Shubham Pathak

SecOps, Bug Bounty, Blogging

[Shubham Pathak @ShubhamPthk]

Auto setup: Bash script to setup new machine with useful #BugBounty recon tools. Tested against #Ubuntu and #Kali. #security #infosec

https://t.co/cp89ogomfq

[Shubham Pathak @ShubhamPthk]

I instantly lose interest the second I realize an email or message was written entirely using AI. 🤖

If it took zero effort to write, it deserves zero effort to skim. 🙂

[Darren @CorboDT]

@github Just to be clear:

Microsoft’s GitHub was compromised when a Microsoft developer using Microsoft VSCode installed a rogue extension from Microsoft’s VSCode extension library, which is moderated and hosted by Microsoft.

I guess I’ll be reevaluating my life choices.

[Shubham Pathak @ShubhamPthk]

AI agents for pentesting are getting scary good. These 4 open-source projects prove it.

Which one actually delivers in real-world tests?

1. https://t.co/75JGlZoFNm
2. https://t.co/g07wdzryeF
3. https://t.co/qVCqd6O63d
4. https://t.co/rKzCRYH3bb

[Shubham Pathak @ShubhamPthk]

Instead of focusing on real threats, many pentesters these days are caught up in box-ticking and creating a culture of security theater.

#SecurityTheater #infosec #bugbounty

[Shubham Pathak @ShubhamPthk]

“When Should You Use AI—And When You Shouldn't”

https://t.co/VftteMxWEV

[Matt Johansen @mattjay]

The Okta hack that keeps on giving!

Cloudflare announced a new data breach today in it's continued battle against creds stolen during a previous Okta hack

Let's dig in:

[Matt Johansen @mattjay]

Okta got hacked. Leading to impact for CloudFlare, 1Password, and BeyondTrust.

Here's everything we know about it:

[Security Trybe @SecurityTrybe]

6 Top Hacker Tools and their use 👇

[flavio @flaviocopes]

Amazing

[Aakash Kanojiya @Kanojiyaaakash1]

FREE Certification Courses for DevOps:

🔸GIT
https://t.co/DksZMMjZ6w

🔸Linux
https://t.co/QzCqsYDMRE

🔸DevOps
https://t.co/HVxcF3P9zW

🔸CI/CD
https://t.co/3QEv0SEDNF

🔸Docker
https://t.co/CR7bjI4e0w

🔸Kubernetes
https://t.co/pnEDJngYFA

🔸GitHub
https://t.co/dMjsfdAXJS

🔸AWS
https://t.co/m3Y119q80n

🔸Azure
https://t.co/bq4ApGzHSg

🔸GCP
https://t.co/QGoPhICN0T

🔸Serverless
https://t.co/UTXb1WzlQh

🔸Jenkins
https://t.co/rIirvUAjeZ

🔸Ansible
https://t.co/fdPot769nt

🔸VirtualBox & vSphere
https://t.co/mGlujmJcGR

Follow @Kanojiyaaakash1 for such free resources.

[tom ッ @tom_antok]

Junior developers

[Joseph Thacker @rez0__]

I was a panelist on a press panel for HackerOne yesterday. There was a lot of discussion about AI and security. 🤖🔒

For prep, I thought a lot about prompt injection. In this thread, I explain prompt injection risks going forward and potential solutions.

[Shubham Pathak @ShubhamPthk]

@RVCJ_FB Lizzie

[flavio @flaviocopes]

If you're not embarassed by the work you did 2/3 years ago, might be a sign you're not moving forward 🤔

[Simon @simonholdorf]

Cyber Security is one of the highest paying fields in IT 🔥

If you want to kickstart your Security career, take these 5 courses for free:

[Shubham Pathak @ShubhamPthk]

@Copywriting_Dad @SaveToNotion #thread

[Shubham Pathak @ShubhamPthk]

@0xMaruf Gonna cook some app-bugs 🐞 there 🙏

[Shubham Pathak @ShubhamPthk]

My new desk setup. I still have a 12-year-old LG monitor that works flawlessly. 😄 #workfromhome #bugbounty #desksetup

[Sam Curry @samwcyo]

Someone hacked an Uber employees HackerOne account and is commenting on all of the tickets. They likely have access to all of the Uber HackerOne reports.