that_faceless_coder

👑I have no special talent, I’m only passionately curious.👑

[that_faceless_coder @faceless_coder]

@ShivaniPahadiya Wake him up

[that_faceless_coder @faceless_coder]

👑So Russia and Ukraine are seriously at war? Why not just call the 2 presidents, give them a boxing gloves and ask them to battle in the boxing ring all alone. Why put innocent people's lives in danger. Retweet till the presidents get this message👑

[Renganathan @IamRenganathan]

Subdomain Takeover Automation.

$ subfinder -d https://t.co/pel4aFbi0R -o target.txt
$ subzy --targets target.txt --hide_fails

This will automatically detect the potentially vulnerable subdomains for takeovers.

#bugbounty #bugbountytips #subdomaintakeover #subfinder #subzy.

[that_faceless_coder @faceless_coder]

@RitikSahni22 👑Deeptalk Podcast👑

[Vivek Ramachandran @vivekramac]

Tesla and SpaceX security teams must be working overtime after Anonymous' message.

[Cyber Advising @cyber_advising]

CVE-2021-21985/CVE-2021-21986: The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server.

PoC
https://t.co/vWYuwZugx4

[Ammar Amer @cry__pto]

Tools designed to automate phishing attacks that are intended to bypass 2FA
evilginx2: https://t.co/9haUXdvpV1
Modlishka: https://t.co/mHNvbvYzF7
KoiPhish: https://t.co/JTA9T4r5yF
ReelPhish https://t.co/FXtzjwgCYG
CredSniper:https://t.co/mFTPZYg8xY
muraena:https://t.co/e5Cl66DsFv

[that_faceless_coder @faceless_coder]

👑Check out my lil man’s blog👑

[that_faceless_coder @faceless_coder]

@i4mth4tculpri7 Let’s meet at Geolocation: 52.391100,4.835300 since Geolocation: 52.3913066,4.8357588 has been closed permanently

[that_faceless_coder @faceless_coder]

👑Am grateful @RitikSahni22 for making me your mentor. I will always say you are just a genius by nature 👑

[Brenda🫅 @HustleQueen01]

Today i worked on a twitter client. Kitchen tilling. Please dont forget to retweet my next client may be your timeline. ❤

[Emad Shanab - أبو عبد الله @Alra3ees]

All About Bug Bounty:-

All about bug websites (bypasses, payloads, and etc)

https://t.co/HsXEc3oLGO

[Manas @ManasH4rsh]

A lot of companies use S3 buckets and here are some GitHub dorks for S3 bucket enumeration:

S3_USER_SECRET=
S3_KEY_ASSETS=
https://t.co/lAxyL3zkxg=
S3_KEY_APP_LOGS=
S3_BUCKET_NAME_APP_LOGS=

happy hacking :)

#bugbountytips

[briankrebs @briankrebs]

Microsoft says its investigation into malicious SolarWinds code in its systems found no evidence attackers used that to forge single sign-on tokens for its corporate domains. But it did find the intruders viewed (but didn't alter) Microsoft source code. https://t.co/JmneYxbp1D

[that_faceless_coder @faceless_coder]

👑Trump just found his windows xp product key😆👑

[SwiftOnSecurity @SwiftOnSecurity]

Wow Trump just tweeted this secret code and deleted it can you decrypt

FCKGW-RHQQ2-YXRKT-8TG6W-2B7Q8

[heige @80vul]

[Vulnerability warning] CVE-2020-14882 + CVE-2020-14883 = one Get request RCE! Please update immediately! https://t.co/rej5WheNUY

[Manas @ManasH4rsh]

Chaining file uploads with other vulns:-

Set filename to:-

> ../../../tmp/lol.png for path traversals
> sleep(10)-- -.jpg for SQLi.
> <svg onload=alert(document.comain)>.jpg/png for xss
> ; sleep 10; for command injections

#bugbountytips

[ARPCon: Virtual Conference & Capture The Flag @ARPc0n]

👨🏻‍💻 The long awaited day has finally come, we are closing in on ARPCon 2020 conference. Here we are presenting our timeline for the first day, 11th October, 2020:

4.45 PM to 5.00 PM - Opening Ceremony
5 PM to 5.20 PM - @tandonrakshit
5.30 PM to 6.10 PM - @_shivambathla