Kunal Pandey

Love to poke at web, android and desktop Apps. || Synack Red Teamer @synack

[Kunal Pandey @kunalp94]

@zseano Congratulations :)

[Kunal Pandey @kunalp94]

@zseano Sorry for your loss.

[Kunal Pandey @kunalp94]

@Dinosn @synack Congratulations Nicolas. Well deserved. :)

[Kunal Pandey @kunalp94]

@Akshanshjaiswl Thanks bro ❤️

[Kunal Pandey @kunalp94]

@sudhanshur705 Yup

[Kunal Pandey @kunalp94]

@bishal0x01 Thankyou :)

[Kunal Pandey @kunalp94]

🎉 Congratulations 🎉, the winners are

@KavanSoni_07
@manish1221singh
@pratikcyb
@being__aman
@scarcemrk
@darkrider758
@iammeera_
@pandyaMayur11
@Mitin_sharma_22
@chalcidfly

Keep your DM open. I will be contacting you directly. Enjoy the conference.

[Kunal Pandey @kunalp94]

🎉 Giveaway Alert! 🎉

Hello everyone, I’m giving away 10 students passes for @bsidesahmedabad.

Just comment below why you wanna attend the event and like the tweet.

Good luck.

[Kunal Pandey @kunalp94]

🎉 Giveaway Alert! 🎉

Hello everyone, I’m giving away 10 students passes for @bsidesahmedabad.

Just comment below why you wanna attend the event and like the tweet.

Good luck.

[Kunal Pandey @kunalp94]

@0xMstar @krishnsec @zseano @Tur24Tur You can try encoded html entity in between

jav%26Tab%3bscript://google.com/%0dalert(1)

(	 —> %26Tab%3b)
Only if the above value is reflecting on href link.

or try %0c in between the javascript protocol.

[Kunal Pandey @kunalp94]

@ITSecurityguard @smiegles @lucio_89 Congratulations :)

[Kunal Pandey @kunalp94]

@carbonmanx @zseano The element "style" will trigger the above event handler as the content-visibility has been as auto. Using double quotes and adding "style element will trigger above XSS.

[Kunal Pandey @kunalp94]

@Cyber78678 @Burp_Suite Bro🤣🤣

[Kunal Pandey @kunalp94]

@_d4ly_ @SynackRedTeam Wishing you more success. :)

[Kunal Pandey @kunalp94]

Happy New Year Everyone! May each of you achieve your personal goals and enjoy both mental and physical well-being in the coming year.

[Kunal Pandey @kunalp94]

@sudhanshur705 Ohhh...

[Kunal Pandey @kunalp94]

@0xConda Congratulations 👏👏

[Kunal Pandey @kunalp94]

@luketucker Looking good 😀

[Kunal Pandey @kunalp94]

@Rhynorater Nice IDN homograph attack on the redirection parameter by @Yassineaboukir :)

https://t.co/ngZnK3LEQl

[Kunal Pandey @kunalp94]

Another Sharepoint Rest API documentation by Microsoft:

https://t.co/VIw228IHLx

[Kunal Pandey @kunalp94]

If you see a site with " _layout/*" endpoints or in source code, then it runs on Microsoft SharePoint.

Here is the API endpoint list that you can still test:
https://t.co/yyToGbDmaN

It's a complete list but you can still check out Microsoft sharepoint documentation.