Vinesh Redkar

Security Researcher.

[Ivan Velichko @iximiuz]

SSH Tunnels: An age-old trick that's still widely used

- Expose a local service to the Internet
- Map a remote service to a local port
- Query an AWS RDS database with a local GUI client
- Access a server in your private VPC from a dev machine

...and a lot more. Visual memo 👇

[Dhiraj @RandomDhiraj]

SmuggleSheild stable version is out on chrome web store. Do give a try the extension aims to block basic HTML smuggling attacks.
https://t.co/kqy9D2VbJN
#infosec #blueteam #redteam

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🔰 Find subdomains using RapidDNS

📃 Add this small function into your .bash_profile to quickly find subdomains using RapidDNS API:

rapiddns(){
curl -s "https://t.co/e6NE7XXye4\?full=1" \
| grep -oP '_blank">\K[^<]*' \
| grep -v http \
| sort -u
}
We can then use it like this:

rapiddns https://t.co/x9T5IiJ5Ck

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[Simone Margaritelli @evilsocket]

Attacking UNIX Systems via CUPS, Part I

https://t.co/T6SqraB5nh

[Sam Curry @samwcyo]

New writeup from @_specters_ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate.

Full disclosure:
https://t.co/e2EwvUMgqw

[Dhiraj @RandomDhiraj]

I wrote an NMAP script utilizing version detection to check for CVE-2024-43044.
https://t.co/mPJOuNYSyB
#infosec

[Faiyaz Ahmad @thehacktivator]

Discovered a new xss payload that bypasses cloudflare web application firewall!!

Payload: &lt;button%20popovertarget=x&gt;Click%20me&lt;/button&gt;&lt;img%20onbeforetoggle=alert(1)%20popover%20id=x&gt;XSS

#cybersecurity #ethicalhacking #bugbounty #bugbountytips #penetrationtesting

[Orange Tsai 🍊 @orange_8361]

PHP just fixed one of my RCE vulnerabilities, which affects XAMPP by default. Check to see if you are affected and update now! 🔥
https://t.co/EQdzNTihOm

[Coffin @lostsec_]

Try this script to exploit all vulnerable ip's list: CVE-2024-24919
#CheckPoint #SSLVpn
https://t.co/GvrbKxOHL3

[Dhiraj @RandomDhiraj]

Based on "https://t.co/DvsoUNCAiv" I wrote a quick NMAP NSE script to check CVE-2023-46805 &amp; CVE-2024-21887
NSE Script - https://t.co/9CMZI09huM
#infosec

[OSINT 🪙 @0xtechrock]

OSINT TIP #204🕸️

Web-Check: All-in-one website OSINT tool for analysing any website
The dashboard will show - IP info, SSL chain, DNS records, cookies, headers, domain info, page map, server location, open ports, traceroute

https://t.co/1OHwvMBkun

@Lissy_Sykes👏
#OSINT #WEBINT

[Cyber Detective💙💛 @cyb_detective]

"Best online tools for #Telegram investigations"

An article with small list of the most important search engines, directories, online services, and bots for finding any information in Telegram.

https://t.co/EYhmySChtf

Thanks for tip @osintbear

[Aseem Shrey @AseemShrey]

Subfinder 101 : Find 10x more Sub Domains

🧵👇

[Findomain App @FindomainApp]

#BugBounty #bugbountytip #infosec - Do you want to get all subdomains of a host, get the open ports of all of them (IP address deduplication), and check if there's an HTTP service running? Use the set of tools included in the screenshot! 🧵

Chat with us! https://t.co/TICVqR0By6

[Check Point Research @_CPResearch_]

🚨 We discovered 3 vulnerabilities in Microsoft Message Queuing (MSMQ) service, including #QueueJumper (CVE-2023-21554), a Critical vulnerability that could allow unauthorized attackers to remotely execute code.

More details in our blog 👉 https://t.co/sobbPgFBQi

#PatchNow

[Ninad Mishra @NinadMishra5]

Search for all leaked keys/secrets using one regex!

regex: https://t.co/3Qjd2zpIXm

credits: @h4x0r_dz

#BugBounty #bugbountytips

[/ XNL -н4cĸ3r (and @xnl-h4ck3r in the new Sky) @xnl_h4ck3r]

v3.0 of xnLinKFinder is available:
✅ Lots of bug fixes and some small improvements, mainly around the new wordlist option.
👉 Don't forget to generate your target specific wordlist, e.g. "-owl wordlist.txt"
✅ Read the CHANGELOG for details

https://t.co/hAHxqZKxOK
#BugBounty

[Mahendra Purbia @Mah3Sec]

Collection of Wordlists for #BugBounty | Thanks to the Researchers for sharing this.
https://t.co/QXd7s1fSZR
https://t.co/RPID2xC4yh
https://t.co/eq2lmkPOdO
https://t.co/EterQWf2ns
#bugbountytips #bugbountytips #cybersecuritytips #infosec #cybersecurity #Pentesting

[ReconOne @ReconOne_bk]

Now that Katana has "custom fields" I can search for endpoints in JS files without using any other tools 👇

#recon #AttackSurface #bugbountytips #bugbounty #katana