SANTOSH KUMAR SHA

Its good to break any thing so that u can learn. Because breaking also need some kind of skilled

[SANTOSH KUMAR SHA @killmongar1996]

🔍 New blog: Found multiple SSRF vulnerabilities on a bank’s system, exposing AWS metadata! Learn how I uncovered these flaws and the security risks involved. Check it out!👇

🔗 [https://t.co/xWXhkpxLck]

#CyberSecurity #AWS #SSRF #EthicalHacking #CloudSecurity

[SANTOSH KUMAR SHA @killmongar1996]

🔒 Strengthening S3 Bucket Security with SCP Policies 🔒
Just published a new blog where I dive deep into hardening the security of Amazon S3 buckets using Service Control Policies (SCPs). 🛡️

Check it out here: https://t.co/hypuj2UDIS

#AWSSecurity #CloudSecurity #S3 #AWS

[SANTOSH KUMAR SHA @killmongar1996]

🚨 Exciting News: New Blog Post Alert! 🚨

I’m thrilled to announce the release of my latest article, “Finding SSRF by Full Automation”! 🌐🔍

🔗 Dive in here: https://t.co/IBOlo7xsvn

#SSRF #Automation #InfoSec #Security #BugBounty #PenTesting #EthicalHacking #Vulnerability

[SANTOSH KUMAR SHA @killmongar1996]

🚀 New Blog: Automating AWS Console Login Monitoring – A Comprehensive Guide 🚀

Monitoring AWS Console logins is crucial for maintaining security and detecting unauthorized access.

🔗 Read the full guide here: https://t.co/t0pglgnvtw

#AWS #CloudSecurity #Automation #InfoSec

[SANTOSH KUMAR SHA @killmongar1996]

🚨 Unveiling a Critical Vulnerability: Exposing AWS Credentials in a Penetration Test 🚨

In my latest post, I reveal how I uncovered AWS credentials during a pentest.

https://t.co/X8ZRPrE90l

#AWS #Pentesting #BugBounty #InfoSec #Vulnerability #EthicalHacking

[Bounty Security @BountySecurity]

🎉New Website published🎉

🎁To celebrate the launch of the new website, we are giving away three annual Burp Bounty Pro licenses!

👉To participate you have to retweet and like. The winners will be announced on September 30.

👉https://t.co/DXxo2SKrY7

[Aditya @ADITYASHENDE17]

Chaining an Blind SSRF bug to Get an RCE by @killmongar1996 https://t.co/wjnghQnJYE

[InfoSec Community @InfoSecComm]

Featuring articles by @Lotus_619, @ajpc500, @s0md3v, @killmongar1996.

Trending threads by @drunkrhin0, @cyberboyIndia, @AseemShrey and @sec_r0.

Videos by @HalbornSecurity, @_JohnHammond and @c3rb3ru5d3d53c

GitHub repositories & Tools by @hakluke and @NCCGroupInfosec

[SANTOSH KUMAR SHA @killmongar1996]

@Jinjiao070 @SaraBadran18 yes kind of and in order to finder another hidden vulnerable parameter

[SANTOSH KUMAR SHA @killmongar1996]

I just published Out-Of-Bond Remote code Execution(RCE) on De Nederlandsche Bank N.V. with burp-suite collaborator https://t.co/DvSjW5sRWl

[SANTOSH KUMAR SHA @killmongar1996]

Finally I am releasing my Time base SQL injection tool. Please try once and leave feedback for it so that I can add new features.
https://t.co/duDmBJFXD7

#bugbountytips #bugcrowd #hackerone #automationtesting #bughunting #bugbounty #pentesting #sqlinjection #ethicalhacking

[SANTOSH KUMAR SHA @killmongar1996]

Hey @Bugcrowd
cc: @codingo_

I have reported 2 issues on Bugcrowd where I have clearly shown the impact and everything thing but traiger marked it marked as Not applicable.

Now when I am trying to reproduce it is fixed. Can anyone help me out here?

[SANTOSH KUMAR SHA @killmongar1996]

https://t.co/5y2fOkAAYW

[SANTOSH KUMAR SHA @killmongar1996]

Ending 2021 with my Last Writeup of 2021:

I just published Exposing Millions of Investor and Startup Register details and PII INFO in STARTUPINDIA (Govt of… https://t.co/E89dVkRMz7
#bugbountytips #bugcrowd #hackerone #pentester #synack #bughunting #govtofindia #startupindia

[SANTOSH KUMAR SHA @killmongar1996]

I just published How I got access Maxlifeinsurance insurance company AWS metadata access by SSRF https://t.co/sS54KwV3h5

[SANTOSH KUMAR SHA @killmongar1996]

Ending 2021 with my Last Writeup of 2021:

I just published Exposing Millions of Investor and Startup Register details and PII INFO in STARTUPINDIA (Govt of… https://t.co/E89dVkRMz7
#bugbountytips #bugcrowd #hackerone #pentester #synack #bughunting #govtofindia #startupindia

[SANTOSH KUMAR SHA @killmongar1996]

@intigriti 25

[SANTOSH KUMAR SHA @killmongar1996]

@0xNaeem it may contain endpoint path or word list of parameter depending on what I am looking for

[SANTOSH KUMAR SHA @killmongar1996]

I just published Exploiting S3 bucket with path folder to Access PII info of A BANK https://t.co/jVFIizm2yQ

[SANTOSH KUMAR SHA @killmongar1996]

But good part is that They Fixed all the issue which i have reported. its already been 2 years old finding of mine.