Ashley

Tech writer & firewall analyst at @sucurisecurity

[Ashley @ashley_sand]

@v_santoyo nice! how are the mango trees doing :)

[Dr. Rohit Gautam @aslicyberguy]

BugBounty Tips:👇
Always check for paths in JS Files. I found an endpoint in js file /customer/state, send a request to the endpoint with shopify_id in body and it allowed me to fetch details of any user.

#bugbounty #infosec #bugbountytips

[Dr. Rohit Gautam @aslicyberguy]

Bug Bounty Tips :

1. Replacing HTTP Methods on API Requests from POST to PATCH or GET can leak sensitive info without Authorization.

2. Got a pre condition failed on API Request, Don’t send request to repeater, Modify the Userid from Burpsuite Proxy- OPTIONS, GET.
#bugbounty

[vx-underground @vxunderground]

The only Kernel that is impossible to Rootkit

[Ashley @ashley_sand]

@vxunderground 😔

[The Hacker News @TheHackersNews]

Hackers behind web skimming campaigns are leveraging malicious #JavaScript code that mimics #Google Analytics and Meta Pixel scripts in an attempt to sidestep detection.

Read: https://t.co/3pvJIqSEQD

#infosec #cybersecurity #hacking

[Troy Hunt @troyhunt]

Interesting move by Google:

[Sucuri Security @sucurisecurity]

Staying on top of critical security updates for plugins, third-party components, and website software can improve your security. In our latest post, @ashley_sand shows why you should update your #PHP version.

#websitesecurity https://t.co/RWF1nI95H5

[remy🐀 @_mattata]

they had to call it IPv6 because "BigMAC" was copyrighted

[Ashley @ashley_sand]

@v_santoyo he's gotten so big 🥲❤️

[4n6lady @4n6lady]

Cyber Security isn't optional.

[Jack Rhysider 🏴‍☠️ @JackRhysider]

Two quick wins for your personal security. Use a different password for everything. Keep your software updated.

[Sucuri Security @sucurisecurity]

Managing your clients' website is as important as being able to explain the #vulnerabilities they can face, how to clean, restore, and harden their assets. Start here:

#websitesecurity #BeCyberSmart #WAF https://t.co/aQksywOh41

[Dr. Rohit Gautam @aslicyberguy]

Best Investments in Cyber security 🧵

1/100

[Ashley @ashley_sand]

@imgersonr Congratulations 🥰🎉

[John Opdenakker @j_opdenakker]

How did the hacker escape?

He used the backdoor and ransomware.

[Ashley @ashley_sand]

@imgersonr I actually have been writing for awhile now just never got the chance to update it till now but thank you 😊 🙏

[Ashley @ashley_sand]

Some handy tips I put together recently

[Sucuri Security @sucurisecurity]

Most vulnerabilities start with an unattended #website, outdated #software, #plugins and more. Keep your website at its highest possible level of protection with an easy-to-follow maintenance schedule.

#websitesecurity #websitebackups https://t.co/g43vZ2Dl58

[Sucuri Security @sucurisecurity]

Security for all #websites is a constant, specially for #ecommerce sites. What can you do to best protect your assets? Our post takes you through some easy steps to peace of mind for any size online store.

#PCI #WAF #websitesecurity https://t.co/YyAoa4DEcZ