Prince Varghese

Cyber security Student

[Het Mehta @hetmehtaa]

Pentesting / Red Teaming Cheat Sheet:

🔗https://t.co/mccOL95VVw

#RedTeam #vulnerability #Hacking #Infosec #Checklist #AD #Recon #OSINT

[Nicolas Krassas @Dinosn]

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

https://t.co/EJe5hRaiYB

[Youstin @youstin24]

If you want to find domains associated to an organization, you can explore DuckDuckGo's tracker-radar.
It's a publicly accesible dataset that stores web tracking information, including domains operated by an organization.
https://t.co/uQUT5My8ud

[Corben Leo @hacker_]

Finding vulnerabilities got easier.

Pair @WeaselJs + Cursor by @anysphere.

Javascript analysis will never be the same

[Anton @therceman]

Bug Bounty CheatSheet

jQuery UI XSS Payloads

🔹 CVE-2022-31160
🔹 CVE-2021-41184
🔹 CVE-2021-41183
🔹 CVE-2021-41182
🔹 CVE-2016-7103
🔹 CVE-2012-6662
🔹 CVE-2010-5312

🔗 https://t.co/0shlPw6D7u

[VIEH Group @viehgroup]

CLOUDFLARE BYPASS [XSS]

PAYLOAD:
<Svg Only=1 OnLoad=confirm(atob("Q2xvdWRmbGFyZSBCeXBhc3NlZCA6KQ=="))>

Credit: Zlatko Z.

#infosec #cybersecurity #pentesting #redteam #informationsecurity #networksecurity #infosecurity #cybersecurityawareness #bugbounty #bugbountytips

[Bipin Jitiya @win3zz]

CVE-2023-20073 - Arbitrary File Upload and Stored XSS
PoC: https://t.co/KiXFE6zLJN
Write-up: https://t.co/Iiqvums8HB
Vendor Advisory: https://t.co/MWJXMCLLtq
#infosec #vulnerability

[X @TheMsterDoctor1]

97 JSON Tests for for Authentication Endpoints

https://t.co/0weX7k9cbb

[James Kettle @albinowax]

"I can easily attribute over $250,000 worth of bounties to this class of attack" - @bugbountyhq

A hacking technique can seem blindingly obvious, and still be massively overlooked. Still love this post from 2016.

https://t.co/AXZPraiOxl

[Showwcase @ShowwcaseHQ]

Who wants some swag? 😍

We just hit 40,000+ followers on Twitter, so we're giving away some of our super comfortable hoodies

Retweet!!! Retweet!!! Retweet!!!

[OSINT 🪙 @0xtechrock]

OSINT TIP #205 ☎️

PH0MBER - An open source information gathering & reconnaissance framework!
The tool initially was for reverse phone number lookup, now the author has added more features.

🔗https://t.co/FdhDycKPPr

@s41r4j 👏

#OSINT #SOCMINT #infosec

[Nick Aleks @Nick_Aleks]

Free Black Hat GraphQL Book Giveaway! Retweet for your chance to win! #graphql #api #hacking #book #giveaway (10 signed books)

[Clandestine @akaclandestine]

7TB of #logs 2021-2022
Shared on the xss forum by olux Market
https://t.co/xuzbUWieiO

[Mobile Hacker @androidmalware2]

Android Pentesting Methodology

There are presented different layers of Android architecture, explore APK files, start reversing Android apps and discuss popular debugging tools
Part 1: https://t.co/GrqUiql9RF
Part 2: https://t.co/8zrMsAK6Uz via @redfoxsec

[Aditya @ADITYASHENDE17]

Easiest information disclosure tip

cat subdomains.txt | waybackurls | httpx -mc 200 -ct | grep application/json

Make sure your target is wide scope . Analyse each URL with json data . You’ll find it alot .

#kongsec #bugbountytips

[Mike Takahashi @TakSec]

Google Dork I use every time

site:target[.]com ext:php

[HACKLIDO @hacklido]

Top Mobile Application Security Blogs Series at https://t.co/URWMAp2OVX

1. Android Testing: How to Set Up a Robust Android Testing Environment
>> https://t.co/MGUnuFtpGI
2. Analysis of Malicous APK using MobSF (Part 1)
>> https://t.co/uCGOdMM9Pm
3. Unveiling Mobile App Security: A Comprehensive Guide
>> https://t.co/tc9j29C6py
4. Getting Started with Frida: Setting up on an Emulator
>> https://t.co/AgAZ3uk88c
5. L3MON – Create FUD Payload and Hack Android Phone
>> https://t.co/Nv4RLKqoD1
6. How i was able to buy free Red Bull | Parameter Tampering
>> https://t.co/nHkZdjSjyU

Tags 🏷#CyberSecurity #infosec #Pentesting #applicationsecurity #mobilesecurity #security #AppSec #Frida #MobSF

Like and Retweet if you liked this, and don't forget to follow for more amazing content.

[Rapid @Rapid_API]

What is cURL, and how to use it for APIs?

Thread 🧵👇

[Nicolas Krassas @Dinosn]

LDAP Queries for Offensive and Defensive Operations https://t.co/GSGQL4UpsD

[Smilehacker @_smile_hacker_]

Just 5 passes left @bsidesahmedabad I am glad to sponsor 2 student passes. Please retweet this and comment on this thread if anyone is interested.

#bsidesahmedabad #BugBounty