hexoram

A Manchester united fan| an upcoming future hacker| trying to keep the internet a safe and better place backup acct @hexoram21

[hexoram @hexoram1]

@sagal129 @Drk_official11 @UtdMaI He actually played as a 10 for united😂😂

[hexoram @hex0ram]

https://t.co/3T1dPnVYWc

[Assetnote @assetnote]

Our security research team discovered a pre-auth RCE (CVE-2025-27218) in Sitecore XP 10.4. You can read our research here: https://t.co/CzoIe0mlO2

[hexoram @hexoram1]

Day 2 Of #OSINT ( Open Source Intelligence )
i learnt about search operator's:
search operators are specialized characters or commands used to refine and narrow down search results in Google and other search engines.

[hexoram @hexoram1]

i learnt on what Sock puppets is all about and how it separates your face identity from your real identity

[hexoram @hexoram1]

Day1: #OSINT (OPEN SOURCE INTELLIGIENCE)

- I studied on what osint which is a way of gathering publicly available information of the internet.
- i also learnt about the intelligience lifecycle which includes phases like:

#OSINT #cybersecurity_challenge

[hexoram @hexoram1]

-planning and direction
- collection
-processing and exploitation: This's a way of trying to interpret the data
-Analysis and production: this is putting the data in a readable format
- Dissemination and integration

[Brut 🇮🇳 @wtf_yodhha]

🔖Top 25 JavaScript path files used to store sensitive information in Web Application⬇️

01. /js/config.js
02. /js/credentials.js
03. /js/secrets.js
04. /js/keys.js
05. /js/password.js
06. /js/api_keys.js
07. /js/auth_tokens.js
08. /js/access_tokens.js
09. /js/sessions.js
10. /js/authorization.js
11. /js/encryption.js
12. /js/certificates.js
13. /js/ssl_keys.js
14. /js/passphrases.js
15. /js/policies.js
16. /js/permissions.js
17. /js/privileges.js
18. /js/hashes.js
19. /js/salts.js
20. /js/nonces.js
21. /js/signatures.js
22. /js/digests.js
23. /js/tokens.js
24. /js/cookies.js
25. /js/topsecr3tdonotlook.js

#InfoSec #CyberSecurity #Hacking #BugBounty #bugbountyTools #bugbountytips #Pentest #Fuzzing

[hexoram @hexoram1]

@Proxy936623 Can you drop the link to the course

[Smukx.E @5mukx]

Writing a Self-Mutating Malware:

https://t.co/WXF24Knzi3

[Ben Sadeghipour @NahamSec]

Let's go! 💪🏽

[hexoram @hexoram1]

@NahamSec Let's go

[Ben Sadeghipour @NahamSec]

🎯 Black Friday Special+ Giveaway:

Get the full course for just $29 (reg. $119) at with code 'FRIDAY2024'! https://t.co/xWSuabTpZ2

Includes: 15+ Hours of content + 100+ labs!

🎁 BONUS: reply & retweet - one lucky winner gets 2 FREE course coupons (keep one, gift one)!

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

I just published Ultimate Manual Bug Bounty Recon Guide https://t.co/giuS1OUNST

#BugBounty #bugbountytip #bugbountytips

[Hunter @HunterMapping]

🚨Alert🚨CVE-2024-0012&CVE-2024-9474:Exploit module for PAN-OS management interface unauth RCE
🧐Deep Dive:https://t.co/3EFFd6aYob
🔥PoC 1: https://t.co/0Jhp12jex3
🔥PoC 2: https://t.co/keqQsQFE2C
🌟Exploit Tool : https://t.co/9XTpY3kJjz
📊 17K+ Services are found on https://t.co/g3tSyh1Boc yearly.
🔗Hunter Link: https://t.co/bUPZkhlIyt
👇Query
HUNTER:/product.name="Palo Alto"

#EXP #PoC #hunterhow #infosec #infosecurity #OSINT #Vulnerability

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🙌 Email address tools

[YesWeHack ⠵ @yeswehack]

Cracking JWTs: What You Need to Know!

To crack a weak secret in a JWT you can use hashcat with this simple command below! 👇

#YesWeRHackers #BugBountyTips

[Gospel @4osp3l]

https://t.co/tJPoQ3PRch

Pick a vulnerability to learn about.

#bug_bounty

[Deev Pal @techycodec08]

38: 0-100k in bug bounty with a 9-5 job

Continued reading more IDOR reports.

Unfortunately due to loads of office work, am not able to give a lot of time to Bugbounty.

This is getting even tougher than I estimated, but anyways I wont stop.

For IDOR Resources👇

@Rhynorater

[5pider @C5pider]

I will be at @BSidesLondon in December :)

hit me up or say hi if you want to chat about windows internals or malware.