Tsa_tsu

just enjoy life
while you can 🚶‍♂️

[Tsa_tsu @_Ko_be]

@majestymasculin God is good

[Het Mehta @hetmehtaa]

FREE MCP Security Fundamentals Course

https://t.co/yRAvHkh2QM

[Tsa_tsu @_Ko_be]

ccx xbox z,,network?5d!,3,the!1

[Intigriti @intigriti]

Want to find more vulnerabilities using BurpSuite match & replace rules? 🤑

Open this thread! 🧵 👇

[David Bombal @davidbombal]

To live a creative life, we must lose our fear of being wrong.

#DailyMotivation #inspiration #motivation #bestadvice #lifelessons #changeyourmindset

[Tsa_tsu @_Ko_be]

@cyb3rshi3ld 🛡

[Byte Time Sessions @bytetimesession]

Trust me, you don't want to miss this year's conference!!

[David Bombal @davidbombal]

Hacking networks with Python and Kali Linux

YouTube video: https://t.co/L8LupbhSCo

#python #kalilinux #ccna #cybersecurity #infosec #linux #ccnp #network #cybersecurity #router #switch #cisco #networking #cert #job #career #bestcert

[David Bombal @davidbombal]

Enter the Linux matrix ...

#kalilinux #linux #ubuntu #matrix

[TheCyberPatronNetwork © @TheCyberPatron_]

Microsoft is Offering FREE Certification Courses!No Fee, No Subscription, Just Start Learning.

Microsoft Security Operations Analyst
Course SC-200T00
96-Hour Course
Course Link: https://t.co/YtLNWVgDUq

Microsoft Security, Compliance, and Identity Fundamentals
Course SC-900T00
24-Hour Course
Course Link: https://t.co/koKAhvBzc6

Microsoft Cybersecurity Architect
Course SC-100T00
96-Hour Course
Course Link: https://t.co/q9AdnuV4Zy

Designing and Implementing Microsoft Azure Networking Solutions
Course AZ-700T00
72-Hour Course
Course Link:https://t.co/c5Qr3X9XRv

Microsoft Azure Fundamentals
Course AZ-900T00
24-Hour Course
Course Link:https://t.co/U62gHic26G

Developing Solutions for Microsoft Azure
Course AZ-204T00
120-Hour Course
Course Link:https://t.co/wQmeorucWv

Microsoft Azure Administrator
Course AZ-104T00
96-Hour Course
Course Link:https://t.co/aOdE30X6oA

Configuring and Operating Microsoft Azure Virtual Desktop
Course AZ-140
96-Hour Course
Course Link:https://t.co/xaHn7jQ5HM

Designing Microsoft Azure Infrastructure Solutions
Course AZ-305T00
96-Hour Course
Course Link:https://t.co/rtzUgtBTQK

Microsoft Azure Data Fundamentals
Course DP-900T00
24-Hour Course
Course Link:https://t.co/0WVwZPVYF9

Microsoft Azure AI Fundamentals
Course AI-900T00
24-Hour Course
Course Link: https://t.co/gfqhPq91ty

Develop Generative AI Solutions with Azure OpenAI Service
Course AI-050T00
24-Hour Course
Course Link:
https://t.co/wNE5btu4Z3

Microsoft Power BI Data Analyst
Course PL-300T00
72-Hour Course
Course Link: https://t.co/ole5s3np0t

[TheCyberPatronNetwork © @TheCyberPatron_]

Free SOC Analyst Trainings

1. Splunk Courses (FREE)
https://t.co/Fc07eZBxIy

2. Fortinet Courses (FREE)
https://t.co/GWF1dgEcUV

3. AttackIQ Mitre Att&ck Courses (FREE)
https://t.co/Y6xgHo0QnP

4. Microsoft SC-200 Course (FREE)
https://t.co/NvLw7uDutz

5. Awesome OSINT Courses (FREE)
https://t.co/IJkq0qA26U

6. CSILinux Forensic Trainings (FREE)
https://t.co/2IdYIeA82h

7. Cybrary Trainings (FREE)
https://t.co/wylYOryuYm

Credit : Sanjay Singh

[Gabriel (Umanhonlen | Sudo 🦜) @sudosu01]

SQLI endpoint are most likely vulnerable:

.php:

1. index.php?category=<SQLi payload>
2. product.php?id=<SQLi payload>
3. news.php?article_id=<SQLi payload>
4. user.php?username=<SQLi payload>
5. login.php?username=<SQLi payload>&password=<SQLi payload>
6. search.php?q=<SQLi payload>
7. blog.php?post_id=<SQLi payload>
8. forum.php?thread_id=<SQLi payload>
9. profile.php?user_id=<SQLi payload>
10. admin.php?username=<SQLi payload>&password=<SQLi payload>

.asp:

1. default.asp?catid=<SQLi payload>
2. product.asp?id=<SQLi payload>
3. news.asp?newsid=<SQLi payload>
4. login.asp?username=<SQLi payload>&password=<SQLi payload>
5. search.asp?q=<SQLi payload>
6. blog.asp?postid=<SQLi payload>
7. forum.asp?threadid=<SQLi payload>
8. profile.asp?userid=<SQLi payload>
9. admin.asp?username=<SQLi payload>&password=<SQLi payload>
10. register.asp?username=<SQLi payload>&password=<SQLi payload>

.aspx:

