sid0krypt

OSWE

[sid0krypt @Siddhar07949650]

@Alengsec @intigriti @zseano @ArchAngelDDay @NahamSec Congratulations bro !!

[/ XNL -н4cĸ3r (and @xnl-h4ck3r in the new Sky) @xnl_h4ck3r]

As promised, here's an in depth look at the GAP Burp extension...
If you like the tool, or it helps find you a nice bounty, please share it, shout about it, like it on github, or even buy me a coffee! 🙂
🤘
https://t.co/XWT3BepHel
#bugbountytips

[helloworld @batallionusa]

@three_cube Mr robot will always be my favorite series.

[sid0krypt @Siddhar07949650]

@UnknownMnz @Bugcrowd Yeaa got that recently XD

[sid0krypt @Siddhar07949650]

@errorrsec I've myself wasted a few bucks then got to understand the truth. No one talks about these🫤🫤🫤

[sid0krypt @Siddhar07949650]

@errorrsec He picks up my report finallyy,then replies: "how do I find the signup endpoint?" and then ghosts me again for dayssss🤡

[Bug X Hunter 💻 @Bug_X_hunter]

Another great tool by @ArmanSameer95 😄

#bugbountytips

👉recon-ninja👈

The recon tool provides a convenient upload option for domain discovery. It employs HTTPX to scan for active domains and utilizes an integrated MongoDB database to store the obtained reconnaissance data.

[sid0krypt @Siddhar07949650]

Thank you so muchhh @GodfatherOrwa and @bxmbn for your recon tips✨✨✨

[Bug X Hunter 💻 @Bug_X_hunter]

👉 Another Great Tool by @AmoloHT

​​🔑 Mantra 🔑

A tool used to hunt down API key leaks in JS files and pages.

This tool was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages.

#infosec #pentesting #redteam

[Bug X Hunter 💻 @Bug_X_hunter]

🔍 JS Finding is a 🐍 Python tool for extracting 📜 JavaScript (JS) files from a given list of 🌐 domains. This tool utilizes various utilities such as 🔄 waybackurls, 📈 gauplus, and 🌐 subjs to perform JS file extraction from the specified domains.
👉 Js Finding👈

[sid0krypt @Siddhar07949650]

@Kxddah Goodluck bud !! Every single person who is trying and giving their best is a "HERO"😡📷no matter what the outcome is.

[Bug X Hunter 💻 @Bug_X_hunter]

🔒 Untrusted Types is a Chrome extension that "abuses" Trusted Types to log DOMXSS sinks.
#BugBounty #bugbountytips #bug

[sid0krypt @Siddhar07949650]

@shubham_srt @devangsolankii Learnt something new !! Thanks a lot

[𝙎𝙍𝙏 🇮🇳 @shubham_srt]

"𝐓𝐚𝐬𝐭𝐲 𝐂𝐨𝐨𝐤𝐢𝐞𝐬 🍪": Cookies with a Security Lens 🔎

I studied cookies in-depth and documented everything in Detail! Including various Edge Cases of Cookies / Browsers.
Took me almost a Month! to compile all this.
🥷🏻
𝐓𝐚𝐬𝐭𝐲 𝐂𝐨𝐨𝐤𝐢𝐞𝐬: https://t.co/eqLLxBjdE6

[Bug X Hunter 💻 @Bug_X_hunter]

🔍🐛 Introducing the ultimate 🦾 burp extension "AGARTHA"
Discover injection flaws (LFI, RCE, SQLi) with dynamic payloads.
#bugbountytips
#BugBounty
#bug

[Bug X Hunter 💻 @Bug_X_hunter]

🔥🔍 Got Firebase Credentials? Unsure what to do next? 😁
#bugbountytip #bugbountytips #bug

[Bug X Hunter 💻 @Bug_X_hunter]

Wanted to Fetch IP 🌐, Hostnames 🏠, Ports 🚪, and Vulnerability Tags 🔒 from @shodanhq using https://t.co/yqDc6PK58F! 💻🔍

Like this ?

[Bug X Hunter 💻 @Bug_X_hunter]

🔎🔒Discover Web Vulnerabilities with Burp_Bug_Finder Extension In Burp🐛🌐

Burp_Bug_Finder is a powerful custom Burp Suite plugin written in Python.This tool simplifies the process of discovering web vulnerabilities, with a focus on XSS and error-based SQLi.

[Devang Solanki @devangsolankii]

Take a look at this free online subdomain finder tool. The results it provides are impressive.

https://t.co/mrZNg0piny

#bugbountytips #bugbounty #recon