Shield India

We are a team of professional security researchers trying to help Cybersecurity community.

[Shield India @india_shield]

#ittakesacrowd #bugbountytips #bugcrowd @Ninad_Mathpati

[bugcrowd @Bugcrowd]

Want to make bug hunting your career, but hitting some blocks and unsure what to do?

Take some tips and tricks from @ninad_mathpati in todays researcher spotlight! #ItTakesACrowd #BugBountyTips 💻 https://t.co/2Ny5ZVuWts

[Shield India @india_shield]

#cybersecurity #infosec #ctf
@shreyasrx @OffensiveHunter @tirtha_mandal @d3tonator @fatrat_v2 @u1tran00b @snake_hackers

[Ninad Mathpati 🇮🇳 @Ninad_Mathpati]

Will be delivering a talk today at @IITBhilai about CTF's, what is it? why do we need to play? & How do we play?

#cybersecurity #ctf #infosec

[N B Sri Harsha @nbsriharsha]

Recently I have found an RCE via file upload thorough path traversal in tomcat server. Found that tomcat automatically deploys war when uploaded in webapps folder.

https://t.co/RiMIwEpIHd

[Shield India @india_shield]

#infosec #bugbounty

[Ninad Mathpati 🇮🇳 @Ninad_Mathpati]

Want to kick start in a bug bounty? Added some notes here that worth reading. https://t.co/pkpwiLw9m2

Hope this helps 😁

@chaskar_shubham @sonumohapatra92

#bugbountytips #cybersecurity #codereview #infosec #sast #bugbounty

[Shield India @india_shield]

#sourcecodereview

[Ninad Mathpati 🇮🇳 @Ninad_Mathpati]

Added some resources on code review here https://t.co/sPH51l7JtA

Thanks to @sonumohapatra92
@chaskar_shubham for working on this

#bugbountytips #cybersecurity #codereview #infosec #sast #bugbounty

[Kathan Patel @KathanP19]

Try It Yourself leaked DB search.

https://t.co/uxLTiF88s3

[Emad Shanab - أبو عبد الله @Alra3ees]

Mobile App Pentesting collection:-
CC @0Init

https://t.co/YeZhY74u6E
https://t.co/yVf4Sa3pqO
https://t.co/CNy7czdwsH
https://t.co/npALf1Hsfh
https://t.co/sYVkjbsE8H
https://t.co/BP3NKNzDgZ
https://t.co/K8hpdzmtOs

[Shield India @india_shield]

Do check out the API Pentesting course, its really worth it 🔥🔥😄😄

[Vikash Chaudhary @OffensiveHunter]

Gear up for the most awaited course API Penetration Testing live on HackersEra app. Begin the new year by adding a new skill set.
If you are already subscribed Hunter 2.0 course you will get an awesome offer, for discount email - [email protected]
Download HackersEra APP

[Shield India @india_shield]

Hard work always pays off! Many Congratulations to our very own @Ninad_Mathpati for joining in the @cobalt_io core. Best Wishes :)

[Ninad Mathpati 🇮🇳 @Ninad_Mathpati]

Whats could be a better start for 2k21, joined @cobalt_io core.

#infosec #cybersecurity

[Shield India @india_shield]

@tirtha_mandal @d3tonator @_smile_hacker_ @shreyasrx @u1tran00b @snake_hackers @fatrat_v2 😄😄

[Ninad Mathpati 🇮🇳 @Ninad_Mathpati]

Grateful to build my confidence that whatever might be the situation tomorrow I know I will be able to survive that.
Thanks to @infosecsanyam @9thplayer @tirtha_mandal @india_shield team and many more.

[shubs @infosec_au]

I've just added an API routes wordlist containing 953011 possible API paths from the HTTPArchive dataset. Download it at https://t.co/Y04dyFY5q1 - all paths which start with "/api/", "/v1/", "/v2", or "/rest/". Good luck hacking! Thanks for requesting this, hope it helps.

[Shield India @india_shield]

#bugbounty #bugbountytips #appsec #infosec #pentest

[Ninad Mathpati 🇮🇳 @Ninad_Mathpati]

Instead of writing continous blogs, thought of writing down my points and merging all the pentesting tips by awesome community here, still in progress not completed, will be updating it regularly. Hope you like it.
Maintainers me and @chaskar_shubham
https://t.co/YDkZLO2YFd

[Shield India @india_shield]

One of our team member's birthday today @tirtha_mandal help us celebrating his bday.😁😁😁
@d3tonator @Ninad_Mathpati @u1tran00b @shreyasrx @_smile_hacker_ @gauravnarwani97 @snake_hackers

[RogueSMG @RogueSMG]

[Shortcut to #BugBounty]
[Become #Haxor fast]
Watch:
1. @stokfredrik & @hakluke to get motivated and START
2. @theXSSrat & @impratikdabhi to learn what stuff is
3. @farah_hawa01 to go a bit deep into those
4. @InsiderPhD to deep dive even more!
- Now that you know stuff:

[Michael Skelton @codingo_]

Learn how I've streamlined my bug bounty reporting in this video, using a recent release from my toolkit, BBR. Video: https://t.co/u6t0wGU52d Tool: https://t.co/dYWNoJ6IEV #bugbountytips

[Shield India @india_shield]

@d3tonator @SynackRedTeam

[Harsh Jaiswal @rootxharsh]

Sat down with @iamnoooob and worked on the recent Mobileiron MDM RCE by @orange_8361 and what a great find, Here's an RCE PoC using JNDI Injection via local classloading reference triggered using Hessian deserialization as stated in the blog.

https://t.co/dRNP5HW1L4

[Hack3rScr0lls @hackerscrolls]

Incredible mindmap about hacking iOS applications by @hd_421

Pay attention, we have prepared two versions:
1. Full Security Assessments
2. Shorter BugBounty version

XMind source:
https://t.co/52We9OSiFI

#CyberSecurity #BugBountyTip #BugBounty #iOS

[JS0N Haddix @Jhaddix]

Simple but impactful tip for content discovery. Always use the subdomain as a path. Often it is the root of the application #bugbountytips #bugbountytip :

https://t.co/qNVu3F3T3T

try:

https://t.co/Bo3FeyarqM

and then do content discovery

https://t.co/w3VvpdcBe4

[Shield India @india_shield]

Team Shield India will be speaking today at Fergusson College about Bug Bounty in Cyber Security.
#bugbounty #infosec #Cybersecurity @u1tran00b @shreyasrx @fatrat_v2 @_smile_hacker_