Basant Karki

[Basant Karki @JpOctopusenergy]

@RanjitAdhikar34 @Hacker0x01 Ooo

[Karan Chaudhary ✨ @0xKaran]

My 10 ways to find HTTP Host header injection vulnerability.
Any contribution will be appreciated ❤️

#bugbountytips #bugbounty #hostheaderattack #webpentesting #website #cybersecurity

[Tushar Verma 🇮🇳 @e11i0t_4lders0n]

File Upload Tricks

-Use double extensions: .jpg.php
-Use reverse double extension: .php.jpg
-Mix uppercase and lowercase: .pHp, .pHP5, .PhAr
-Null byte: .php%00.png, .php\x00.png
-Multiple dots: file.php......
-Whitespace characters: file.php%20

#BugBounty #bugbountytips

[me_dheeraj @Dheerajmadhukar]

Tweet Tweet 🦥#bug #bounty

[Aditya @ADITYASHENDE17]

Good to learn

https://t.co/qmyEF41axK

[Harsh Bothra @harshbothra_]

All MindMap that I have made so far
1. Forget Password Vulns: https://t.co/8ueUhYNDjn
2. XML Attacks: https://t.co/4fkOKcalgp
3. 2FA Bypass Techniques: https://t.co/HPi5ZP2SKG
4. Android PT Checklist: https://t.co/FB6UGyVFkW
(1/2)

#AppSec #hacking #bugbountytips #websecurity

[Nagli @galnagli]

Excited to invite you all to join my @defcon session airing at https://t.co/9oJ3rNrnDB on 11:00 AM GMT -8.

We'll go over some reconnaissance concepts, how to scan for bugs at scale and some practical PoC's with new nuclei templates release.

#defcon29 #BugBounty

[Nagli @galnagli]

Decided to create "BountyTricks" a repo with private modules and bounty related tricks I'll add from time to time, starting with fresh nuclei SSRF module which takes endpoints as input and check's if they are vulnerable to SSRF - in scale

https://t.co/HudBCDBoqj

#bugbountytips

[Vickie Li @vickieli7]

With one click, you are the admin: Mass assignments and their threats to API data integrity.
https://t.co/C8WsnvmMcP

[David Bate @divadbate]

Prototype pollution scanner by me🙂
Retweets appreciated

#infosec
#BugBounty

https://t.co/yLb3MJQjER

[Tushar Verma 🇮🇳 @e11i0t_4lders0n]

Cheat sheets series for all vulnerabilities:-

https://t.co/bRHiiQLFTh

[Harsh Bothra @harshbothra_]

I have created a simple mindmap to organize some test cases on "Forget Password" Functionality.

XMind Link: https://t.co/y8baFzYkEK
PDF Link: https://t.co/RJNxmRZV2X

I hope you find it useful.

#appsec #infosec #bugbountytips #appsec #webappsec #hacking #testing

[Rohit @whorsehgal]

Download Pegasus from here :
https://t.co/DLxcdC2L5J

At your own risk, and mostly for research purposes. Not sure of the authenticity.

#PegasusSnoopgate #pegasus #Spyware #infosec #Hackers

[Emad Shanab - أبو عبد الله @Alra3ees]

You know you can get easy Server Side Request Forgery (SSRF) if you got one of these dirs:-

To test it inject http://127.0.0.1 or add this site to convert it to XSS https://t.co/R928jn8xlb

Good luck.