Ghost_fh

OSCP | OSWE | Synack Red Team Member | Security Researcher | Core Pentester at Cobalt.

[Ghost_fh @faridpy]

Finally, It has come😍
Thank you @offsectraining

[L4ys @_L4ys]

I don't know why I made this LOL

[BRute Logic @BRuteLogic]

@StrglrX0 Any good resource(s) in JavaScript language.

The point about vulnerability finding is to learn the code behind it. To understand SQL injection for example, you need to understand SQL.

XSS is in fact JavaScript Injection so you must improve your JavaScript skills.

[blasty @bl4sty]

Hacked up a quick Dirty Pipe PoC that spawns a shell by hijacking (and restoring) the contents of a setuid binary. https://t.co/q8NtTlbgOZ

[brendan @bscarvell]

Clear out the root password using CVE-2022-0847 - https://t.co/2DM5a0j1om

./CVE-2022-0847 /etc/passwd 1 ootz:

[Vanshal Gaur @VanshalG]

Microsoft Exchange Server SSRF Exploit.

https://t.co/7ExDbXWWrO

#bugbounty #infosec

[payloadartist @payloadartist]

Boom. Easy uXSS in any version of Firefox💥
Tools needed - Firefox, Bash and a working mind🌚

#bugbountytips #bugbounty

[Ghost_fh @faridpy]

@payloadartist Awesome finding 😂😂😂😂😂😂

[Cobalt @cobalt_io]

Looking to learn more about getting started with Android application security? Don’t forget to check out @avanish46’s in-depth introductory guide: https://t.co/GckApUWGuM

[Cobalt @cobalt_io]

We are excited to announce that Cobalt is now SOC 2 Type II certified! Learn more about SOC 2 compliance and what this means for Cobalt customers in this post by our InfoSec Manager, Alex Jones. https://t.co/ntNuUyWn4o

[Avanish Pathak @avanish46]

If you want to get started with android application security, I have summarised all the resources in one place and blogged about it. Do give it a read and I hope you find it useful.

Thanks @cobalt_io for giving me this opportunity ✌️

#android #security

https://t.co/W8xgzbw4V0

[Intigriti @intigriti]

We don't have to introduce you to @sqlmap by @stamparm: it's the go-to tool for detecting and exploiting SQL injection vulnerabilities. But did you know you can also use CSRF tokens and multi-threading?
Check out our quick guide! 👇
https://t.co/un7tTpmRIn

[Tomi @mastomii]

A writeup about my latest finding SSRF in PDF Renderer using SVG

#ssrf #svg #bugbountytips #bugbounty
https://t.co/RZ0Rn1BMMT

[Cobalt @cobalt_io]

What goes into an effective #pentest report? For the first installment of a two-part blog series, we’ll dive into the details of vulnerability reports.

Breaking down each report section, sharing examples, and tips on how to enhance your report writing: https://t.co/MuJrF9E2Kg

[Emad Shanab - أبو عبد الله @Alra3ees]

All About Bug Bounty:- Updated.

All about bug websites (bypasses, payloads, and etc)

https://t.co/HsXEc3oLGO

[Vickie Li @vickieli7]

Learn about the CSP security header, something that confused me for a long time 😅
https://t.co/t2hg5DwwXL

[Ghost_fh @faridpy]

@vickieli7 Answer submitted

[Vickie Li @vickieli7]

Challenge: Is this code secure? 🤔Submit your answer here by April 25th! https://t.co/kKkRpERMcR

[Aleksei Tiurin @antyurin]

My small research about attacks on remote debuggers of various languages https://t.co/A0l4WXKf6t #bugbountytips #Pentesting

[Cobalt @cobalt_io]

Don't miss this expert panel of speakers, including our own @CarolineWMWong, later today! See below for details.

[ProjectDiscovery @pdiscoveryio]

[TOOL RELEASE] - 𝗦𝗶𝗺𝗽𝗹𝗲𝗛𝗧𝗧𝗣𝗦𝗲𝗿𝘃𝗲𝗿 - Go alternative of python SimpleHTTPServer

✅ TCP server with customizable response
✅ File server with an arbitrary directory
✅ File upload support
✅ HTTPS support
✅ Basic auth support

https://t.co/3baPbwsA4S

#opensource