Karan Ponda

H@¢Ke₹$£y€

[Karan Ponda @KaranPonda]

Continuous improvement is better than delayed perfection.
- Think Once

https://t.co/BcMLglUiCT

[Karan Ponda @KaranPonda]

@elonmusk what an immature man, r u seriously elon musk 😅

[CISA Cyber @CISACyber]

🛡️ We added PaperCut and Cisco vulnerabilities CVE-2023-2533, CVE-2025-20281, & CVE-2025-20337 to our Known Exploited Vulnerabilities Catalog. Visit https://t.co/myxOwap1Tf & apply mitigations to protect your org from cyberattacks. #Cybersecurity #InfoSec

[Harshleen @0xharshleen]

CISSP Cheat Sheet

[0xor0ne @0xor0ne]

Open source Wi-Fi stack for ESP32 SoCs through reverse engineering pre-compiled binary blobs

Part 1: https://t.co/ZGtu0ZIaAk
Part 2: https://t.co/tTTLNn8D6a
Repo: https://t.co/25ezvSu2Fw

#esp32 #cybersecurity

[Muqsit 𝕏 @mqst_]

🚁 Drone Hacking: Drone Operation and Demolition Guide!

1. https://t.co/2mXZfJJSrt
2. https://t.co/JPMCj9o0zv
3. https://t.co/DlLydV5BSs

#cybersecurity #infosec #hacking #BugBounty #bugbountytips

[Smukx.E @5mukx]

InfoGather: Collect Send, the basic information such as System, Process User Network ,Registers etc. .. of windows and self deletes it after reboot.

Code: https://t.co/pL8DYTluMc

#maldev #rust #information #redteam #pwn #Pentesting

[Nicolas Krassas @Dinosn]

gpu poisoning; hide the payload inside the gpu memory. https://t.co/HvK39LqLsO

[LetsDefend @LetsDefendIO]

HTTP status codes for SOC Analysts

[0xor0ne @0xor0ne]

BTIGhidra: Ghidra plugin to infer type information from binaries

Blog post: https://t.co/HP2iUUzw5r
Github: https://t.co/9Iiv2Ivrzh

Credits @trailofbits

#reverseengineering

[Karan Ponda @KaranPonda]

@moru_121 @AmbAckermann @KasparJoMeyer @vfsglobalcare @ABaerbock @GermanyDiplo @DrSJaishankar @eoiberlin @Bundeskanzler We've been waiting for available slots for over two months now, investing all our time, money, and effort into this process. It's become a do-or-die situation for us, and we urgently need a solution. The uncertainty is causing immense stress, atleast provide alternative(diff vfs)

[Umanhonlen Gabriel | Sudo 🦜- (MSc, MBA) @sudosu01]

SQLI endpoint are most likely vulnerable:

.php:

1. index.php?category=<SQLi payload>
2. product.php?id=<SQLi payload>
3. news.php?article_id=<SQLi payload>
4. user.php?username=<SQLi payload>
5. login.php?username=<SQLi payload>&password=<SQLi payload>
6. search.php?q=<SQLi payload>
7. blog.php?post_id=<SQLi payload>
8. forum.php?thread_id=<SQLi payload>
9. profile.php?user_id=<SQLi payload>
10. admin.php?username=<SQLi payload>&password=<SQLi payload>

.asp:

1. default.asp?catid=<SQLi payload>
2. product.asp?id=<SQLi payload>
3. news.asp?newsid=<SQLi payload>
4. login.asp?username=<SQLi payload>&password=<SQLi payload>
5. search.asp?q=<SQLi payload>
6. blog.asp?postid=<SQLi payload>
7. forum.asp?threadid=<SQLi payload>
8. profile.asp?userid=<SQLi payload>
9. admin.asp?username=<SQLi payload>&password=<SQLi payload>
10. register.asp?username=<SQLi payload>&password=<SQLi payload>

.aspx:

1. default.aspx?catid=<SQLi payload>
2. product.aspx?id=<SQLi payload>
3. news.aspx?newsid=<SQLi payload>
4. login.aspx?username=<SQLi payload>&password=<SQLi payload>
5. search.aspx?q=<SQLi payload>
6. blog.aspx?postid=<SQLi payload>
7. forum.aspx?threadid=<SQLi payload>
8. profile.aspx?userid=<SQLi payload>
9. admin.aspx?username=<SQLi payload>&password=<SQLi payload>
10. register.aspx?username=<SQLi payload>&password=<SQLi payload>

.cfm:

1. index.cfm?catid=<SQLi payload>
2. product.cfm?id=<SQLi payload>
3. news.cfm?newsid=<SQLi payload>
4. login.cfm?username=<SQLi payload>&password=<SQLi payload>
5. search.cfm?q=<SQLi payload>
6. blog.cfm?postid=<SQLi payload>
7. forum.cfm?threadid=<SQLi payload>
8. profile.cfm?userid=<SQLi payload>
9. admin.cfm?username=<SQLi payload>&password=<SQLi payload>
10. register.cfm?username=<SQLi payload>&password=<SQLi payload>

