Cj Legacion

Penetration Tester | Synack Red Team Member (SRT) | #eWPTXv2 | #eCPPTv2

[Cj Legacion @LegacionCj]

This is my first write-up. Enjoy !
Thanks @filedescriptor @Hacker0x01
https://t.co/tNFvyOp5Fm
*Retweeted
#ResponsibleDisclosure

[Cj Legacion @LegacionCj]

Tried to hunt vulnerabilities in public program today and got rewarded.

#bugbounty #responsibledisclosure

[Cj Legacion @LegacionCj]

I am now officially @eLearnSecurity
#eCPPTv2 Certified!

#elearnsecurity #networksecurity #penetrationtesting #pentesting #security

[Cj Legacion @LegacionCj]

@intigriti Phaero

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

How to use FFUF over multiple hosts
$ for i in `cat host.txt`; do ffuf -u $i/FUZZ -w wordlist.txt -mc 200,302,401 -se ;done

#bugbountytips #BugBounty #ffuf

[Cj Legacion @LegacionCj]

testing

[Cj Legacion @LegacionCj]

I'm now @eLearnSecurity eWPTX certified! Thanks to @SecunaSecurity

[Cj Legacion @LegacionCj]

@Dinosn This is what you get when you try /etc/passwd. You’ll see that there’s .html at the end @Dinosn

[Cj Legacion @LegacionCj]

@Dinosn After checking, I think you can try any files with .html extensions. I tried putting %00 at the end of /etc/passwd and I got error.

[Cj Legacion @LegacionCj]

@Onlinelivelearn can you send me your email to connect with you? @Onlinelivelearn

[Cj Legacion @LegacionCj]

@Onlinelivelearn I didn't receive any reply @Onlinelivelearn

[Cj Legacion @LegacionCj]

1st day @SecunaSecurity as Junior Penetration Tester 😅

[Cj Legacion @LegacionCj]

@shodanhq Hi @shodanhq I tried to pay using my friend's card and it shows a green response but my account still on a free subscription.

[Cj Legacion @LegacionCj]

@ManasH4rsh I sent a DM.

[Cj Legacion @LegacionCj]

TBD payments 😂

[Cj Legacion @LegacionCj]

tips?
#ResponsibleDisclosure #bugbountytips #bugbounty

[Cj Legacion @LegacionCj]

@daeken @moixxra

[Cj Legacion @LegacionCj]

@AbdullahWolfx @JacksonHHax %23%0a between order by and union select

[Blue Team Labs Online @BlueLabsOnline]

💰GIVEAWAY!💰 From forensics to hunting, incident response to security ops, are you ready for our labs?

🥇= 6 Months PRO
🥈= 3 Months PRO
🥉= 1 Month PRO

1)👋 Follow Us
2)🔄 Retweet This
3)📢 Winners Announced @ Launch

#dfir #blueteam #soc #infosec #cybersecurity #labs

[Cj Legacion @LegacionCj]

Since this is my biggest total payout on a single target. Might want to disclose the total bounty I got 🥰.

#bugbountytips #bugbountytips #ResponsibleDisclosure

[Cj Legacion @LegacionCj]

Nice😅
Bug:
1. Able to comment on Private Threads that leads to Leak of Email and Conversation
2. Able to view the Project of other accounts that leads to Email Leak
#ResponsibleDisclosure #bugbounty #bugbountytips

[Cj Legacion @LegacionCj]

tips?
#ResponsibleDisclosure #bugbountytips #bugbounty