Clifford Trigo

Hey Yah

[Corben Leo @hacker_]

I've made $500k+ from SSRF vulnerabilities.

Here are my tricks:

[🇷🇴 cristi @CristiVlad25]

SSRF via PDF? Now made easy.

(thread)

[Godfather Orwa 🇯🇴 @GodfatherOrwa]

url/?f=etc/passwd ==> 403
encode etc/passwd as base64

url/?f=L2V0Yy9wYXNzd2Q= ==> 200

#note
you can use this trick in SQL , SSTI , XSS , LFI , Etc...

#bugbountytips #bugbountytip

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

https://t.co/ryKFztWmSr

Bug hunting methodology v 5

[Clifford Trigo @MrTrizaeron]

Uh ow

[shubs @infosec_au]

I just published a blog post for the people that want to get into bug bounties. I hope it helps people that are thinking about doing bug bounties, but haven't started yet. It explains what to expect and how to deal with common problems / situations: https://t.co/V9CKTpJzPT

[Swissky @pentest_swissky]

Subdomain Enumeration Tool Face-off 2022 https://t.co/XUQEXaBzMQ

[Ross Ulbricht @RealRossU]

Tomorrow I’ll begin my 10th year in prison.

I don’t know what to say. I screwed up. I ruined my life and caused a lot of pain. When I look back and see my many mistakes, I feel immense regret.

[Clifford Trigo @MrTrizaeron]

#RootCon16 #Day2. Thank you, @Bugcrowd

[Frans Rosén @fransrosen]

I decided to make a homage-post to @homakov and @Nirgoldshlager about different OAuth-token leakage methods I've been researching – ten years after their blog posts that inspired me to start hunt for bugs ♥️ thank you.
https://t.co/pODPvDUOU9

[Stephen Curry @StephenCurry30]

🙌🏽 watch this as much as you watch the game tonight….

[Luke Stephens (hakluke) @hakluke]

I have created a lot of useful little hacking tools over the last few years, sometimes I tweet about them, sometimes I don't.

Here's a list of some of the most useful ones, and a brief explanation of what they do! 🧵👇

[Yanir Tsarimi @Yanir_]

I found a vulnerability in #Azure allowing me to access Azure accounts of companies worth billions

We all know vulnerabilities exist. This isn't an injection, XSS, or RCE.

But the crazy thing about it?
It took 2 hours to discover. 🤯

Here's the story of #AutoWarp👇 (1/10)

[Clifford Trigo @MrTrizaeron]

Devastation caused by the typhoon can be viewed in my Facebook: https://t.co/XIYsoHIrhl. Thank you very much!

[Clifford Trigo @MrTrizaeron]

Our province in the PH needs help due to super typhoon Rai. I've raised around $400. As small as $1 can help for food. We need at least basic needs, food and water. Thank you very much, especially my bug hunter friends.

[bugcrowd @Bugcrowd]

;l;;gmlxzssaw

[bugcrowd @Bugcrowd]

Whether you're a total XSS noob or a seasoned pro, you'll get some knowledge out our latest blog post. https://t.co/2U0I6RsDwm

[bugcrowd @Bugcrowd]

Some basic regex knowledge can save you a lot of time and supercharge your hacking process. 💻

This article by @hakluke aims to teach regular expressions from a hacker’s perspective, by providing real-world examples, starting from basics and going deep! https://t.co/c9hB6cXMPK