Roshan Pathak

HTTP/1.1 200 OK
^_^

[Roshan Pathak @P4YLO4D]

Thanks @AsrcSecurity for the awesome swag.👌
#swag #bugbounty #whitehat

[JS0N Haddix @Jhaddix]

- Run all your subdomain tools
- uniq them
- Pass that list to: "amass enum -nf domains.txt" to insert them into the amass database.

Then track new findings each day via:

amass track -d https://t.co/PJOG8MCAFq | grep "Found"

#bugbountytips #bugbountytip

thanks @jeff_foley

[JS0N Haddix @Jhaddix]

🧵Mistakes I make in hacking or bug bounty 🧵

#bugbountytips and hacking tips I wish I always adhered to 🙃

cc @sr_b1mal

[JS0N Haddix @Jhaddix]

Another long (hacker) story thread 🧵

= Stealing checks worth millions & pwning a bank =

Here’s how I did it, so you can learn.

I was once contracted to do a penetration test on a bank…

Like, retweet, and follow for more hacker stories!

(1/x)

[BRute Logic @BRuteLogic]

A #WAF can be easily fooled if a " is replaced by a \" and your injection happens in the HTML context. #XSS

Example (alert not obfuscated):

Injection:
<Img Src=" OnError=alert(1)//">

Reflection:
<Img Src=\" OnError=alert(1)//\">

A similar one is here:
https://t.co/1TfS9CHeJX

[Somdev Sangwan @s0md3v]

Want to find XSS in a list of 100000 URLs?

This will give you all the URLs that have parameters commonly vulnerable to XSS.

cat urls.txt | uro | parth --pipe xss

[PortSwigger Research @PortSwiggerRes]

Found an XSS filter that allows SVG-based tags? Try the 'use' element, you can import a SVG via a data url and execute JavaScript automatically!

https://t.co/orvNmYLwGE

[Emperor👑 @EmperorBTC]

CHEAT SHEETS PDF 🚀

Trading Tips, Tricks and Cheat Sheet to help you become a better trader.

Compiled in a PDF.

Share. Learn. And use it in the Day Trading Course.

Link- https://t.co/AUYHBFAUCh

[KNOXSS @KN0X55]

*** 1st #KNOXSS GIVEAWAY! ***

Like and RT this to have a chance to win one of the following:

* 1 KNOXSS Pro Subscription 3-month
* 1 KNOXSS Pro Subscription 6-month
* 1 KNOXSS Pro Subscription 1-year

Winners of this draw will be announced in 72hs, good luck! 😀

[KNOXSS @KN0X55]

Ready for the next round? 😎

[CERT-In @IndianCERT]

CERT-In encourages responsible vulnerability research in the country and invites security researchers to report software vulnerabilities to CERT-In. For more details refer to CERT-In Vulnerability Disclosure Policy.
https://t.co/9SH0MU6uBH
#SecureDigitalIndia #SecureMakeInIndia

[d0nut 🦀 @d0nutptr]

And it's live!

Missed the recon village at #NahamCon2021 since you were busy watching the main track? Come watch my talk on youtube on building faster-than-light reconnaissance!

Let me know what you think!

https://t.co/StgQG6R2rS

[Somdev Sangwan @s0md3v]

If you think I have contributed good stuff to open source, consider nominating me here: https://t.co/pzTuJVKPPw

I really want this cute octocat plushie!

[Omar (mainnet arc) @acceleratooooor]

The Ultimate GitHub Dorks List v2 is out now!

180+ new dorks added! A total of now 400+ dorks for sensitive information exposure to find easy wins :)

Text File:
https://t.co/EkpgxT8foN

#BugBounty #bugbountytip #bugbountytips #100DaysOfCode #BlueTeam #CyberSecurity #github

[Vasim @vasim_infosec]

SSRF blogs :
https://t.co/a50WkOPXby
https://t.co/f6P5m2lTke
https://t.co/GJujpOtcsE
https://t.co/H3lPPN8yKg
https://t.co/7WaNoAKB6C
https://t.co/ZOFS3MpXK7
https://t.co/xEHPbMfYV4
https://t.co/Q5rl1UII0N
https://t.co/36Rj6C1T7v

#bugbounty #pentesting

[Ahmad Shuja @0xElement]

Putting up all the #VirSecCon2020 speakers slides into one :

@zseano

https://t.co/sG6tUjQAN9

@B3nac

https://t.co/1LDtvVQ9ME

@niden

https://t.co/rPXEkjw9Iv

@ethicalhacker

https://t.co/XOeIUHIgIx

@NahamSec @stokfredrik @thecybermentor

Will add more as released.

[John Hammond @_JohnHammond]

#VirSecCon2020 CTF registration is now OPEN! Joining forces with @thecybermentor and @NahamSec for one awesome online virtual security conference, and flattered to help host the CTF! Go register! Go go go!
https://t.co/NhdFtOoASV

[David Schütz @xdavidhu]

I always had a hard time finding @GoogleVRP writeups beacuse they were all over the place in different blog posts, so I made this. If you know of something that is not in there, you are more than welcome to contribute! 🎉

#BugBonty #infosec #GoogleVRP
https://t.co/UAIHqm50bO

[unknown @Unknownuser1806]

Unrestricted file upload

https://t.co/41ayrtkuUK
https://t.co/RqoU86Z58w
https://t.co/cmu9Itsh2X
https://t.co/Rk64TLwe5z
https://t.co/6ian0OGnMC
https://t.co/t1UlGMG1YT
https://t.co/BWGgWbPZR5
https://t.co/nM708XhKOY
https://t.co/I4RLcuA7xA
https://t.co/D5rSi0UrEG

#bougbounty

[Ben Sadeghipour @NahamSec]

This episode of the stream started a bit rocky due to my setup but the conversation definitely made up for it! Check out what @stokfredrik had to say about team DISTURBANCE, getting started with bug bounties, and @hacker0x01's live hacking events!

https://t.co/CDx2PAs1sn