S3ntago

“ you only know what I want you to know, you only see what I want you to see."

[S3ntago @S3ntago]

Check out my 2020 #SynackAcropolis! https://t.co/jJnhngUHWi via @SynackRedTeam thank you so much @ryanrutan

[S3ntago @S3ntago]

هو محدش بيتكلم عن تسريب ��ومزمارت homzmart ليه ؟ بيانات العملاء كلها فالشارع @homzmart #breach

[Florian Roth ⚡️ @cyb3rops]

This is bad.
Putty level bad.
https://t.co/3w1C8YiBu8

[S3ntago @S3ntago]

@Bugcrowd vim

[The Holy Quran | Threads @Almoshafthreads]

◾️اللحظات الأخيرة في عمر الإنسان 🤯

الزمن شيء نسبي ، يختلف من مكان لآخر، لكن الموت هو الحقيقة الحتمية الوحيدة ‼️

الإنسان يمر ب 5 مراحل يوم الوفاة :

فضل الثريد وتابع 🤍

[S3ntago @S3ntago]

@hamoshwani @suly_con Hi Ahmed, Link is not working.

[S3ntago @S3ntago]

@rooted0x01 كوميدي اوي😄

[S3ntago @S3ntago]

@rooted0x01 Wala3 al dnya ya sahby

[S3ntago @S3ntago]

Synack 15for15 Coins #synack #synackredteam #bugbounty

[Mobile Hacker @androidmalware2]

drozer 3.0.0

After almost 7 years, new version of drozer compatible with Python 3 and modern Java was released

If you don't know, drozer was a very popular security testing framework for Android
https://t.co/qbG7M0GJr2

[S3ntago @S3ntago]

@Bugcrowd

[Intigriti @intigriti]

Scrolling through your list of screenshots from your live hosts you come across this page...

Your task is one thing: find as much new content as possible 🤑

How? Taking advantage of IIS shortnames (or tilde's) 😎

A thread of the top 3 best IIS Shortname scanners! 🧵 👇

[S3ntago @S3ntago]

@rooted0x01 3aaash ya sahby

[S3ntago @S3ntago]

@A7mad_x07 استخدم Brave Browser فيه Builtin ad-Blocker

[Geekboy @emgeekboy]

[NEW-RELEASE]

Generate @pdnuclei template as you browse the internet using Nuclei AI - Browser extension.

Nuclei AI Extension: https://t.co/lK3c7Ra7vf

#hackwithautomation #appsec #security #bugbounty

[S3ntago @S3ntago]

@0x4148 🤦🏻‍♂️🤦🏻‍♂️

[PT SWARM @ptswarm]

💥 We have reproduced both CVE-2023–29357 and CVE-2023–24955 in Microsoft SharePoint.

The chain allows unauthenticated users to execute arbitrary commands on the server.

Update your software ASAP!

[S3ntago @S3ntago]

@rooted0x01 @SynackRedTeam Congratz bro 👏🏻👏🏻👏🏻

[Justin Gardner @Rhynorater]

I've made over 100k on SSRF vulnerabilities.

They aren't always as simple as pointing it at localhost or AWS Metadata service.

Here are some tricks I've picked up over the past 5 years of web app testing:

[Intigriti @intigriti]

Exploiting file upload vulnerabilities 🧵👇

[S3ntago @S3ntago]

@Rooted0x01 @SynackRedTeam Thanks bro

[S3ntago @S3ntago]

Leveled up to 0x03! via @SynackRedTeam