮𝘱𝘭𝘦 𝘴𝘵𝘦𝘱𝘴:
✅ Follow Our Page.
✅ 𝗟𝗜𝗞𝗘 👍 and 𝗥𝗘𝗦𝗛𝗔𝗥𝗘 ♻️ this post.
✅ 𝗧𝗮𝗴 𝗮 𝗳𝗿𝗶𝗲𝗻𝗱 🏷️ who should also grab this opportunity.
✅ Fill the Google Form: https://t.co/anuTVuqdDh

Then relax. Your exam details will land in your inbox within 𝟳 𝗯𝘂𝘀𝗶𝗻𝗲𝘀𝘀 𝗱𝗮𝘆𝘀. 📩

❌ 𝗟𝗼𝗼𝗸𝗶𝗻𝗴 𝗳𝗼𝗿 𝗮 𝗱𝗶𝗳𝗳𝗲𝗿𝗲𝗻𝘁 𝗽𝗲𝗻𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝗲𝘅𝗮𝗺? 𝗪𝗲 𝗴𝗼𝘁 𝘆𝗼𝘂!
😉 💥 𝗚𝗿𝗮𝗯 𝗮𝗻 𝗶𝗻𝘀𝗮𝗻𝗲 𝟴𝟬% 𝗗𝗶𝘀𝗰𝗼𝘂𝗻𝘁 with our 𝗕𝗹𝗮𝗰𝗸 𝗙𝗿𝗶𝗱𝗮𝘆 𝗖𝗼𝗱𝗲: BF-80
𝘈𝘱𝘱𝘭𝘪𝘤𝘢𝘣𝘭𝘦 𝘰𝘯 𝘢𝘭𝘭 𝘰𝘶𝘳 𝘱𝘦𝘯𝘵𝘦𝘴𝘵𝘪𝘯𝘨 𝘦𝘹𝘢𝘮𝘴.

👉 𝗣𝘂𝗿𝗰𝗵𝗮𝘀𝗲 𝗻𝗼𝘄: https://t.co/g9MRF6vmOu

#CyberSecurity #EthicalHacking #Pentesting #BugBounty #InfoSec #NetworkSecurity #CyberAwareness #SecurityTraining #HackerCommunity #CyberSecurityTraining #Certification #BlackFridayDeals #OnlineLearning #TechCareers #SkillsUpgrade #CNSPGiveaway

[Corben Leo @hacker_]

I've made $500k+ from SSRF vulnerabilities.

Here are my tricks:

[Ja_ks_n @Jacksonkv22]

@disnhau It's public program and also available on a bugbounty platform.

[Ja_ks_n @Jacksonkv22]

1) Sometimes svg file upload can leads to blind xss on support desk (same as svg xss).
2) check for the redirect parameter and append javascript:alert'1' payload.
3) Bypass 2FA through IP-Rotate burp extension.

[Ja_ks_n @Jacksonkv22]

@abdulsec12 Please have look on it for more info about the burp ext: https://t.co/JgHOz8nk9s

[Ja_ks_n @Jacksonkv22]

@Prathameshwarak Hi Bro, You can use below mentioned report as a reference report. Also, I will include the vulnerability discription along with step to reproduce, impact and POC video .
https://t.co/euUTlnA5UB

[Abdulrahman Makki | عبدالرحمن مكي @AMakki1337]

#bugbountytips

Sometimes when you visit a website using burp suite cloudflare stops you, but when you disable the proxy it works. here is how to bypass it using burp suite ✍️

Enable match and replace with the following:
https://t.co/spxwWXf7NP

#Cloudflare #BugBounty

[Ja_ks_n @Jacksonkv22]

@_zwink @NotionAddon

[PentesterLab @PentesterLab]

Two more days before our Black Friday specials!

And we just reached 90K followers! Let's celebrate!

We are going to give a 1-month voucher to 90 people who RT this tweet and follow @PentesterLab (picked randomly)!

[Pentester Academy @SecurityTube]

Congratulations to @Jacksonkv22 for clearing our Certified Red Team Professional exam! #ADLab #CRTP #PentesterAcademy cc @nikhil_mitt https://t.co/gUx9gbXHsq

[Pavel Shabarkin @shabarkin]

This is how I have jumped into the web3:

Most of the Ethereum details can be learned doing CTF challenges, and in the game format it is easier to remember and learn things. But before doing the CTFs, watch this Youtube thread:
https://t.co/U2WgvtIabo

1/

[Boschko @olivier_boschko]

Check out my blog! It's a quick read. Solving the 2022 Payment Village challenges. If you're interested in banking-specific vulnerabilities - rounding attacks, scientific notation bugs, kiosk bypasses, and simulated ATM hacking you'll enjoy it ❤️
https://t.co/WPk2awOTCb

[Ja_ks_n @Jacksonkv22]

Enumerate all the subdomain's and functionalities.
Delete the csrf parameter and value.
Provide null csrf token as a bypass.
Xss payload :- <img src=x onerror=prompt(1)>
autorize burp ext for access & priv vulns.
#bugbounty

[Manas @ManasH4rsh]

A complete collection of GAME HACKING! Really interesting stuff

https://t.co/W23Pl1dcjc

[root@AkashHamal0x01:~/ # 🇵🇭 @AkashHamal0x01]

Less goooo bXSS tip

[Ja_ks_n @Jacksonkv22]

CSRF ON ACCOUNT DELETING FUNCTIONALITY
1) Always remove the csrf token parameter in the request.
After fixing the vulnerablity try to bypass the fix 😌
2) create a new user and capture the csrf token and check if that token accepting or not.
#bugbounty #bugbountytips

[Shubham Gupta 🇮🇳 @hackerspider1]

If you are new in bug bounty check out:
https://t.co/5cGkz5rprR

[Whale @WhaleThesis]

Only proud $SHIB holders will retweet. 🐶

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

Always test JSON body parameters. In my case I bypassed email verification.

#bugbountytips

[H4x0r.DZ @h4x0r_dz]

CVE-2021-41773 POC

127.0.0.1/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd