Achmadinata 🇵🇸

SEA Server

[Nitin Gavhane @NitinGavhane_]

100 CYBERSECURITY X ACCOUNTS WORTH FOLLOWING

[01] BUG BOUNTY & WEB SECURITY

@NahamSec → Bug bounty
@hakluke → Bug bounty tools
@EdOverflow → Security research
@filedescriptor → Web security
@orange_8361 → Exploit research
@zseano → Bug bounty
@Jhaddix → Recon
@pentest_swissky → Pentesting
@InsiderPhD → Security education
@PortSwigger → Web security

[02] RED TEAM & OFFENSIVE SECURITY

@harmj0y → Active Directory
@_wald0 → BloodHound
@enigma0x3 → Windows security
@gentilkiwi → Mimikatz
@_RastaMouse → Red teaming
@SpecterOps → AD security
@TrustedSec → Offensive security
@BishopFox → Red team research
@Horizon3Attack → Exploit research
@Synacktiv → Offensive research

[03] DFIR & BLUE TEAM

@TheDFIRReport → Intrusion reports
@EricRZimmerman → DFIR tools
@13CubedDFIR → DFIR education
@HuntressLabs → Threat research
@Velocidex → Digital forensics
@cyb3rward0g → Detection engineering
@SigmaHQ → Detection rules
@SBousseaden → Detection engineering
@mattifestation → PowerShell security
@sans_isc → Security monitoring

[04] THREAT INTELLIGENCE

@Unit42_Intel → Threat intelligence
@Mandiant → Threat research
@RecordedFuture → Threat intelligence
@TheCyberWire → Cyber news
@TeamCymru → Threat intelligence
@GreyNoiseIO → Internet intelligence
@TalosSecurity → Threat research
@Malwarebytes → Threat research
@ESETresearch → Malware research
@threatinsight → Threat research

[05] MALWARE & VULNERABILITY RESEARCH

@vxunderground → Malware research
@malwrhunterteam → Malware hunting
@hasherezade → Malware analysis
@taviso → Vulnerability research
@ProjectZero → Zero-day research
@GossiTheDog → Vulnerability analysis
@Mikko → Malware research
@_JohnHammond → Malware & CTFs
@LiveOverflow → Technical hacking
@TheRealHoanSolo → Security research

#CyberSecurity #BugBounty #EthicalHacking #InfoSec
#Pentesting #DFIR #ThreatIntel #OSINT #RedTeam

[Pirat_Nation 🔴 @Pirat_Nation]

GitHub is updating its policy and will start using your code and data to train AI using Copilot.

From April 24, your Copilot chats will be used by default to train their AI models. This includes your prompts, the code it suggests, and related context.

Deactivate it ASAP.

[Achmadinata 🇵🇸 @madinata]

I didn’t choose cybersec life. Cybersec life choose me.

[Achmadinata 🇵🇸 @madinata]

In my opinion, the grandmaster time to create a plan is Fajr. Seriously, I’m not kidding

[Achmadinata 🇵🇸 @madinata]

@Raman_Mohurle cool, thank you for sharing

[Tom Dörr @tom_doerr]

List of forensics analysis tools

https://t.co/C0tF78Bl42

[payloadartist @payloadartist]

This is an old writeup by @ozgur_bbh from four years back, a very successful #bugbounty hunter.

I feel it still holds relevance if you're planning to start doing it as a side gig, even in 2025. Link 👇

[Intigriti @intigriti]

Want to find more vulnerabilities using BurpSuite match & replace rules? 🤑

Open this thread! 🧵 👇

[Alex Moshkov @amoshkov]

Apply to attend #PHTalks in Jakarta, Indonesia 🇮🇩

🗓 July 23 — free in-person event
🔗 https://t.co/35piUWzBRV

CFP open until July 4.
Attendee registration open until July 11.

I’m reaching out to offensive and defensive security people — red/blue teams, SOC, DFIR, vuln, and bug bounty researchers across Indonesia and the region.

