Zuber Vhora

Red Team @colgate | AppSec | Python | Own Opinions

[Md Ismail Šojal 🕷️ @0x0SojalSec]

PentestAgent Open-source AI multi-agents doing black-box pentesting autonomously.

- Autonomous mode runs full workflows: multi-agent red team simulation.
- AI agents chain recon: Integrated Nmap, Metasploit, FFUF, SQLMap , vuln analysis, exploitation
- RAG for contextual knowledge
- tool chaining + reporting.
- Built-in browser, search, dockerized pentest tools
, all orchestrated by LLM crews.

- https://t.co/C7bq60fV1P

#infosec #cybersec #bugbountytips

[Zuber Vhora @zuber1vhora]

This is the 3rd time. Unacceptable service. Fix this ASAP!

[OffSec @offsectraining]

Starting a career in cybersecurity this year?

Kickstart your journey with these tips🧵👇

[James Kettle @albinowax]

If you like bounties, I highly recommend this presentation from @tincho_508 on novel web cache deception techniques. It comes with @WebSecAcademy labs too!
https://t.co/XdE0SN3Ccz

[Zuber Vhora @zuber1vhora]

@help_delhivery Please check your DM.

[Zuber Vhora @zuber1vhora]

@pbillore141

[TryHackMe @tryhackme]

📣 To celebrate three million of us, we’re giving away limited-edition t-shirts and annual subscriptions throughout our social channels.

Like and retweet to be in with the chance of winning! 😉

[Web Security Academy @WebSecAcademy]

📣#burpchallenge Only 24 hours left to complete the latest mini challenge! Complete the specified XSS, OAuth, authentication, request smuggling, and SSRF labs to be entered into the draw, for a chance to win exclusive Burp swag. https://t.co/lHeinwZ0tI

[Nathan McNulty @NathanMcNulty]

@HackingLZ #BadRedTeamTips

Domain Admins never remember to exclude themselves from account lockout

Brute force all domain admin accounts to keep them locked out so you can attack without them being able to stop you

[Eyisha Zyer @eyishazyer]

10 websites to find remote jobs with USD salary

1. weworkremotely. com
2. hired. com
3. justremote. co
4. remoteleaf. com
5. remote. co
6. dailyremote. com
7. producthunt. com/jobs
8. flexjobs. com
9. remotive. io
10. remoteok. com

[The Sigma Mindset @thesigmamindset]

10 Netflix documentaries that will change your mindset+life:

1.

[Cyber Threat Hub @CyberThreatHub]

(RecoverPy - Recover Overwritten or Deleted Data.) - https://t.co/6K0x5mdblm #infosec #netsec #pentest #cybersecurity #bugbounty

[Emad Shanab - أبو عبد الله @Alra3ees]

shodan-dorks.txt https://t.co/EFCvQjjFuT

[Tushar Verma 🇮🇳 @e11i0t_4lders0n]

Account Takeovers — Believe the Unbelievable
https://t.co/AkYY645KnS

[TheCyberHub @th3cyb3rhub]

Cyber security
01. Cyber security roadmap for beginners

[Emad Shanab - أبو عبد الله @Alra3ees]

Find SSRF on all your huge target list via httpx:-

1:- Download https://t.co/pRv19Qf48c

2:- Add https://t.co/R928jn8xlb on {target}

3:- Run httpx.

httpx -paths ssrf-parameters.txt -threads 200 -o ssrf.txt

4:- Screenshot the result

gowitness file -f ssrf.txt

Good luck

[Web Security Academy @WebSecAcademy]

Looking for something to kick-start the new year? Our Web Security Academy has more than 200 labs covering the latest and greatest vulnerabilities, and learning materials from our team of experts. Get stuck in!
#training #development #newyear https://t.co/fN4R36Y6DQ

[Mahendra Purbia @Mah3Sec]

Reset Password IDOR👇

(I know that its a common scenario of IDOR and many of you found this type of scenario. But i found this type of IDOR first time that's why sharing this to help newcomers :)
#bugbountytips #bugbountytip #bugbounty #cybersecuritytips #infosec #hacker #IDOR

[Jonathan Bar Or (JBO) 🇮🇱🇺🇸🇺🇦 @yo_yo_yo_jbo]

I've interviewed tens of people this year for #infosec jobs. Some tips for the technical side if things: 🧵