We have a new post in our blog about creating a tiny script for automated recon with Telegram notifications:
https://t.co/PlAwPfbzQo
We hope you like it.
Hola @O2, dadle las gracias a @zeleris porque no sólo llevan desde el día 13 para entregar 2 SIM, sino que HOY, que ha habido gente en casa TODO EL DIA, han enviado un SMS diciendo que el paquete no se ha podido entregar porque no había NADIE. Buscando nueva compañía 👋
Bug bounty programs are killing their own disclosure pipeline.
Real vuln on https://t.co/XKtBPZ0bYr → CNAMEs to a vendor → program closes as N/A → bug stays open → breach happens anyway.
Microsoft just reversed this. Most haven't.
https://t.co/n9ArD89BGp
Mañana hablaré mas de la experiencia en #RootedCON2025, pero decir que orgullosamente soy poseedor de un certificado de asistencia con la garantía de @CHAYANNEMUSIC
Gracias @cibercapitan y viva @rootedcon !
No solemos entrar en esto, pero esto vez es muy fuerte, nos han mandado un audio y estamos flipando… solo decimos que os preparéis en @rootedcon y si tenéis algo que decirnos mejor a la cara
Katana by @pdiscoveryio is a powerful web crawler for recon! 🕷️
With support for JavaScript crawling, URL extraction, and custom filtering, it helps uncover endpoints, parameters, and assets efficiently. A must-have for refining your attack surface 🚀
Check it out 👉 https://t.co/NPqmaeKqq4
#BugBounty #Recon #YesWeRHackers
httpx doesn't just check if a URL is alive or not. It can also give you:
✅ timestamp
✅ port
✅ url
✅ input
✅ title
✅ scheme
✅ webserver
✅ content_type
✅ method
✅ host
✅ path
✅ time
✅ tech
✅ words
✅ lines
✅ status_code
✅ content_length
✅ PageType
✅ resolvers
But wait. That's just with the -j flag. You can get even more information with the -irh (headers), -irr (headers + body), -irrb (base64 encoded request/response) and -include-chain (redirect chain) flags!
Mañana va a ser un día importante en el track de Criptored dentro de @rootedcon (https://t.co/V8La3g84lo). Entre las diferentes sorpresas vamos a "regalar hardware" de privacidad a todos los asistentes a la charla de @RadioHacking y @JoelSernaMoreno. Esperamos que se llene la sala... por la calidad de la ponencia y por el "regalo" guiño guiño @TaiksonTexas@constrainterror . Nos vemos mañana
Para los que vengáis a @rootedcon recordad que las buenas gentes de @HackingRadio vamos!
@RadiHacking y @JoelSernaMoreno se van a dedicar a explotar cosas y explicaros cómo
Yo estaré con @afernandesvigo hablando de divulgación y luego con mis queridas @securiters de ransomware
Bypassing AMSI and Evading AV Detection with SpecterInsight : https://t.co/Umsqkq4Rb7
New AMSI Bypss Technique Modifying CLR.DLL in Memory : https://t.co/CyDf0CdK0v
Hey @Shopify@Hacker0x01 ...
I have had two bug hunters come to me and tell me horror stories about your bug bounty lately.
Valid bugs being exploited and you coming out saying... "oh we had planned on fixing that... no impact"
That is NOT the bug bounty contract. If there is a PoC showing the bug was exploitable at ANY time, you should pay the researcher.
Don't contribute to a bug bounty community that makes researchers think bug bounty is a scam.
Also - dont hide behind the new CVSS. Program owners looking to downgrade bugs to save money using the new CVSS and splitting bugs are SUPER scummy.
Contact @G0LDEN_infosec