Yasin Saffari

Head of Cybersecurity Services.

[Yasin Saffari @expcli]

Telegram Channel.
https://t.co/NHn8Hnbc9k

[Build in Public @buildinpublic]

What are you working on this week?

[Yasin Saffari @expcli]

@its0xShade ❤️

[Yasin Saffari @expcli]

Secure Area ( old NETPLUS )

Persian WSTG 4.2 OWASP Content.

-> https://t.co/RRPcJtbZRI

[Yasin Saffari @expcli]

@its0xShade Fuck Claude
I use Qwen, MimoCode, GLM-5.3
Example : https://t.co/1vsV0LkL79
Model : MimoCode

[Yasin Saffari @expcli]

@its0xShade Qwen Max
Task Time : 1 hour.

[Yasin Saffari @expcli]

@its0xShade All vibe code
Before : i am a software engineer
Now : i am a prompt engineer 😂😩

[Yasin Saffari @expcli]

MSTG - Mobile Security Testing Guide
Would you like to add this as well?

[Yasin Saffari @expcli]

Secure Area ( old NETPLUS )

Persian WSTG 4.2 OWASP Content.

-> https://t.co/RRPcJtbZRI

[Yasin Saffari @expcli]

Secure Area ( old NETPLUS )

Persian WSTG 4.2 OWASP Content.

-> https://t.co/RRPcJtbZRI

[Yasin Saffari @expcli]

Third-Party domains

(() => {
const domains = new Set();

const add = value => {
try {
const url = new URL(value, location.href);

if (
url.hostname &&
url.hostname !== location.hostname
) {
domains.add(url.hostname.toLowerCase());
}
} catch {}
};

document.querySelectorAll("[src],[href]").forEach(el => {
add(el.src || el.href);
});
performance.getEntriesByType("resource")

.forEach(r => add(https://t.co/MNfnSmXVsw));
const result = [...domains].sort();

console.table(result);

copy(result.join("\n"));
return result;

})();

[Yasin Saffari @expcli]

Extract Sensitive Path

(() => {
const paths = new Set();

const regex =
/["'`](\/[^"'`\s]{2,150})["'`]/g;
const scan = text => {

if (!text) return;
for (const m of text.matchAll(regex)) {

const path = m[1];
if (

/\/(admin|administrator|dashboard|api|api-docs|swagger|graphql|debug|internal|private|backup|config|test|dev|staging|auth|login|upload|download|export|import|management)/i
.test(path)
) {
paths.add(path);
}
}
};
scan(document.documentElement.outerHTML);
document.querySelectorAll("script").forEach(s => {
scan(s.textContent);
});
const result = [...paths].sort();
console.table(result);
copy(result.join("\n"));
return result;
})();

[Yasin Saffari @expcli]

Extract all JS Files with Console Tab

(() => {
const js = new Set();

document.querySelectorAll('script[src]').forEach(s => {
try {
js.add(new URL(s.src, location.href).href);
} catch {}
});

performance.getEntriesByType("resource")
.filter(r => /\.js(?:\?|$)/i.test(https://t.co/MNfnSmXVsw))
.forEach(r => js.add(https://t.co/MNfnSmXVsw));
const result = [...js].sort();

console.table(result);

copy(result.join("\n"));
return result;

})();

[Yasin Saffari @expcli]

Netplus; the complete Persian networking platform and Network+ course with animated images, private tests, gamification, and a personalized path, from the first cable to the VPN tunnel.

- https://t.co/aDmTbIGne3

[Yasin Saffari @expcli]

old but gold :)

[Yasin Saffari @expcli]

Netplus; the complete Persian networking platform and Network+ course with animated images, private tests, gamification, and a personalized path, from the first cable to the VPN tunnel.

- https://t.co/aDmTbIGne3

[Yasin Saffari @expcli]

https://t.co/c0QTxrIMVZ

[Yasin Saffari @expcli]

I love u @opencode

[Yasin Saffari @expcli]

Hackflix ; a pretty cool archive for cybersecurity talks

Hackflix is basically a video archive of cybersecurity conferences, packed with talks, presentations, and research from events around hacking, information security, and cyber research.

If you’re into cybersecurity and looking for good talks to watch or learn from, it’s definitely worth checking out.

-> https://t.co/wVNG8HuYgD