Astra : A tool to find URLs, Endpoints, Api keys, AWS buckets, IPs, etc from a given URL/s. Took inspiration from linkfinder and secretfinder.
https://t.co/AkOpr0fyml
#bugbounty#bugbountytips#infosec#recon
‘Soft skills are the most under-researched area of the bug bounty industry’ – ‘Reconless’ YouTubers (@0xReconless ) on filling a gap in infosec education https://t.co/C0OQVzVc0x
Slides from my talk "HTTP Request Smuggling via higher HTTP versions" at #phdays10!
Several previously undisclosed flaws in real open-source software are discussed near the end.
https://t.co/U45wXegefo
🌌 The United States’ long history of UFO sightings began on June 24, 1947 when an amateur pilot reported seeing “flying saucers” in Washington state
https://t.co/27y7ta03q8
I'm Security+ certified, know my way around Splunk, Linux, Windows, Azure, a little bit of AD, and I'm starting the OSCP soon. Interested in an analyst, threat hunting, or support role that'll get my foot in the door. I've got an eclectic background but I learn quickly!
Let's say you are an entity from a gov and you have an interest to infect people who have #OSINT skills and/or care a lot about their privacy.
Let's say Michael is writing the best books on these topics.
Spread an infected copy of his books on the web is very smart
1/ We'll be covering SQL Injection in the next "theory" video! This includes:
- In-Band SQLi
- Error-based
- Union-based
- Blind SQLi
- Boolean-based
- Time-based
- Out-of-Band SQLi
We'll also cover how to find, exploit and prevent SQLi vulnerabilities!
Okay Twitter, what is a good way to put scope creep (in terms of pentesting) into laymans terms? I want to say "hacked the wrong shit" but I can't say that to students.
SecretScanner: A new open-source tool to automatically detect secrets—like passwords, keys, and tokens that are left inadvertently—in container images, VMs, and hosts, helping you reduce the attack surface
https://t.co/8fKXuaZFUQ
#infosec#pentest