Bugbountyretweet

I retweet #bugbounty #bugbountytips

[Bugbountyretweet @Bugbountyrt]

Pwned 🍎. RCE is ♥️
#bugbounty #bounty

[Bugbountyretweet @Bugbountyrt]

@HusseiN98D In my country who can run Acunetix and Nmap opens a firm and starts teaching hacking 🤣🤣

[Bugbountyretweet @Bugbountyrt]

@sidharthas8962 @coffinxp7 @hexsh1dow Ensure to use gitdumper to show a real impact

[Bugbountyretweet @Bugbountyrt]

@xavvierrrrrr ModiGpt

[Bugbountyretweet @Bugbountyrt]

@thedawgyg @Hacker0x01 What is the bug?

[Bugbountyretweet @Bugbountyrt]

@sidharthas8962 https://t.co/L2BbP3vqGT Try this

[Bugbountyretweet @Bugbountyrt]

@MalikTuyyab @Flipkart @flipkartsupport @nothing File a case at consumer court

[Bugbountyretweet @Bugbountyrt]

@GodfatherOrwa @intigriti Can you please share the intruder list

[Vidoc Security Lab @vidocsecurity]

Let's start looking for this vulnerability. To do so, you can:

Google dork 🔎
1. Go to https://t.co/NaxXzvUnVo
2. Search for - intitle:"index of" "parameters.yml.test"
OR "parameters.yml.dist" - More information at
https://t.co/heXxFYxo9U

Shodan dork 🔍
1. Go to https://t.co/y7uIln2ekj
2. Search for - html:"parameters.yml"

3/5

[Bugbountyretweet @Bugbountyrt]

Hey #CarHackers, If an attacker captures an unused code from a fob in a distant location and replays it to the car, why doesn't it not work?What's the secret behind the car's ability to detect captured signals?
@CarHackVillage @carfucar @_specters_ @BusesCanFly @ayyappan162010

[Bugbountyretweet @Bugbountyrt]

@massylii @shreyasrx He asked how Nmap works, not how to use nmap

[huli @aszx87410]

I haven't played CTF for a while cause I am busy with other stuff like new job and moving to a new place(I am in Tokyo now!).

But I still see some interesting challenges on twitter from time to time and really want to take a note, so here is it

https://t.co/X4NegjtlBb

[Bugbountyretweet @Bugbountyrt]

@shrewdteaa He must be blind

[newfolder @newfolderj]

@HusseiN98D Most of the time while testing Apis I , after looking your tweet can confirmt that uuid/../uuid or id/../id shows same respone but what would be exploitation of this specific scenario ?
I did found PII critical by myid/../victimId but no idea about traversing that you mentioned

[Mike Takahashi @TakSec]

Google Dorks - File Storage:

site:https://t.co/57Cb6NtQy3 "example[.]com"
site:https://t.co/7duufTkL52 "example[.]com"
site:https://t.co/lkAF61gwEb inurl:"/d/" "example[.]com"

Find sensitive data and company accounts

#recon #bugbountytips #infosec #seo

[张惠倩 @momika233]

/nacos/v1/console/namespaces?&accessToken=eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6MTY3NTA4Mzg3N30.mIjNX6MXNF3FgQNTl-FduWpsaTSZrOQZxTCu7Tg46ZU&namespaceId=

[OccupytheWeb @three_cube]

Network Basics for Hackers: The Address Resolution Protocol (ARP) #network4hackers #arp #cybersecurity #mitm #cybersecurity

https://t.co/dSfKYVrMlI

[dirty0124 @dirtycoder0124]

My google dork webpage is now publicly available for use. @bugbounty_tips @Bugcrowd @Hacker0x01
https://t.co/n3VIAmnIKr

[Bugbountyretweet @Bugbountyrt]

@ReconOne_bk -sc —title

[Bugbountyretweet @Bugbountyrt]

@ReconOne_bk Http x

[Bugbountyretweet @Bugbountyrt]

@harshbothra_ 5K