.jsp:

1. index.jsp?catid=<SQLi payload>
2. product.jsp?id=<SQLi payload>
3. news.jsp?newsid=<SQLi payload>
4. login.jsp?username=<SQLi payload>&password=<SQLi payload>
5. search.jsp?q=<SQLi payload>
6. blog.jsp?postid=<SQLi payload>
7. forum.jsp?threadid=<SQLi payload>
8. profile.jsp?userid=<SQLi payload>
9. admin.jsp?username=<SQLi payload>&password=<SQLi payload>
10. register.jsp?username=<SQLi payload>&password=<SQLi payload>

@coffinxp7

#Repost #bugbounty #payloads

[Het Mehta @hetmehtaa]

List of Recon Frameworks for Bug Bounty:

1. AutoRecon
https://t.co/j1uj31c3eO
2. reNgine
https://t.co/NiOdi22QsY
3. Spiderfoot
https://t.co/2OlEgjPtID
4. Sn1per
https://t.co/Gv57L2IYdv
5. Reconftw
https://t.co/hld4twzHL4
6. Osmedeus
https://t.co/mx21lKKUqK

Happy Bug Hunting!!!

DM For Advance Burp Suite Training
#100xSecurity #infosec #BugBounty #Recon

[Harshleen @0xharshleen]

📍OSINT Tools for the Dark Web
Dark Web Search Engine Tools

☑ Katana - https://t.co/PKw7pcDFrW

☑ OnionSearch - https://t.co/WfnXcDEY65

☑ Darkdump - https://t.co/EvxnIKdHvU

☑ Ahmia Search Engine - https://t.co/PSIczx0UsC, https://t.co/9YrbUzoauS

☑ Darkus - https://t.co/6VdJY2ayvM

☑ Tools to get onion links
Hunchly - https://t.co/4832KPoM95

☑ Tor66 - https://t.co/nfXM6SFzeF

☑ Darkweblink - https://t.co/VkWDW7ZX6P, https://t.co/Pjft6WbTUA

☑ Tools to scan onion links
Onionscan - https://t.co/wB9PsBXigM

☑ Onioff - https://t.co/qf0WIl0SUp

☑ Onion-nmap - https://t.co/NVebsbfhJ7

☑ Tools to crawl data from the Dark Web
TorBot - https://t.co/6UuxU4lGJc

☑ TorCrawl - https://t.co/XVlyHcpnyJ

☑ VigilantOnion - https://t.co/3ZfTiHRXne

☑ OnionIngestor - https://t.co/sZE0jXedFt

☑ Darc - https://t.co/eiaBkwicdK

☑ Midnight Sea - https://t.co/koBAnRxUXk

☑ Prying Deep - https://t.co/aAFEzTNMb0

☑ Miscellaneous
DeepDarkCTI - https://t.co/bjGWVj8893

Reference- https://t.co/gpPyjrYhAc

[Maniesh.Neupane @pwn4arn]

403 bypass methodology

[Karan Ponda @KaranPonda]

Dear @narendramodi, many students, including myself, registered for visa appointments at the #mumbai_consulate from 4th july onwards but remain on the #waiting_list. please consider opening more slots promptly to ensure students meet their #enrollment_deadlines. thank you!!

[Karan Ponda @KaranPonda]

@AmbAckermann @TheHockeyIndia congrats to both the team for their best efforts 🎉🎉

[Karan Ponda @KaranPonda]

Dear @AmbAckermann, many students, including myself, registered for visa appointments at the #mumbai_consulate from 4th july onwards but remain on the #waiting_list. please consider opening more slots promptly to ensure students meet their #enrollment_deadlines. thank you!!

[VMRay @vmray]

🚨 #Alert: #Malware goes completely undetected for weeks by hiding malicious p-code in MS Access' uncommon ACCDE format

🔗https://t.co/jjTK2Qq3lm

🔎 #Microsoft Access allows users to export their databases to a "protected" format (ACCDE), promising to keep macros hidden and unmodifiable. This sample abuses that feature to hide its malicious backdoor: a compiled VBA macro designed to drop and execute a malicious PE file stored in the database.

🧵 (1/3)

[0xor0ne @0xor0ne]

Introduction to Chromium’s V8 Heap Sandbox escape

https://t.co/5dXuRtiPtO

#chrome

[Nicolas Krassas @Dinosn]

CVE-2024-38100: Leaked Wallpaper Exploit Exposes Windows Users to Privilege Escalation Attacks https://t.co/z5WlVcwljX