dcoder

[Cyber Detective💙💛 @cyb_detective]

Fast Google Dorks Scan

Search the website for vulnerable pages and files with sensitive information using 45 types of Google Dorks.

https://t.co/dXHDHVTVhZ

Creator @IvanGlinkin

#bash #opensource #osint

[RedHunt Labs | CTEM/ASM @RedHuntLabs]

🔥 We have compiled an "Ultimate Guide To Android SSL Pinning Bypass" for #Pentesters, #Security #Researchers/Engineers and #Developers

Refer to this guide and Let's Intercept All the Traffic.
https://t.co/XLy68UpkX6

Please share and RT for reach.
#android #bugbounty #infosec

[Emad Shanab - أبو عبد الله @Alra3ees]

Scan Apple ASN for vulnerabilities and leave no port:-

https://t.co/wHIlTObIma

[Devansh Bordia @devansh_bordia]

Thick Client Security Assessment Vulnerabilities:
1) DLL Hijacking
2) Unquoted Service Path
3) Memory Analysis leads to Sensitive Information Disclosure
4) Misconfigured Read/Write Permission on Registries
5) Finding API Endpoints
6) Unencrypted Traffic
7) Hidden GUI Components

[Intigriti @intigriti]

We all know that storing recon info can sometimes be a little bit overwhelming 🤯 This is why @honoki has created this wonderful tool for all of us to establish some order!

Here's a quick usage guide, curated with 💜 by @intigriti

https://t.co/7UC1GhL0qb

[Emad Shanab - أبو عبد الله @Alra3ees]

VOIP Pentesting checklist,Cheat sheets and Tools:-

https://t.co/o7Ry7SkVsg

[Emad Shanab - أبو عبد الله @Alra3ees]

Nuclei Templates Collection:-
https://t.co/90wrnS1g45
https://t.co/7EHpKXIrR7
https://t.co/gpZOAwHspR
https://t.co/9d6BfHu5cZ
https://t.co/Pe6uKbd36v
https://t.co/YYMuEy237p
https://t.co/UdMbm9KVYP
https://t.co/M2fEwvfZhQ
https://t.co/QJk770JWex

[Tarun mahour @sratarun]

Find Blind RCE with automation
@D0rkerDevil @ADITYASHENDE17 @Assass1nmarcos @Alra3ees

[Rohit @sec_r0]

SOP is a great browser security mechanism but is difficult for beginners even for experienced professionals to understand.
I have a comic written to explain this. I call 'em Zines.
Releasing soon, Follow for updates.

#infosecurity #infosec #security #sop #BugBountyTips

[Aditya @ADITYASHENDE17]

BB tips by me

PDF made by @skypatil98

Thanks Akash for this one

https://t.co/uftfPeD6rq

[Emad Shanab - أبو عبد الله @Alra3ees]

ground-control: A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities. https://t.co/2Zspk2F4A6

[Emad Shanab - أبو عبد الله @Alra3ees]

A Pentester's Guide:- by @pry0cc

Part 1:-
https://t.co/XPWtLUNJRL

Part 2:-
https://t.co/vTyEUaZkmH

Part 3:-
https://t.co/OTCe5lvcJD

Part 4:-
https://t.co/9hOIif0IRf

Part 5:-
https://t.co/je4sYH5twz

[Emad Shanab - أبو عبد الله @Alra3ees]

“Learning path for Bug Bounty” by @udit_thakkur
https://t.co/JVR18n2Euc

[Shiv chouhan @1ndianl33t]

Bug Bounty Roadmaps
1) @Jhaddix
2) @d0nutptr
3) @Virdoex_hunter
4) @rezaduty
5) ?
@stokfredrik @InsiderPhD @farah_hawa01 @NahamSec @TomNomNom @hakluke @intigriti @ADITYASHENDE17 @codingo_

https://t.co/ODoSQlRrBd

[Manas @ManasH4rsh]

Github dorks for finding secret data..
Happy hacking:)

#bugbountytips #infosec

[Emad Shanab - أبو عبد الله @Alra3ees]

BurpSuite-Xkeys: A Burp Suite Extension to extract interesting strings (key, secret, token, or etc.) from a webpage.
https://t.co/jahWb2bO1q

[dcoder @dcoderH]

#AmexWalmart

[Manas @ManasH4rsh]

Unique SSRF payloads.

Can be used for bypasses in unique ways:)

#bugbountytip #bugbounty #infosec

[Sahil Ahamad @ehsahil]

Full Disclosure for the community ♥️ One of the best bugs we have received in a while, good quality report on HTTP Smuggling attack by @defparam

https://t.co/wQJK01DIan

#bugbounty