Kabir | Cybersecurity

⚡ Red & Blue Team | Security Researcher | Bug Bounty Hunter

[Kabir | Cybersecurity @ethivolt]

Hi, I’m Kabir
Red & Blue Team | Security Researcher | Bug Bounty Hunter
Documenting my cybersecurity journey in public
Labs, exploits, tools & findings
Reply &interact — let’s grow together!
Follow to learn and level up your cybersecurity skills
#Cybersecurity #RedTeam #BlueTeam

[Kabir | Cybersecurity @ethivolt]

@JameslutherHV @hack_and_fix Appreciate it, bro! I actually find myself leaning more toward the Red Team side. I love the offensive mindset and ethical hacking, but I think having a strong Blue Team foundation is also a good one.

[Kabir | Cybersecurity @ethivolt]

Earned my Certified Online Fraud Prevention Specialist (COFPS) certification from @hack_and_fix
Small steps every day, but getting deeper into cybersecurity, fraud prevention, and ethical hacking. More learning ahead 🚀

#Cybersecurity #EthicalHacking #InfoSec

[Hack & Fix @hack_and_fix]

Access the Certified Online Fraud Prevention Specialist (COFPS) course:
https://t.co/YgmMWdefzq

🎁 Free access coupon: STOP-SCAMS

[Kabir | Cybersecurity @ethivolt]

PyrsistenceSniper – Tool that Detects 117 Persistence Malware Techniques on Windows, Linux, and macOS.
https://t.co/lGCjSY0RFE

[Kabir | Cybersecurity @ethivolt]

PyrsistenceSniper – Tool that Detects 117 Persistence Malware Techniques on Windows, Linux, and macOS
https://t.co/lGCjSY0RFE

[Vivek | Cybersecurity @VivekIntel]

Penetration Tester Roadmap 🔴⚔️

1. IT & OS Basics
→ Windows, Linux, filesystems, processes, permissions

2. Networking Fundamentals
→ TCP/IP, DNS, HTTP/HTTPS, routing, ports, VPNs

3. Programming & Scripting
→ Python, Bash, PowerShell, automation basics

4. Linux Mastery
→ CLI, services, networking, package management

5. Web Fundamentals
→ HTML, JavaScript, APIs, cookies, sessions, authentication

6. Security Fundamentals
→ CIA triad, encryption, vulnerabilities, OWASP Top 10

7. Reconnaissance & Enumeration
→ Nmap, OSINT, fingerprinting, subdomain enumeration

8. Web Application Testing
→ XSS, SQLi, SSRF, CSRF, auth bypass, file upload flaws

9. System Exploitation
→ Privilege escalation, weak services, misconfigurations

10. Active Directory Basics
→ Kerberos, LDAP, users/groups, common AD attacks

11. Wireless & Network Attacks
→ Wi-Fi security, packet analysis, MITM concepts

12. Tools & Frameworks
→ Burp Suite, Metasploit, Wireshark, Gobuster, Hydra

13. Post Exploitation
→ Persistence, pivoting, lateral movement, data access

14. Reporting Skills
→ Findings, remediation, risk ratings, documentation

15. Labs & Practice
→ TryHackMe, Hack The Box, PortSwigger, home lab

16. Certifications & Roles
→ eJPT → PNPT → OSCP → Red Team / Pentest Roles

#CyberSecurity #Pentesting #RedTeam #EthicalHacking

[Kabir | Cybersecurity @ethivolt]

DragonBreath: Dragon in the kernel
https://t.co/U8jqfvkQhz

[Kabir | Cybersecurity @ethivolt]

@smbclient1 @ireteeh @Cyblackorg @thariskyjohn Congratulations Vera

[Kabir | Cybersecurity @ethivolt]

@MRM_Cyber Damn

[Kabir | Cybersecurity @ethivolt]

@smbclient1 Cybersecurity student

[Ben Sadeghipour @NahamSec]

Gotta love when you are testing for an SSRF and the entire service goes down and only responds with 503 a 🫠

[Kabir | Cybersecurity @ethivolt]

The deeper I go into web security, the more I realize:

Most vulnerabilities happen because applications trust something they shouldn’t.

User input.
Business logic.
Tokens.
Requests.
Security starts where blind trust ends.
#Cybersecurity #BugBounty #WebSecurity

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

MYTHOS FINDS A CURL VULNERABILITY

https://t.co/dhvdvhqqQp

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

I went from a cockroach to a rat - i was a drain on society and now i am able to offer you these 3! CERTS for your cybersecurity career.
https://t.co/UGbojry8aV

If nobody knows who you are, prove your worth for the love of god. You can say my certs are not recognised but that is not true.
A RatSec - cybersecurity certification is traceable via our website https://t.co/HyFozjf6Fc

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

FREE API HACKING CERTIFICATION - https://t.co/1dFNvASjEM

Want to upgrade and get the full cert? Upgrade now for just 2.50:
https://t.co/NywUIJ5gjO

[Kabir | Cybersecurity @ethivolt]

Building an Interesting Project 🤞🤞

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

Finally, someone exploited the https://t.co/1wIhRapJWd

[Kabir | Cybersecurity @ethivolt]

Been quiet for a while
But behind the scenes, I’ve been deep diving into:
• Web vulnerabilities
• Bug bounty
• API security
• Security research
CSRF, IDOR, SQLi, SSRF, SSTI, XXE, JWTs, WAF evasion… and more.
Now it’s time to document the journey properly.
#Cybersecurity

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

NEW! Come hack my stuff... LEGALLY
http://66.228.63.251/

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

WORDLIST + DISCOVERY THREAD - GET YOUR TOOLS

1. Generate password wordlists
https://t.co/t5hJo2ddxL
https://t.co/Re0qkVJlEj
https://t.co/Ye7hSJ1Tnp

2. Look at Wayback
https://t.co/9AC0RVhMgs

3. Set up hashcat
https://t.co/JsssRuYRpi

4. Find all params
https://t.co/TinAbaNYCI

5. Combine into a toolkit
https://t.co/F0RyhoGRRQ

6. Tidy up your wordlists
https://t.co/g1PMQCTI2l