Mayank saini for #follow

CTF, Bug bounty hunter, swing stock trader, Part time Yogi
🧑‍🎓 B.E., PESIT, Bangalore
#stockmarket #swingTradig
#ctf #cybersecuritytraining #BugBountyHunting

[0xor0ne @0xor0ne]

Building autonomous vulnerability hunting lab with Claude Code + MCP

https://t.co/MT4LbPOVGU

#infosec #llm

[Densel @luckyhacker43]

"How I made $31,500 by submitting a bug to Facebook" by Bipin Jitiya 🤯🔥

👨‍💻 Bipin Jitiya (x/win3zz)
🔗 https://t.co/L1VYhvAUw2

🔗 Join team 👉 https://t.co/FeMz53HSN0

[Gladiators zone @Gladiatorszonee]

I highly recommend this playlist on human behavior.

It will change the way you understand yourself and the people around you.

[Harman @itsharmanjot]

firewalls can't stop this.

A developer just open sourced a tunnel that smuggles your entire internet through port 53 the port every router on earth is forced to leave open.

It's called MasterDnsVPN. It hides your traffic inside DNS queries, the one type of packet no network can block without breaking itself.

Every firewall on earth has to allow DNS. Schools, airports, hotels, hotel WiFi, entire countries running ISP-level censorship all of them keep port 53 open or nothing on the network resolves. This repo turns that loophole into a full encrypted tunnel.

Here's what makes it different from every other DNS tunnel that came before:

→ Custom ARQ layer gives you TCP-level reliability over UDP DNS, so nothing drops even on garbage networks
→ Sends every packet through up to 12 different resolver paths at the same time, if 11 fail the packet still arrives
→ Auto probes the maximum DNS payload your path can handle, then locks in the fastest MTU possible
→ AES-256-GCM, ChaCha20, AES-128, AES-192 all built in, pick your encryption
→ SOCKS5 proxy on 127.0.0.1:1080 point any browser or app at it and you're through

Killed: $12/mo Mullvad, $10/mo NordVPN, $15/mo Astrill, every commercial DNS tunnel charging monthly fees for the exact same idea.

Pre-built binaries for Windows, Linux AMD64, Linux ARM64, macOS ARM64. No Python install needed. Configure two DNS records, drop in the encryption key, run the executable.

Works in environments where every other VPN protocol is dead on arrival.

MIT License. 100% Opensource.

[GitHub Projects Community @GithubProjects]

Claude-Bughunter is a drop-in skill bundle that transforms Claude Code into a senior bug-hunting researcher and red-team operator with 51 skills and 15 commands.

- 574+ disclosed report patterns across 24 vulnerability classes
- Enterprise platform attack chains for M365, Okta, VMware, and VPN appliances
- 5-phase non-linear hunting workflow with critical-thinking framework
- Automated engagement-folder scaffolding and Burp MCP integration

Explore it here:
https://t.co/HtZMIaBNci

[Vivek | Cybersecurity @VivekIntel]

💰 HackerOne Top Reports — A Goldmine for Bug Bounty Hunters

This repository collects some of the:
🔥 Most Upvoted Reports
💸 Highest Paid Reports
🛡️ Best Real-World Exploits
🎯 Advanced Vulnerability Writeups

Covers major bug classes like:
✅ XSS
✅ SSRF
✅ IDOR
✅ RCE
✅ SQLi
✅ OAuth Bugs
✅ Request Smuggling
✅ Account Takeover
✅ Business Logic Flaws
✅ GraphQL & API Security

Also organized by top programs:
🔹 GitHub
🔹 Shopify
🔹 TikTok
🔹 GitLab
🔹 Coinbase
🔹 Uber
🔹 HackerOne
🔹 Node.js
🔹 U.S. DoD

If you're serious about:
• Bug Bounty
• Web Pentesting
• Recon Methodology
• Real Exploit Chains
• Vulnerability Research

Study real reports. That’s where the actual learning happens.

🔗 https://t.co/mGHftbX6SU

#BugBounty #HackerOne #CyberSecurity #Pentesting #InfoSec #RedTeam #OSINT

[Vivek | Cybersecurity @VivekIntel]

⚔️ Claude-Red = Offensive Security Skills for Claude AI

A massive open-source framework that transforms Claude into a context-aware red team assistant. 🔥

📚 100+ offensive security skill modules
🌐 Web exploitation
🧠 Active Directory attacks
☁️ Cloud attack paths
📡 Wireless exploitation
💥 Exploit dev & fuzzing
🤖 AI security testing

Built for:
🎯 Bug bounty hunters
🛡️ Red teamers
🔬 Security researchers
🎓 CTF players
☁️ Cloud pentesters

Capabilities include:
✅ SQLi / XSS / SSRF / RCE
✅ ADCS / Kerberos / ACL abuse
✅ EDR bypass & shellcode ops
✅ WPA2/WPA3 attacks
✅ OAuth & JWT exploitation
✅ Prompt injection & jailbreak testing

🔗 https://t.co/QraHdkdU0A

#RedTeaming #Hacking #CyberThreat #ThreatIntel #Pentest #OpenSource

[Vivek | Cybersecurity @VivekIntel]

🔥 2026 Practical Bug Bounty Guide

A brutally practical roadmap for modern web hacking, recon, exploitation, and real-world bug bounty methodology.