1. default.aspx?catid=<SQLi payload>
2. product.aspx?id=<SQLi payload>
3. news.aspx?newsid=<SQLi payload>
4. login.aspx?username=<SQLi payload>&password=<SQLi payload>
5. search.aspx?q=<SQLi payload>
6. blog.aspx?postid=<SQLi payload>
7. forum.aspx?threadid=<SQLi payload>
8. profile.aspx?userid=<SQLi payload>
9. admin.aspx?username=<SQLi payload>&password=<SQLi payload>
10. register.aspx?username=<SQLi payload>&password=<SQLi payload>

.cfm:

1. index.cfm?catid=<SQLi payload>
2. product.cfm?id=<SQLi payload>
3. news.cfm?newsid=<SQLi payload>
4. login.cfm?username=<SQLi payload>&password=<SQLi payload>
5. search.cfm?q=<SQLi payload>
6. blog.cfm?postid=<SQLi payload>
7. forum.cfm?threadid=<SQLi payload>
8. profile.cfm?userid=<SQLi payload>
9. admin.cfm?username=<SQLi payload>&password=<SQLi payload>
10. register.cfm?username=<SQLi payload>&password=<SQLi payload>

.jsp:

1. index.jsp?catid=<SQLi payload>
2. product.jsp?id=<SQLi payload>
3. news.jsp?newsid=<SQLi payload>
4. login.jsp?username=<SQLi payload>&password=<SQLi payload>
5. search.jsp?q=<SQLi payload>
6. blog.jsp?postid=<SQLi payload>
7. forum.jsp?threadid=<SQLi payload>
8. profile.jsp?userid=<SQLi payload>
9. admin.jsp?username=<SQLi payload>&password=<SQLi payload>
10. register.jsp?username=<SQLi payload>&password=<SQLi payload>

@coffinxp7

#Repost #bugbounty #payloads

[The Fred Effect @MrPhr3d]

These Universities Will Offer You Scholarships

[Adarsh Chetan @AdarshChetan]

2 @decktopus

It is an AI presentation maker, that will create amazing presentations in seconds.

Try here : https://t.co/px362qR5t7

[Rohit Kumar @0xloooser]

Bypass WAFs
A Thread 🧵👇

[Cybernetic Research @cybernetic_res]

People miss critical vulnerabilities because they assume a GET request can't have a body

This is how you can send such a request using #curl:

$ curl '0.0.0.0:1234/download?filename=TEST' --data 'filename=../../../../../../../etc/passwd' -X GET

By:@PentesterLab
#bugbountytips

[WebDeveloperMentor @MentorWebDev]

Learn For Free 👇🏻

HTML → w3schools

CSS → FreeCodeCamp

Git / GitHub→ LearnGitBranching.js .org

Javascript → Javascript .info

UI/UX → Hackdesign

React → React-tutorial .app

SQL → Sqlzap

API → RapidAPI

Tailwind → Tailwindcss .com

Node → Youtube

All → ChatGPT

[Jayesh Madnani @Jayesh25]

Bug Bounty Tips: Penetration Testing Android/iOS Apps? 📱

Today, I'd like to introduce a valuable open source tool that I frequently rely on:

Mobile Security Framework (MobSF), an all-in-one mobile app pen-testing and security assessment tool. It works seamlessly with various mobile app formats, and offers dynamic analysis capabilities.

The best part? You can try it out without installation! Experience MobSF directly at https://t.co/CzW6stNqdG. If you prefer to install and run your own local version, you can do so via https://t.co/38jW49f6tb.

While MobSF offers a range of features, here's the list of things I use it for:

📥 Easy to use: Easily analyze your APK with straightforward drag-and-drop functionality, eliminating the need for multiple tool installations. This is specifically good for beginners because they don't have to rely on complex installation of 5 different tools for testing an app

🔑 Identifying Hardcoded Secrets: The tool helps flag hardcoded credentials, aiding in validation and reporting. I've had some quick wins through this module with sensitive tokens/API keys disclosed

☕ Reviewing Java Source Code: I mostly use it to examine Java source code for my target, uncovering API endpoints, design flaws, or reverse engineering possibilities to overcome jailbreak detection, etc..

🕵️ Reverse Engineering: It helps with reverse engineering, including de-compilation, disassembly, and debugging.

🔄 Dynamic Analysis: It Integrates with Genymotion to inspect HTTP traffic while navigating through the app, effectively detecting endpoints. I use it at times to get a quick Idea of what HTTP calls are being made when Initially navigating through my target

It's worth noting that I still use other tools like Burp Suite, MITM, and Charles Proxy. However, I usually run my target apps through MobSF first as It gives me a nice overview of the target and some quick wins.

Give it a try and enhance your mobile app security assessments! 💪🔍 #BugBounty #MobileSecurity #PenTesting #Cybersecurity #HackerOne #BugCrowd #InfoSec #BugBountyTips

[The SecOps Group @TheSecOpsGroup]

🥇 FREE Certified AppSec Practitioner (CAP) exam! 🥇
** No Discount Code Needed**

To get the offer:
1. Retweet this post.
2. Fill this Google form -
📄 https://t.co/WVFmLaO3CZ
3. We will email you the exam details. 💯

🔗 Read more about our CAP exam -
https://t.co/iW47bEhG0s

#pentesting #CAPExam #Applicationsecurity #informationsecurity