Akash c

Self-learner 📕 |Bug Hunter🐞🔫|Cyber Security Professional | ◢ ◤ 🎧|Malayali 😎 | OSCP | CRTP | CRTE | HTB Rastalabs

[Akash c @akashc99]

Thank you @Hacker0x01

[Akash c @akashc99]

@taditdash How many days did they take to deliver the add-on cards?

[Akash c @akashc99]

@rootxharsh BlueSotel - Krabi

[BApp Store @BApp_Store]

Updated: JSON Escaper

https://t.co/2CwJLbVemZ

[BApp Store @BApp_Store]

Added: JSON Escaper

https://t.co/2CwJLbVemZ

[Akash c @akashc99]

@intigriti 9

[Akash c @akashc99]

@achu23ad @Hacker0x01 2017le tweet aa man 😂

[Akash c @akashc99]

Thank you @Hacker0x01

[Rohit @whorsehgal]

🚨 #SecurityZine - Day 6/30 🚨

ROPG in OAuth is not recommended in secure systems, learn how and why 👇

Full Zine @ : https://t.co/gHq4pBsUiT

#security #webdevelopment #appsec #infosec #bugbountytips

[Nuclei by ProjectDiscovery @pdnuclei]

Templates v8.2.0 release update 🎉🎉

To update nuclei with the latest templates: 𝗻𝘂𝗰𝗹𝗲𝗶 -𝘂𝘁
To run nuclei with newly added templates: 𝗻𝘂𝗰𝗹𝗲𝗶 -𝗻𝘁

𝗧𝗲𝗺𝗽𝗹𝗮𝘁𝗲𝘀 𝗰𝗵𝗮𝗻𝗴𝗲𝗹𝗼𝗴: https://t.co/loFl9SCoFU

#hackwithautomation #pentest #security #bugbounty

[Akash c @akashc99]

@intigriti @ippsec

[Alaa Abdulridha @alaa0x2]

Part two of my article about how I hacked Facebook.

Total bounty: $54,800
Two account takeover and Internal SSRF.

https://t.co/sLRAn175zu

#BugbountyTip #infosec #facebookbugbounty #CyberSec #bugbounty #bugbountytips

[Akash c @akashc99]

@intigriti Program

[Nuclei by ProjectDiscovery @pdnuclei]

Nuclei Templates v8.1.2 updates 🗒️🗒️

Changelog — https://t.co/loFl9SCoFU

#hackwithautomation #pentest #security #bugbounty

[Nuclei by ProjectDiscovery @pdnuclei]

Detecting Microsoft Exchange Server SSRF — (CVE-2021-26855) using nuclei templates.

Thanks to @Madrobot_ for quickly sharing the template for this 🙌🙌

#hackwithautomation #appsec #pentest #proxylogon

[Exploit Database @ExploitDB]

[webapps] Triconsole 3.75 - Reflected XSS https://t.co/F8oLci7jJb

[CVE @CVEnew]

CVE-2021-27330 Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading brows... https://t.co/eZDQuzABSn

[Jake Miller @theBumbleSec]

Just when you thought JSON was the one thing you could trust. My latest research on JSON interoperability vulnerabilities highlights the risks of inconsistent parser behavior (40+ parsers) and attacks to bypass business logic in microservice architectures. https://t.co/A3MQkLpAXe

[Akash c @akashc99]

@SecurityTube @nikhil_mitt Thank you @SecurityTube for amazing lab and exam.

[Sergey Toshin @_bagipro]

#bugbountytips
An almost universal way to theft or overwrite arbitrary files on #android is sharing activities. You can find them in AndroidManifest.xml. They handle android.intent.action.SEND. Use the PoC from https://t.co/D9sfxKvyX7 (ctrl+f "EXTRA_STREAM") and test 4 scenarios:

[Sayed Abdelhafiz @dPhoeniixx]

I have published Arbitrary code execution on Facebook for Android's write up, Enjoy reading!
https://t.co/HTKUDxJk4M

[Ricardo Iramar @ricardo_iramar]

The Powerful HTTP Request Smuggling 💪
https://t.co/ayxw8BVXwS