Ade Littel

Keep learn stay silent |
Hacker Wannabe

[Ade Littel @delittle137]

@scar7c @glints_security Hi @scar7c It’s been a while and they still haven’t responded. There are 7 reports in total. They fixed everything without any notice at all

[Ade Littel @delittle137]

is the glints bug bounty program a scam?

i reported the vulnerability and it was confirm as valid issue.. but when i ask for update, no reply till now.

@yjwong @glints_security @glintsid @Oswaldyeo

[Truffle Security @trufflesec]

🆕️‍🔥TruffleHog now scans DELETED & PRIVATE data on GitHub: https://t.co/FoP6w9VDgY

This data is not a part of any commit history.

To understand how substantial this TruffleHog feature is...

Here's a refresher from last week (1/5)👇

[HackerAI @PentestGPT]

You can now exploit SQL Injection vulnerabilities with HackerGPT!

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Sql injection ⚔️

#infosec #cybersec #bugbountytips

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

Payloads that can be used in headers to bypass a 403

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[Gudetama @gudetama_bf]

OAUTH : Open Redirection

List of Payloads

#bugbountytips #bugbounty

[Rohit Kumar @0xloooser]

Find more IDORS.

Don't just change user id.
/account/1234 --> 403

Bypass by appending like
%20, %09, %0b, %0c, %1c, %1d, %1e, /

[Cyber Advising @cyber_advising]

CVE-2024-26229: An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

PoC
https://t.co/19siS5H6E6

[Intigriti @intigriti]

Want to easily find XSS vulnerabilities using Burpsuite?

Reflector by @elk0kc is an easy-to-use Burpsuite extension to help you find reflections & ultimately test these for XSS vulnerabilities! 🤑

Check it out on Github! 👇
https://t.co/RdJS1lbKNf

[Renwa @RenwaX23]

[0-day alert] Edge Mobile (Android/iOS) Address Bar Spoofing + XSS in Bing

https://t.co/HWE426Wk01

Microsoft said it's low severity (Self-XSS) and decided to not give bounty so I'm sharing it :)

[Maniesh.Neupane @pwn4arn]

IDOR Checklist !
Credit:@hunter0x7

[Security Trybe @SecurityTrybe]

FREE Labs To Test Your PenTesting/CTF Skills

1. TryHackMe - https://t.co/DDjBZmVBNz
2. Vulnhub - https://t.co/qrTUcLaURo
3. RootMe - https://t.co/MOvwDNhY3P
4. OverTheWire - https://t.co/ZgFhV8adAl
5. PicoCTF - https://t.co/lN4737aauZ
6. Pentestlab - https://t.co/JW3aFhr7Gm
7. Google CTF - https://t.co/wQ3GzInUFx
8. CMD Challenge - https://t.co/Ras3FF8UtH
9. HackTheBox - https://t.co/aJ9uGxmSH0
10. Hacker Security - https://t.co/zlGfzRjUOc
11. CTF Komodo Security - https://t.co/g8RIwqTQnW
12. Academy Hackaflag BR - https://t.co/oms2bFbcI2
13. Attack-Defense - https://t.co/4Pu71rULOF
14. Hacker101 - https://t.co/ypbrbsBeK9

[Maniesh.Neupane @pwn4arn]

Web Application Exploit Checklist !

[Ade Littel @delittle137]

@thomasrinsma Can you print document.cookie with this cve? Because this finding similiar with
https://t.co/mrutU9rkTU

[ACE Responder @ACEResponder]

How NTLM authentication works

#ThreatHunting #DFIR

[Nelly; @nrqa__]

Cybersecurity Certifications to pursue in 2024 (For FREE):

[Tulsi Soni @shedntcare_]

6 remote jobs without an interview that are ALWAYS hiring.

Save for later 🔖

[Altered Security @AlteredSecurity]

Congratulations to @delittle137 for clearing our Certified Red Team Professional exam!
#ADLab #CRTP #AlteredSecurity cc @nikhil_mitt
https://t.co/Ieu8xslU8q