Know people? Let me know.

[ghostlulz @ghostlulz1337]

Web Cache Deception https://t.co/g4rzIrv6St

Dependency Confusion
https://t.co/eplMZfSo95

Exploiting PDF Generators
https://t.co/OSkgB5fatg

Pre Account Takeover
https://t.co/q8ZHZMVJyx

API Hacking - Cracking JWT Tokens
https://t.co/jnlggOLHzK

#bugbountytips #infosec #redteam #pentesting #hackerone #bugcrowd #bugbounty #bugbountytip

[Harshleen @0xharshleen]

Bug Bounty Automation👾
@0x0SojalSec

- https://t.co/juwzpbmbH4

- https://t.co/ozgcYcH0iQ

- https://t.co/8pu0ysgf5q

- https://t.co/TG9PUiZSO2

- https://t.co/kwIj0jwaXc

- https://t.co/6Pj6XQD90v

- https://t.co/hgGzVaR5c2

- https://t.co/OVLXvrffY9

- https://t.co/4dRC56pW65

[Roshan Nathani @roshanxcvi]

Click here for better reading.
https://t.co/BVEisvbhiU

[• @Al__Quraan]

Calm your heart

[Godfather Orwa 🇯🇴 @GodfatherOrwa]

Hello everyone ♥
a little bit write-up of #bugbountytip #bugbountytips I am going to write here .....

Title:
getting unauthorized access on 3rd party's/workspaces & and building your checklist for quickly locating bugs there via massive recon

we know that its helpful to look for google
groups/docs/etc..

Slack as well just like when the amazing @h4x0r_dz shared days ago ..

Use google dork "site:https://t.co/ravW2tHHcP"

so I was not in a good mode the last months to doing Google Dorks, so what I did was build a checklist ready for me & very huge one

for EX:

https://t.co/wPxAHXvC18
https://t.co/hs3VHvhT92
https://t.co/ravW2tHHcP

and here is just an example you can add more similar workspaces for your checklist

thin I extracted all internet endpoints and as example here join[.]slack[.]com

https://t.co/OlHQSEQ6Qz

https://t.co/e8jB8H6nMS

https://t.co/w5h4VkESyQ

you can use the ready tools to do it such as waymore

important note: you have to keep your checklist updated every week

and from here I just keep looking for the company name or domain name to see if there's anything connected

and mostly the company name or domain name in the URL it self EX: tesla

https://t.co/QesyI4MHu2

Ex For Bugs found:

1 unauthorized access to the workspaces
(PII | Information disclose)
2 account takeover as Ex: valid signup employee link
3 account takeover as Ex: valid reset password employee link

now about Slack, as an example if you found an invitation link for tesla
Tesla https://t.co/QesyI4MHu2 and that link was not valid, don't stop here
it will redirect for Ex:
tesla-internal[.]slack[.]com

here back and start looking manually for endpoints of this subdomain as well EX:

https://t.co/w2dhvfdBhL

now there are a lot of 3rd party's/workspaces I just shared here
slack & Google Docs/groups

What I wrote is a bit long and annoying to some, so I apologize. I hope, as usual, that this will be useful to all who follow me here.

#Bugounty
don't forget to retweet if you like it ♥♥♥

[Justin Gardner @Rhynorater]

All my current bug bounty knowledge is gone.

Here's how I get it back and make $100k in the first year:

First, I've got to learn the basics. For this, I will make sure I understand at a high level how the components I'm working with function.

I'll need to understand...

[Achmadinata 🇵🇸 @madinata]

I just completed @Pentesterlab's Blue Badge!!!

[Achmadinata 🇵🇸 @madinata]

@mardigu024 Setan pergi ke pasar dan ibu membeli pisang

[Aditya @ADITYASHENDE17]

If you try and fail, congratulations,
Most people don't even try.

[Achmadinata 🇵🇸 @madinata]

@Fozisimi143 @inspectiv How do you got admin access level? Is there greybox?