Pardon Mukoyi

Hacker | Big Time Bug Bounty Hunter | Unicorn Founder & CEO | Inventer | Nerd in board-room | AI Developer | Martial Artist | Just joined X for bounty insights

[Pardon Mukoyi @bugspiderzw]

@schucky94 @BlessedGeza 😂😂😂

[Pardon Mukoyi @bugspiderzw]

@sachin_pandey98 @harshbothra_ @mayurfartade @Virdoex_hunter @alicanact60 wow thats great i tend to call them asyncronous invisible SQL injections the concept was originally published by @albinowax in 15 September 2015 an extremely powerful concept were he explained when UNC path is enabled and callback oriented hacking in general

[Pardon Mukoyi @bugspiderzw]

@IWcon_ @Jhaddix @BuddoBot hello thanks but cant find the pdf as in the powerpoint presentation please help

[IWCON - The Infosec Writeups' Security Conference @IWcon_]

Watch the #IWCON2023 session by @Jhaddix, @buddobot CISO & Hacker in Charge 🎊

Topic: "Recon Like an Adversary"

Full video here https://t.co/9cfr4MsRkz (Subscribe to our channel for more)

[Pardon Mukoyi @bugspiderzw]

🚀 Join the 7 Million in Bounties Masterclass! 🚀
https://t.co/DtXxAsBLyP
#bugbountytip
#bugbounty

[Pardon Mukoyi @bugspiderzw]

will be sharing a major tip to Gaining Root RCE as part of the 7Million In bounties Masterclass today
#bugbounty
#bugbountytip
#CyberSecurity
#penetrationtesting
#infosecurity
#hackerone

[Pardon Mukoyi @bugspiderzw]

VH-host attack on bing Internal Serices to bing revenue Analytics dashboard acess (5k Bounty)
#bugbounty
#CyberSecurity
#informationsecurity
#Hacking

[Pardon Mukoyi @bugspiderzw]

Blind SQL Injection and the payload was if(now()=sysdate()%2Csleep(10)%2C0)
Origin-IP-Hunt-To Vhost dicovery
#bugbounty
#CyberSecurity
#bugbountytips
#bugbountyhunting

[Pardon Mukoyi @bugspiderzw]

This typically involves utilizing a universal payload, like dns-url, to trigger a callback.
For more in-depth understanding and context, you can refer to this informative video: https://t.co/FqdABBf4RY https://t.co/RW7SWeqPR0

[Pardon Mukoyi @bugspiderzw]

Bentley Remote Code Execution Deserialization Exploitation Several deserialization vulnerabilities, such as CVE-2017-12149, can often be automatically exploited using tools like Jexboss. However, in cases where automated tools fall short, the manual approach may be necessary.