Isn’t it insane how we can spin up full on web pages in a day while just some years ago this took ages and a lot of work, what a time to be alive.
https://t.co/2EdObb0REC
The Pika OSINT Toolbox
I already wrote about it a few months ago, but since then a lot of new stuff has been added to the list, and it now has not only a repository but also a website https://t.co/ciVb0jqjha
#osint#socmint#geoint
Use NextJS? Recon ✨
A quick way to find "all" paths for Next.js websites:
DevTools->Console
console.log(__BUILD_MANIFEST.sortedPages)
javascript:console.log(__BUILD_MANIFEST.sortedPages.join('\n'));
Cred = https://t.co/4hiJXDNlmU
#infosec#cybersec#bugbountytips
@Cyber78678@0xacb lol from when is this report? I remember there was another SSRF that lead to partial compromise of the shopify core via kubernetes a while ago, was also quite interesting
When it comes to pentesting, at lest for me, it gets really hard to remember all of those juicy commands and tools that you can use for various attacks. I quickly created a nice article about Warp Terminal (free) and how you can utilize it for pentesting.
https://t.co/Deq75rZmvj