QuisterTow

Learning something new every day. Into web security

[Anirudh Anand @a0xnirudh]

$20,300 Bounties from a 200 Hour Hacking Challenge in a public program @Bugcrowd - writeup by @mzaherii @NikoueiMohammad @voorivex🔥 https://t.co/UFxQvb9maL

#Security #bugbounty

[Yassine Aboukir 🐐 @Yassineaboukir]

I'll attend @bsidesro in Cluj Napoca, Romania 🇷🇴 as a keynote speaker on 23rd March. See you soon!

[N$🌟 @__nav1n_]

This awesome 'FFuf Advanced Tricks' article by @noraj_rawsec needs a shoutout. I created my own FFuf script based on his tricks, and here is the result. #BugBounty

https://t.co/5l4RMlmhV5

[QuisterTow @QuisterTow]

@st4rf1r muchas gracias

[devansh ⚡️ @0xAsm0d3us]

This repo tries to explain complex security vulnerabilities in simple terms that even a five-year-old can understand!

https://t.co/6EEcdgFlTc

[ghostlulz @ghostlulz1337]

Finally an open source ChatGPT clone without any filters. Write phishing emails, generate sql payloads, write malware, ect. Perfect for the redteam.

[QuisterTow @QuisterTow]

@infosec_au Just my opinion, they should. If you are a respected company, when you implement a third-party into your infrastructure you should do a very detailed security check of it. Again, my personal opinion, but I don't mind if they don't pay for vulnerabilities in tp, it's their right

[Florian Roth ⚡️ @cyb3rops]

What people seem to miss:
The #Log4Shell vulnerability isn't just a RCE 0day.
It's a vulnerability that causes hundreds and thousands of 0days in all kinds of software products.
It's a 0day cluster bomb.

[Nagli @galnagli]

Wordpress Plugin Update Confusion - The full guide on how to scan and mitigate the next Big Supply chain Attack

https://t.co/zRQ6o4DBNP

#BugBounty

[Clint Gibler @clintgibler]

📈 How to find client-side prototype pollution at scale

Great work by @black2fan, @s1r1u5_ + more

They found:
* 18 vulnerable libraries
* Reported ~80 bugs to vulnerability disclosure programs
* Found more than 1,000 vulnerable websites

#bugbountytips

https://t.co/3NU7jcnO64

[Rikesh Baniya @rikeshbaniya]

Here's my writeup on my finding.😄

Issue: Facebook email disclosure and account takeover

#bugbounty #bugbountytips
#facebookbugbounty

https://t.co/m3vwqcZhFC

[reмо̷̷иѕec @remonsec]

How I made $31500 by submitting a bug to Facebook by @win3zz

Scan Template
https://t.co/IYPB3tv7ED

Exploit
https://t.co/G4n1Goz03f

#bugbountytips

[Cernica Ionut @CernicaIonut]

In August I will have to arrive in Vegas to present at #Defcon 29.
Is anyone willing to help me financially with my trip to Las Vegas? I could mention in one of the slides about the company/person and thank him personally for helping me financially to get there.

[Laxman Muthiyah @LaxmanMuthiyah]

Microsoft Account Takeover! 😊😇 Thank you very much @msftsecresponse for the bounty! 🙏🙏🙏
Write up - https://t.co/9ATsxAUfeB

[Alex Birsan @alxbrsn]

Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies

👇Check the thread after reading for a few bonus facts👇

https://t.co/00acKS0ur3

[QuisterTow @QuisterTow]

In January, I submitted 7 vulnerabilities to 1 program on @Hacker0x01. #TogetherWeHitHarder https://t.co/cWApLchp2I

[QuisterTow @QuisterTow]

@NahamSec I used to use Censys as my firefox homepage....

[QuisterTow @QuisterTow]

The real pain part 2. I guess I gotta try harder