Ecosystems Technologies

We are a cybersecurity company focused on providing top of the line penetration testing, vulnerability assessment and compliance services.

[Khalil Afridi @khalilApriday]

FREE Cybersecurity Education Courses from @PaloAltoNtwks

1️⃣ Introduction to Cybersecurity
2️⃣ Fund of Network Security
3️⃣Fund of Cloud Security
4️⃣Fund of SOC (Security Operations Center)

👉 How to Enroll

https://t.co/4KcHJgAyDy

[Will @BushidoToken]

New blog - Introducing GreenMwizi 🔍

🇰🇪 A Kenya-based adversary
🎭 Poses as @bookingcom
🗨️ Replies to targets with Twitter bots
📞 Calls victims using WhatsApp
💸 Uses intl. money transfer site @remitly
⏰ Active since at least Feb' 2023

https://t.co/gnK5jgJVqt

[IAM!ERICA @EricaZelic]

What are the MOST BASIC things you look for on a pentest FIRST?

I'll go first:

unprotected credentials on shares
SMB signing
LDAP signing
default credentials
no explicit credentials to access shares
CVEs
LLMNR/Netbios enabled

[Deepak bug_vs_me @bug_vs_me]

WordPress Plugin WPML Version < 4.6.1 RXSS vulnerability

Found by :- @bug_vs_me and @falcon_charan on 13th MArch 2023

Nuclei template:- https://t.co/4ks7Xdunym

and payload:-
https://xxxxxxx/wp-login.php?wp_lang=%20=id=x+type=image%20id=xss%20onfoc%3C!%3Eusin+alert(0)%0c

[VulnVision @VulnVision]

we are happy to share a 0day we have found on wordpress login page allow un-auth cross site scripting (xss)
#bugbountytip #BugBounty #ItTakesACrowd

[Ecosystems Technologies @ecosyst_]

Ongoing #AfricahackonMasterclass 🙌
#cybersecurity #cloudsecurity #bugbounty

[Eric Muthengia @erickie007]

Join Cyber Security Experts and Enthusiasts at the #AfricahackonMasterclass

#cybersecurity #cloudsecurity #BugBounty
https://t.co/EXLNA8FlWp

[Manas @ManasH4rsh]

https://t.co/JKmSJUXAh6

[Ninad Mishra @NinadMishra5]

Understanding and Preventing CSRF Attack

A Comprehensive Guide to Identifying, Mitigating and Protecting Your Website from Cross-Site Request Forgery

#bugbountytips #bugbounty
https://t.co/hNYdMoedsA

[Eric Muthengia @erickie007]

Register for your masterclass @AfricaHackon if you haven't!
Tix available.
https://t.co/Vea0KJieeu

#infosec #cybersecurity #BugBounty #CloudComputing

[Eric Muthengia @erickie007]

Recon for bug bounty, penetration testers & ethical hackers

#cybersecurity #BugBounty #infosec #bugbountytips
https://t.co/NAU9cRBZ6x

[Eric Muthengia @erickie007]

Great #API fuzzing article by @3nc0d3dGuY

#infosec #cybersecurity #BugBounty #bugbountytips
https://t.co/d6fRashXW8

[Eric Muthengia @erickie007]

Thisss!! 🙌

#cybersecurity #infosec #BugBounty

[Eric Muthengia @erickie007]

Hide secret files in music and photos.
Great content by @davidbombal 🙌
#infosec #cybersecurity
https://t.co/ogGi8Vo2fP

[Abhishek Meena 🏵️ @aacle_]

24 Javascript path files used to store sensitive information in Web Application

1. /js/config.js
2. /js/credentials.js
3. /js/secrets.js
4. /js/keys.js
5. /js/password.js
6. /js/api_keys.js
7. /js/auth_tokens.js
8. /js/access_tokens.js
9. /js/sessions.js
10. /js/authorization.js

[Eric Muthengia @erickie007]

Thissssss. 🙌

[Ecosystems Technologies @ecosyst_]

Into the badlands

[John Mutongoi @johnmtongoi]

Which series is this??

[Clandestine @akaclandestine]

GitHub - A-poc/RedTeam-Tools: Tools and Techniques for Red Team / Penetration Testing https://t.co/VlQp0Ydg9x

[Eric Muthengia @erickie007]

The methodology of collecting subdomains from tools like amass, subfinder, findomain and directly sending them to httpx/httprobe is absolutely wrong. Instead, you should DNS resolve them using tools like puredns or shuffledns.
#BugBounty #bugbountytips

[Rahmat Qurishi @RahmatQurishi]

Result of following @InsiderPhD methodology👻