Satya Prakash

Security Researcher 👉 Managed by @0xKayala

[Satya Prakash  @0xKayala]

🔥 Free Cybersecurity Courses!

Get 3 Vibe Security courses FREE using code "FREE50"

👉 https://t.co/lITC3lLTtP

Level up in DevOps, GRC & Pentesting 🚀
#CyberSecurity #FreeCourses #Pentesting
#JVP #JDE #JGA #CJVP #CJDE #JGRC

[Satya Prakash  @0xKayala]

💬 Security Professionals:

What vulnerability do you most commonly discover using #BurpSuite during #VAPT?

1️⃣ IDOR/BOLA
2️⃣ XSS
3️⃣ Auth flaws
4️⃣ API misconfigurations
🧠 Most real vulnerabilities hide behind requests, sessions & APIs.

#CyberSecurity #AppSec

[Satya Prakash  @0xKayala]

How many people missed Bitcoin when it came out ? 😐
Pi is a new digital currency developed by Stanford PhDs, with over 55 million members worldwide. To claim your Pi, follow this link https://t.co/wY99XjqUWf and use my username (SatyaKayala) as your invitation code.
#Pi #MinePi

[Satya Prakash  @0xKayala]

NucleiFuzzer v1.0.1
1. Added multiple domain support with -f option
2. The Paramspider output of each domain is appended into a single file and passed to the Nuclei tool
3. Make sure to follow the below syntax:
nf -d https://t.co/ixwEINgKKl
nf -f asset.txt
#NucleiFuzzer #Nuclei

[Satya Prakash  @0xKayala]

NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications
Link: https://t.co/53rEaWbYWX
#NucleiFuzzer #Nuclei #Fuzzer #Paramspider

[Nuclei by ProjectDiscovery @pdnuclei]

An introduction to using nuclei for beginnners 👇

#nuclei101 #nucleifoundation #vulnerabilityscanner

https://t.co/o0svZQlHCb

[Nuclei by ProjectDiscovery @pdnuclei]

Did you know you can use nuclei to scan all the IP's associated with the dns record of a host? 😱

⌨️ Use the -scan-all-ips option!

#Nuclei101 #Hackwithautomation

[Nuclei by ProjectDiscovery @pdnuclei]

Did you know nuclei has a burp suite plugin?

Well now you do 👍

Learn more about it here 👇 #nuclei101 #hackwithautomation #burpsuite

https://t.co/wIoY9EWBXN

[FOFA @fofabot]

CVE-2023-24489 #Citrix ShareFile RCE🔥

FOFA Query: app="ShareFile-Storage-Server"

Link: https://t.co/DHtE6XdCk5

Refer: https://t.co/f7gtmUR4YV

#cybersecurity #OSINT #FOFA #ThreatIntelligence

[Nuclei by ProjectDiscovery @pdnuclei]

HTTP Fuzzing Example SSTI Template 🚀

⚛️ Craft tailored HTTP requests to uncover common web vulnerabilities like SQLi, SSRF, SSTI, and more.

No prior knowledge of the target needed! 😱

Head to our docs for more info 👇
🔗 https://t.co/I4C4C4JVfs

[Luke Stephens (hakluke) @hakluke]

Quickly and easily check URL HTTP response codes with hakcheckurl!

Install hakcheckurl 👉 https://t.co/QbntxSpqil

#haktools #hacking #recon

[Nuclei by ProjectDiscovery @pdnuclei]

Stop using complex commands and bash functions and start using config files 😎

Here's everything you need to know about nuclei config files! 👇

#Nuclei101 #Hackwithautomation #nucleifoundation

https://t.co/2KooqieMFR

[Satya Prakash  @0xKayala]

Wireshark filters for analyst
Link: https://t.co/2aVYAjJAE2
#wireshark #WiresharkFilters #packetanalysis #networkmonitoring #analyst #incidentinvestigation

[Satya Prakash  @0xKayala]

Nuclei + Paramspider = NucleiFuzzer (Automation)
Tool Link: https://t.co/53rEaWbYWX
#BugBountyTips #BugBounty #NucleiFuzzer #InfoSec

[Satya Prakash  @0xKayala]

NucleiFuzzer (Automation)
Nuclei + Paramspider = NucleiFuzzer
Tool Link: https://t.co/53rEaWbYWX
#BugBountyTips #BugBounty #NucleiFuzzer

[Satya Prakash  @0xKayala]

Bug Bounty Tips:-

1- site:*.target.com ext:php
2- echo https://t.co/5rRe1HXjNt | waybckurls | grep "\?" | uro | httpx -silent > parameters.txt
3- nuclei -l parameters.txt -t fuzzing-templates
4- You may find xss,sqli,ssrf,open-redirect vulnerabilities
#bugbountytips

[Luke Stephens (hakluke) @hakluke]

How to hack web applications in 2023: Part 1 🚀

💻 Types of web apps
⚙️ Setting up for testing
🪲 RCE
🐞 SQLi
🐛 XXE
🪳 Insecure Deserialization
🐜 XSS

And that's just Part 1! 😱 👇 #hacking #pentesting #bugbounty

https://t.co/uHIDJu0if2

[Hossein NafisiAsl @MeAsHacker_HNA]

How I found +100 XSS on Private Program 🧙‍♂️

https://t.co/pN1luk2kp4

#bugbountytip

[Cyber Threat Hub @CyberThreatHub]

SQLiDetector – Python Script That Helps Detect SQL injection By Sending Requests With 14 Payloads & Checks for 152 Regex Patterns
https://t.co/BlzzjRoY7e #infosec #netsec #pentest #cybersecurity #bugbounty