Deep Parasiya🇮🇳

20YO | INDIAN | ETHICAL HACKER | CRTA | MCRTA | CAP | CNSP | CYBERSECURITY STUDENT

[Vishal Vishwakarma @rootxvishal]

🔐 AWS IAM Security Notes & Checklist — everything in one place:

✅ Core Concepts
✅ Enumeration
✅ Initial Access
✅ Privilege Escalation
✅ Credential Access
✅ Persistence
✅ Cross-Account Movement
✅ Detection & Hardening
✅ Dangerous Permissions Ref

By @e11i0t_4lders0n 👇

https://t.co/jS347urZHy

#infosec #aws #cybersecurity #cloudsecurity #cloud

[Vishal Vishwakarma @rootxvishal]

🎯 Bug Bounty Tip:

Hunting on targets running Jira, Confluence, Bitbucket, Jenkins, Solr, or Nexus?

Bookmark this PoC goldmine 👇

https://t.co/KTFYFlYzYg

CVEs + payloads ready to test. Save hours of recon.

#bugbounty #infosec #cybersecurity #bugbountytips

[Deep Parasiya🇮🇳 @DeepParasiya]

@medusa_0xf Code

[Vishal Vishwakarma @rootxvishal]

🔥 Ultimate IDOR Testing Checklist 🔥

📌 https://t.co/NcOjwsBrre

IDOR is still one of the most impactful bugs in bug bounty. Many critical findings start by simply changing an ID in a request.

💡 This checklist covers:
✔️ ID & UUID manipulation
✔️ API & version bypasses
✔️ Multi-account testing
✔️ GraphQL & WebSocket
✔️ Race conditions & batch abuse
✔️ Mobile, gRPC & blind IDOR
If you want high-impact bugs, don’t skip this. 🚀

#bugbountytips #bugbounty #infosec #cybersec

[Justin Gardner @Rhynorater]

Becoming a pro in finding client-side bugs is simple. Not easy, but simple.

1. Go through a JS tutorial and understand the basics.
2. Ready everything on this blog 8x until you understand it: https://t.co/OxfS2YJmbr
3. Read JS for Hackers by @garethheyes 4x

Then go hack stuff

[Pingiskok @pingiskok]

Every JWT writeup online covers 2–3 attacks and stops.
I got tired of jumping between 40 blog posts, so I wrote the whole thing. All in one place.
https://t.co/iCSzQ4GjcS

#infosec #appsec #bugbounty #websec #jwt

[0xor0ne @0xor0ne]

Collection of paper related to LLM for vulnerability research/detection

https://t.co/c0F7TkOvHp

#infosec

[Deep Parasiya🇮🇳 @DeepParasiya]

@aatharvauti @hetmehtaa You can take unlimited notes on your primary mail id, there is no limit and you get all your major features available for free.

[Shad0w @Itx_Shad0w]

For years, Google API keys (AIza...) had little to no real-world impact.
But recently, many of them unexpectedly gained access to Google Gemini.

curl "https://t.co/w9AaJy4JhU"

This appears to be a widespread misconfiguration that can be hunted in the wild.

[Deep Parasiya🇮🇳 @DeepParasiya]

@umeshchw Buying air with 16gb would be ok but you must have reconsidered your decision while purchasing pro with 16gb

[Hossam Shady @Hossam__shady]

Spent more than 4 years me and Mr @wadgamaraldeen gathering and preparing full bug bounty methodology that you need to start bug bounty

I think You need to look at it , gathered alot of scenarios that can't be inside courses

Let's Do it

https://t.co/CaQ7eaxeow

#WebSecurity #AppSec #WebAppSecurity #Pentesting #PenTest #RedTeam #Vulnerability #VulnerabilityResearch #ExploitDevelopment #OWASP #OWASPTop10 #XSS #SQLInjection #IDOR #RCE #SSRF #LFI #bugbountytips #bugbounty #SecurityTesting

#BugBounty #CyberSecurity #EthicalHacking #InfoSec #HackerOne #Bugcrowd #SecurityResearch #OWASP

[Nicolas Krassas @Dinosn]

Claude Code skill for AI-assisted bug bounty hunting - recon, IDOR, XSS, SSRF, OAuth, GraphQL, LLM injection, and report generation https://t.co/afoXjzyRaj

[Behi @Behi_Sec]

This is one of the most informative writeups I've come across on Prompt Injection:

https://t.co/QpP0al8oq2

[Deep Parasiya🇮🇳 @DeepParasiya]

@chux13786509 Probably yes, we can upload shell with the image header and also try double extension if there is any validation in the frontend.

[Nagli @galnagli]

I gained complete access to @moltbook's database -The AI Agents Social Network - in under 3 minutes.

API keys of every agent. Over 25k email addresses. Private agent-to-agent DMs, and full write access.

Simply by browsing like a normal user.

Here's what happened 🧵

[InfoSec Community @InfoSecComm]

🚨 New Writeup Alert! 🚨

"ALL about OSCP Pivoting| AD Lateral Movement | ligolo-ng, chisel, sshuttle" by Mr Jokar is now live on IW!

Check it out here: https://t.co/3XjWIaTOGp

#pivot #oscp #proxy #lateralmovement #activedirectory

[Muqsit 𝕏 @mqst_]

🤯A Really Awesome Guide on JavaScript Analysis for Pentesters

Blog: https://t.co/KvHGu75K7L

Author: Konstantin

#infosec

[Peter Agboola @baba_Omoloro]

FREE for ALL:

AWS: https://t.co/ieRHHuCn1x

CISSP: https://t.co/wEl8QAMS2z

CISA: https://t.co/IcongC5Ylc

CISM: https://t.co/ycCFxPWo4z

CRISC: https://t.co/kwoNwfUQs3

CCDA: https://t.co/mioh7P9vP9

Digital Marketing: https://t.co/8rHqlOSfJg

[Deep Parasiya🇮🇳 @DeepParasiya]

@chux13786509 Is it an insecure deserialization? Not sure how to exploit it but just a blind guess.