anggara kenji

[anggara kenji @kenjianggara]

I'm claiming my AI agent "Clawy-ID" on @moltbook 🦞

Verification: deep-7P5J

[anggara kenji @kenjianggara]

@AkusukaK34858 @PUBGMOBILE Betul saya juga gabisa login

[Samsung Indonesia @samsungID]

Something BIG is coming to your screen! 👀

Tebak misi apa yang akan dijalani #TeamGalaxy di Bandung?

RT, like, dan reply sebanyak-banyaknya dengan hashtag #GuessS25Quest #ItsGalaxyS25 #GalaxyS25 Series!

Menangkan e-wallet Rp500K untuk 2 orang & 50 tiket Finale EventSomething BIG is coming to your screen! 👀

Tebak misi apa yang akan dijalani #TeamGalaxy di Bandung?

RT, like, dan reply sebanyak-banyaknya dengan hashtag #GuessS25Quest #ItsGalaxyS25 #GalaxyS25 Series!

Menangkan e-wallet Rp500K untuk 2 orang & 50 tiket Finale Event!

[anggara kenji @kenjianggara]

@samsungID D. Semua di atas👀 #GuessS25Quest #ItsGalaxyS25 #GalaxyS25 Series

[Vulncure @vulncure]

🦗CVE : CVE-2023-38146

CVE Series : #1
A High-Risk Windows Themes Vulnerability

• Type: Remote Code Execution (RCE) ⚠️
• Affected Software: Windows 11
• CVSS Score: 8.8 (High Severity)

Dive into the details 🧵:👇

[Het Mehta @hetmehtaa]

2FA Bypass techniques:🔥

List of 15 Common 2FA Bypasses For Bug Bounty / Penetration Testing.

1. Response Manipulation
In response if "success":false
Change it to "success":true

2. Status Code Manipulation
If Status Code is 4xx
Try to change it to 200 OK and see if it bypasses restrictions

3. 2FA Code Leakage in Response
Check the response of the 2FA Code Triggering Request to see if the code is leaked.

4.JS File Analysis
Rare but some JS Files may contain info about the 2FA Code, worth giving a shot

5.2FA Code Reusability
Same code can be reused

6.Lack of Brute-Force Protection
Possible to brute-force any length 2FA Code

7.Missing 2FA Code Integrity Validation
Code for any user account can be used to bypass the 2FA

8.CSRF on 2FA Disabling
No CSRF Protection on disabling 2FA, also there is no auth confirmation

9. Password Reset Disable 2FA
2FA gets disabled on password change/email change

10.Backup Code Abuse
Bypassing 2FA by abusing the Backup code feature
Use the above mentioned techniques to bypass Backup Code to remove/reset 2FA reset restrictions

11.Clickjacking on 2FA Disabling Page
I-framing the 2FA Disabling page and social engineering victim to disable the 2FA

12. Iframing the 2FA Disabling page and social engineering victim to disable the 2FA
If the session is already hijacked and there is a session timeout vulnerability

13.Bypass 2FA with null or 000000
Enter the code 000000 or null to bypass 2FA protection.

Steps:-
1. Enter “null” in 2FA code
2. Enter 000000 in 2FA code
3. Send empty code - Someone found this in grammarly
4. Open a new tab in the same browser and check if other API endpoints are accessible without entering 2FA

14. Google Authenticator Bypass
Steps:-
1) Set-up Google Authenticator for 2FA
2) Now, 2FA is enabled
3) Go on the password reset page and change your password
4) If your website redirects you to your dashboard then 2FA (Google Authenticator) is bypassed

15. Bypassing OTP in registration forms by repeating the form submission multiple times using repeater

Steps :-
1) Create an account with a non-existing phone number
2) Intercept the Request in Burp Suite
3) Send the request to the repeater and forward
4) Go to the Repeater tab and change the non-existent phone number to your phone number
5) If you got an OTP to your phone, try using that OTP to register that non-existent number

Comment More Bypasses, If You Know Any.

*Source: Internet*
Credit & Thanks To Whoever who has written this.

#Infosec #2fa #Hacking #CyberSecurity #redteam #bugbountytip

[Intigriti @intigriti]

4 tools to find hidden query parameters! 🛠️

A thread! 👇

[Coffin @lostsec_]

BUG HUNTING METHODOLOGY BY COFFIN ;)

[Brut 🇮🇳 @wtf_yodhha]

📢a XSS payload, Cuneiform-alphabet based ! 𒀀='',𒉺=!𒀀+𒀀,𒀃=!𒉺+𒀀,𒇺=𒀀+{},𒌐=𒉺[𒀀++], 𒀟=𒉺[𒈫=𒀀],𒀆=++𒈫+𒀀,𒁹=𒇺[𒈫+𒀆],𒉺[𒁹+=𒇺[𒀀] +(𒉺.𒀃+𒇺)[𒀀]+𒀃[𒀆]+𒌐+𒀟+𒉺[𒈫]+𒁹+𒌐+𒇺[𒀀] +𒀟][𒁹](𒀃[𒀀]+𒀃[𒈫]+𒉺[𒀆]+𒀟+𒌐+"(𒀀)")()

#bugbounty #bugbountytips

[The SecOps Group @TheSecOpsGroup]

🥇 FREE Certified AppSec Practitioner (CAP) exam! 🥇
** No Discount Code Needed**

To get the offer:
1. Retweet this post.
2. Fill this Google form -
📄 https://t.co/WVFmLaO3CZ
3. We will email you the exam details. 💯

🔗 Read more about our CAP exam -
https://t.co/iW47bEhG0s

#pentesting #CAPExam #Applicationsecurity #informationsecurity

[Security Trybe @SecurityTrybe]

Linux Networking Tools

[Robin Delta @heyrobinai]

Turn AI into your ultimate money generator.

But most people don't know where to start.

Start creating and selling dream websites in minutes with AI. Here's how:

[Bookmark or miss the boat]

[Security Trybe @SecurityTrybe]

7 Layers of Cybersecurity

[Md Ismail Šojal 🕷️ @0x0SojalSec]

So many beginners ask what to do after finding Subdomains ⚔️

#infosec #cybersec #bugbountytips

[Hacking Articles @hackinarticles]

Wireshark Filter Cheat Sheet

🔴⚫️Full HD Image: https://t.co/gS49lvi2uM

#infosec #cybersecurity #cybersecuritytips #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #linux #cybersecurityawareness #bugbounty #bugbountytips

[Anton @therceman]

Bug Bounty Tip

If you control PDF generation and HTML tags are processed on the output, test for SSRF using <iframe>

Cheers!

[Anton @therceman]

Bug Bounty Tip

XSS Injection in HTML Tags & Attributes
Tags: <img>, <a>

Cheers!

[Anshu 🕸️ @thebitdoodler]

Diving into #CyberSecurity or just a tech nerd? 🤓 Check out this quick guide on load balancing!

Visit 🔗 https://t.co/jCpnCazYPj for more !!
Loved it? Repost to save a fellow techie's day! And remember, sharing online is less contagious than the flu. 😂
#TechGuide #LoadBalancer #CDN #InfoSec

[Anton @therceman]

Bug Bounty Tip

Log4j Vulnerability Cheat Sheet

🔹 How It Works
🔹 Test Environments
🔹 Challenges & Labs (Rooms)
🔹 Where Payloads can be Injected
🔹 What Information can be Extracted
🔹 How To Identify (Services & Scanners)

Cheers!

[anggara kenji @kenjianggara]

@Nana_Owada728 @oshimaryoka1021 @_aeri_yokoshima なーにゃ お誕生日おめでとう🎂