Inside:
✅ Recon & Asset Discovery
✅ Burp Suite Deep Dive
✅ XSS, SSRF, IDOR, SSTI, SQLi, XXE & More
✅ Business Logic Abuse
✅ GraphQL, WebSockets & OAuth Testing
✅ WAF Bypass Techniques
✅ Vulnerability Chaining
✅ Professional Reporting Workflow

Built from real-world experience — not recycled theory.

🛠 Tools covered:
Burp Suite • ffuf • nuclei • sqlmap • Dalfox • Subfinder • Nmap • XSS Hunter • Interactsh

Perfect for:
• Beginner Bug Hunters
• Web Pentesters
• Red Teamers
• OSINT & Recon Researchers
• Cybersecurity Students

🔗 https://t.co/xO6tHJXiRi

#BugBounty #WebSecurity #CyberSecurity #Pentesting #BurpSuite #OWASP #RedTeam

[obscaries ❘ AppSec @obscaries]

One of those cybersecurity repos that’s worth bookmarking.

Contains:
• OSCP notes
• recon methodologies
• payload collections
• web/API testing refs
• pentest checklists

Good resource for offensive security learners & bug bounty hunters.

Source: https://t.co/nRclRFO1LO

#CyberSecurity #BugBounty #OSCP #Pentesting #InfoSec #EthicalHacking #RedTeam

[Awaken Mind @Awaken_Mind0]

5 Simple techniques to HACK your Brain:

1.

[VIEH Group @viehgroup]

Password Reset Poisoning -> Account Takeover

POC ->

1. Intercepted password reset request
2. Changed Host header to attacker domain
3. Reset link generated with malicious host
4. Victim clicked poisoned reset URL

Learning ->

- Never trust Host headers
- Use fixed domains for reset links

#BugBounty #CyberSecurity #bugbountytips

[Vivek | Cybersecurity @VivekIntel]

📋 Galaxy Bug Bounty Checklist

Curated bug bounty checklist with attack references & testing methodology.

• Covers Account Takeover, OAuth & CSRF bypass
• Includes HTTP Request Smuggling techniques
• OSINT & recon checklists for target mapping
• References attached for deeper exploitation guides
• Useful for pentesters & bug bounty hunters

https://t.co/lHEfMHlQDa

#BugBounty #Pentesting #AppSec #CyberSecurity #RedTeam

[Anastasis Vasileiadis @Anastasis_King]

🚨 Bug Bounty Recon Methodology 🔍 🐞
Link: https://t.co/v0E44xqIGN

[power of books @Powerofbooks3]

5 Books That Will Increase Your Intelligence 📖📚

1. Thinking Fast & Slow

[Mahmoud Omar @nullthrix]

lots of people asked me for my recon methodology

HYG:
https://t.co/KtYEXs0iJk

soon will publish my full WAP methodology...
#BugBounty #hacking #security #hackerone #bugcrowd #integrity #yeswehack

[Man Directive @mandirective]

5 life lessons how you can learn from the game of Chess.

~ Thread ~

1. Think Before You Move

[RoboRocks @malagojr]

18 websites to get remote jobs in 2026

1. dice .co
2. remote .co
3. devsnap .io
4. remotive .io
5. remoteok .io
6. flexjobs .com
7. upwork .com
8. whoishiring .io
9. justremote .co
10. remotefront .io
11. wellfound .com
12. powertofly .com
13. skipthedrive .com
14. authenticjobs .com
15. weworkremotely .com
16. jobspresso .co
17. remotework .io
18. hired .com

Start now!

[Lu3ky13 ⚡️⚡️ @lu3ky13]

Mobile Application Penetration Testing: Full Guide

https://t.co/56ZvFVUBi5

#Mobile
#Application
#Penetration
#bugbounty

[pashov @pashov]

🚨Junior/Advanced secruity researchers - this is for you!!!

A new Training Hub that teaches you web3 vulnerability patterns and thinking as an attacker. Thanks to @ValvesSec, great job👏

URL: https://t.co/0eXoTFWEfv

[Anastasis Vasileiadis @Anastasis_King]

🟥𝗟𝗟𝗠 𝗥𝗲𝗱 𝗧𝗲𝗮𝗺𝗶𝗻𝗴 𝗥𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀

🔗 Red Teaming LLM Applications by DeepLearning :-
https://t.co/vxFaGaQUnJ

🔗Planning red teaming for LLMs by Microsoft :-
https://t.co/pMKTpSVrUZ

🔗Red teaming LLMs by HuggingFace :-
https://t.co/liz7MQBWic

🔗LLM Red Teaming by KLU :-
https://t.co/kje9hPRXph

🔗Red Teaming LLMs Nihad Hassan :-
https://t.co/r9EfNsalfJ

🔗Red-Teaming to make LLMs robust and safer :-
https://t.co/0mBq716Cfm

🔖#infosec #cybersecurity #hacking #pentesting #security