Haqtify LLC

Haqtify is a leading cybersecurity company specializing in penetration testing and bug bounty Solution for businesses worldwide.

[Somdev Sangwan @s0md3v]

I created a nmap compatible list of all vulnerable software from National Vulnerability Database.

A modified version of it will be shipped with the next release of Silver.

Dump: https://t.co/0CE5R6kxRy
Dataset: https://t.co/zFMxykPm65

[Prateek Tiwari @prateek_0490]

Blogged: It's important to 'stick to basics' - Secure your important assets by adding an additional layer of authentication (2FA or SAML based login). It was a great experience working with @Samsung security team. #bugbounty #infosecurity

https://t.co/0nLvdK73KI

[Vickie Li @vickieli7]

There's no way to organize posts by topic on Medium, so here goes:
SSRF posts:
Intro to SSRF - https://t.co/USHmWFlSI8
Exploiting SSRF - https://t.co/HwST3ifZjm
Bypass SSRF protection - https://t.co/2WFG9Frrw9
SSRF statistics - https://t.co/OIwQ1ZFxFw

[ch @chybeta]

CVE-2019-8451 Unauthorized SSRF via REST API /plugins/servlet/gadgets/makeRequest

use @ to bypass the whitelisting !

https://t.co/aEJ2v7MACf

👇 reading resources @orange_8361
https://t.co/9DBKCpRcQl

[0xrudra @0xrudrapratap]

“Using Shodan Better Way!” by Rudra Pratap https://t.co/Z8eL2RsZYp

[Tavis Ormandy @taviso]

I'm publishing some 🔥 research today, a major design flaw in Windows that's existed for almost *two decades*. I wrote a blog post on the story of the discovery all the way through to exploitation.
https://t.co/1DFW2VGQRb

[Ben Sadeghipour @NahamSec]

Here are the slides from our talk at @defcon - "Owning the clout through SSRF and PDF generators". We'll probably write 3 blog posts on a few bug bounty examples soon! Also a big thank you to @daeken for being my partner in crime through this research. https://t.co/zWxWTkCXJ6

[Osama Avvan @osamaavvan]

My Writeup about Different Ways of Exploiting CSRF.
https://t.co/yneogH4EYL

#bugbountytip @bugbountypocs

[Ayoub FATHI 阿尤布 @_ayoubfathi_]

Ran into an API subdomain with an empty response?

You may get lucky and fetch the full API spec by hitting the following endpoints:

/swagger-ui.html
/swagger/swagger-ui.html
/api/swagger-ui.html
/v1.x/swagger-ui.html
/swagger/index.html
...

#bugbountytips #bugbounty #hackerone

[Haqtify LLC @haqtify]

Thanks alot HackerOne Team for the appreciation Swag!
#Top10in2k16 #Haqtify #PenetrationTesting

[Haqtify LLC @haqtify]

#Haqtify Participated in Another Private BB Program through @Hacker0x01.
High severity Issues Reported by #Haqtify

[Haqtify LLC @haqtify]

@dat_gamer_tho IT student?

[Haqtify LLC @haqtify]

Ios Application Testing :)
Vulnerability Status : Fixed

[Haqtify LLC @haqtify]

Best Testimonial for @haqtifysecurity :)
#PrivateHackeroneProgram #WebSecurity #BestService #StatusFIXED

[Haqtify LLC @haqtify]

Thanks @Abdul_R3hman (our team member) for your great Service .
Really Appreciate. https://t.co/0GbD1dK8Ha

[Haqtify LLC @haqtify]

Private Company was Vulnerable to Subdomain Takeover Issue
Our team member Takeover Subdmain & Reported ethically.

[Haqtify LLC @haqtify]

Private Company was Vulnerable to Subdomain Takeover Issue
Our team member Takeover Subdmain & Reported ethically.

[Haqtify LLC @haqtify]

Now #Haqtify Handle Another *Private Company Bug Bounty Program* through #hackerone .
Thanks Client for your trust!

[Haqtify LLC @haqtify]

Another Penetration Testing Project Done.
P.S :We Can't Disclose the Company because of the Agreement .
#TeamHaqtify