Harshit

Security Engineer

[Vishal Saini @k4k4r07]

Check out Nika, a new Java code review tool by my friend @rootaux. It automates pipeline scans using taint analysis, powered by Astrail (a Joern fork) with Andersen’s algorithm to precisely add data-flow edges between nodes

#bugbounty #appsec #hackerone

https://t.co/Cqca5I51FK

[James Kettle @albinowax]

HTTP is supposed to be stateless, but sometimes... it isn't! Some servers create invisible vulnerabilities by only validating the first request on each TCP/TLS connection. I've just published a Custom Action to help you detect & exploit this - here's a narrated demo:

[Ghost St Badmus @commando_skiipz]

Vulnerable Bank is Now Live! 🚀

I'm excited to announce that VulnBank is officially live and accessible at https://t.co/Nk42Npi1fC! This project aims to make learning application security testing easier, more practical, and highly contextual for everyone.

[Matan Berson @MtnBer]

I’m in a pwnfunction video!
Check it out, it’s very well made and the vulnerability chain is quite unique
https://t.co/IcrOeKC9vq

[Nicolas Krassas @Dinosn]

AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.

https://t.co/TIP5cqwRge

[Sarper⚡ @sarperavci]

Just launched CTF Search with 24k+ CTF writeups, covering everything from web exploitation to reverse engineering. Check it out!

https://t.co/iWXBCfJVKZ

[Shesha @security_sesha]

Drilling the redirect_uri in OAuth
{ by @yshahinzadeh } from @hashnode https://t.co/2OayVHA1PA

[Shesha @security_sesha]

https://t.co/MtzeXhoWG0

[Shesha @security_sesha]

DevArmor | Threat Modeling Automation: Opportunities, Challenges, and the Role of AI https://t.co/FDYI3iJv68

[/r/netsec @_r_netsec]

Analysis of CVE-2024-43044 — From file read to RCE in Jenkins through agents https://t.co/bLLBfft0Zd

[/r/netsec @_r_netsec]

CORS: the ultimate guide https://t.co/K7lvQJHuHN

[DirectoryRanger @DirectoryRanger]

Active Directory Cheat Sheet
https://t.co/bNtVCLc8wy

[Altered Security @AlteredSecurity]

Congratulations to @geekyguyharshit for clearing our Certified Red Team Professional exam!
#ADLab #CRTP #AlteredSecurity cc @nikhil_mitt
https://t.co/Ieu8xslmiS

[Shesha @security_sesha]

https://t.co/N5abbj9qDF

[rafa @rafabyte_]

check out my latest research (Exploiting HTTP Parsers Inconsistencies): https://t.co/sJG2sU3Pxl

[Florian Hansemann @CyberWarship]

"Think Outside the Scope: Advanced CORS Exploitation Techniques"

#infosec #pentest #redteam
https://t.co/6lS3kOl8C4

[Clandestine @akaclandestine]

#AppSec
1. OAuth Hijacking
https://t.co/woDhnKK6nE
2. Stealing OAuth Tokens via Open Redirects
https://t.co/jx1ZoWUBBH

[Alex Xu @alexxubyte]

Explaining 9 types of API testing. The method to download the high-resolution PDF is available at the end.

🔹 Smoke Testing
This is done after API development is complete. Simply validate if the APIs are working and nothing breaks.

🔹 Functional Testing
This creates a test plan based on the functional requirements and compares the results with the expected results.

🔹 Integration Testing
This test combines several API calls to perform end-to-end tests. The intra-service communications and data transmissions are tested.

🔹 Regression Testing
This test ensures that bug fixes or new features shouldn’t break the existing behaviors of APIs.

🔹 Load Testing
This tests applications’ performance by simulating different loads. Then we can calculate the capacity of the application.

🔹 Stress Testing
We deliberately create high loads to the APIs and test if the APIs are able to function normally.

🔹 Security Testing
This tests the APIs against all possible external threats.

🔹 UI Testing
This tests the UI interactions with the APIs to make sure the data can be displayed properly.

🔹 Fuzz Testing
This injects invalid or unexpected input data into the API and tries to crash the API. In this way, it identifies the API vulnerabilities.

Subscribe to our newsletter to download the 𝐡𝐢𝐠𝐡-𝐫𝐞𝐬𝐨𝐥𝐮𝐭𝐢𝐨𝐧 𝐜𝐡𝐞𝐚𝐭 𝐬𝐡𝐞𝐞𝐭. After signing up, find the download link on the success page: https://t.co/Zx9BH4M3Qm

[Nicolas Krassas @Dinosn]

Top 50 Vulnerabilities Leading to RCE in Public-Facing Applications https://t.co/YaNtF06OSJ

[ISRO @isro]

Chandrayaan-3 Mission:
'India🇮🇳,
I reached my destination
and you too!'
: Chandrayaan-3

Chandrayaan-3 has successfully
soft-landed on the moon 🌖!.

Congratulations, India🇮🇳!

#Chandrayaan_3
#Ch3