Rajan

.

big plans are on the ways

[Mohammed Zubair @zoo_bear]

Goosebumps.

[Sonam Wangchuk @Wangchuk66]

ABHI BHI ZINDA HUN.... DAY 25

[Ministry of Defence, Government of India @SpokespersonMoD]

All media channels, digital platforms and individuals are advised to refrain from live coverage or real-time reporting of defence operations and movement of security forces. Disclosure of such sensitive or source-based information may jeopardize operational effectiveness and endanger lives. Past incidents like the #KargilWar, 26/11 attacks, and the #Kandahar hijacking underscore the risks of premature reporting. As per clause 6(1)(p) of the Cable Television Networks (Amendment) Rules, 2021, only periodic briefings by designated officials are permitted during anti-terror operations. All stakeholders are urged to exercise vigilance, sensitivity, and responsibility in coverage, upholding the highest standards in the service of the nation. 🇮🇳

Read more: https://t.co/bHscgUBMEV

#MediaAdvisory #NationalSecurity #MIBIndia #ResponsibleReporting

@rajnathsingh
@DefenceMinIndia
@SethSanjayMP
@HQ_IDS_India
@adgpi
@indiannavy
@IAF_MCC
@PIB_India

[Intigriti @intigriti]

Ever had to quickly check for vulnerabilities in your GraphQL targets? 🤔

BatchQL is an open-source tool by @assetnote to help you test over 5+ common vulnerabilities in GraphQL! 🤑

BatchQL is open-source and available on Github! 👇
https://t.co/nuNGHLvSdt

[Intigriti @intigriti]

Still haven't found your first SSRF vulnerability? Or have you only been finding blind SSRFs but couldn't get to escalate it?

We just made an article featuring advanced SSRF exploitation 7 cases 🤑

Check out our latest article 👇
https://t.co/ZtkHrgvRay

[Intigriti @intigriti]

Ever came across a subdomain on one of your targets that returned the following error? 🧐

If you ever skipped these, you may have missed out on a lot of bounties...

Here are the top 3 tools to bypass pages behind a 401 & 403 error status code! 🤑

A thread! 🧵 👇

[Jayesh Madnani @Jayesh25]

Sharing my experience with @Netlas_io:🕵️‍♂️

I've integrated https://t.co/eDRVKx7Hxj into my automation framework to retrieve asset IPs, subdomains, and associated domains. it has led me to discover numerous new assets, facilitating successful subdomain takeovers and Identifying additional security issues along the way. Additionally, I've been using https://t.co/eDRVKx7Hxj for identifying vulnerable services using keywords, titles, or favicon hashes, a strategy that has yielded significant success.

Here's how you can leverage some of these services

Scenario 1: If you've identified a service vulnerable to a specific issue and wish to identify other affected targets, https://t.co/eDRVKx7Hxj allows you to search for similar targets using keywords found in the response body. For example, by searching for the keyword "hubspot" in the response body, you can uncover all targets sharing this characteristic. Example: https://app[.]netlas[.]io/responses/?q=http.body:(hubspot)&page=1&indices=

Scenario 2: In the event of a new 0-day exploit circulating, and you're in search of specific instances like Jenkins based on request headers, https://t.co/eDRVKx7Hxj provides the means to quickly pinpoint such instances. Example: https://app[.]netlas[.]io/responses/?q=http.headers.x_jenkins:* OR http.headers.x_jenkins_cli2_port:* OR http.headers.x_jenkins_session:*&page=1

Scenario 3: Need to locate subdomains efficiently? You can use something like Example: https://app[.]netlas[.]io/domains/?indices=&page=1&q=domain%3A%28domain%3A%2A.paypal[.]com%29

Scenario 4: For broad investigations aimed at finding domains associated with a specific registrant org name or email or nameservers, you could use something like Example: https://app[.]netlas[.]io/whois/domains/?indices=&page=1&q=registrant.organization:"GRABTAXI HOLDINGS PTE. LTD"

These are just a few examples of the features that I use at the moment. While most features require a paid subscription, the potential payoff in identifying critical issues for me specifically using Netlas has been worthwhile investment.

While free sources of information exist, each service possesses its own dataset, and records can vary significantly. For my purposes, I've found https://t.co/eDRVKx7Hxj to be the most cost-effective and reliable option.

My opinion is that as long as the product helps pay itself off, I think It's definitely worth adding It to your toolkit.

[VikRant7 @Vik_Rant07]

Bullying in schools and colleges is strictly prohibited, yet such unfortunate instances persist due to inadequate implementation at the ground level. Teachers and staff should raise awareness and actively prevent such occurrences. Bullying juniors for a moment of fun is not acceptable. Period.

[Rajan @RajaSin01]

@Vik_Rant07 @IndiaToday

[Rajan @RajaSin01]

@Vik_Rant07 @IndiaToday True

[Rajan @RajaSin01]

@Vik_Rant07 @NoContextHumans

[Rajan @RajaSin01]

@Vik_Rant07 @NoContextHumans

[Rajan @RajaSin01]

@Vik_Rant07 @CreepyOrg Damn

[Rajan @RajaSin01]

@Vik_Rant07 @GemsOfCricket 😆 lol

[Rajan @RajaSin01]

@Vik_Rant07 @gharkekalesh Lol

[Rajan @RajaSin01]

@Vik_Rant07 @gharkekalesh

[VikRant7 @Vik_Rant07]

@GemsOfCricket RCB fan spotted. E sala cup namde.

[Rajan @RajaSin01]

@Vik_Rant07 @GemsOfCricket

[Rajan @RajaSin01]

@Vik_Rant07 @PicturesFoIder Agree