Murthycode

Information Security Consultant. I secure Mobile & Web applications,Blogger and Visionary Entrepreneur. #0day #vulns #Infosec #OWASP #VAPT #AppSec #OSCP #Secops

[Clandestine @akaclandestine]

FREE offesive security courses with certifications

AV/EDR Evasion Practical Techniques
https://t.co/YetcY4IU6Q

Windows API for Red Team Introduction
https://t.co/oO0kIzTXRh

Offensive Development Introduction for Windows v1
https://t.co/F853zhKpgi

[MarcoFigueroa @MarcoFigueroa]

I discovered a code execution prompt injection in ChatGPT yesterday. I was trying to execute the https://t.co/saV0xe7jXL that was a reverse shell. Kudos to the @OpenAI security team for creating a self-healing security system!

After experimenting for a few hours, the system now effectively blocks the execution of `pd.compat.os.system("system commands")`.

Impressive work!

#bugbounty #hacking #cybersecurity #infosec #openai #llm

[Tuhin Bose @tuhin1729_]

Testing Forgot Password Functionality:

1. Host Header Injection - Password Reset Poisoning

(1/n)

[Hacking Articles @hackinarticles]

Active Directory Pentest Tools

#infosec #cybersecurity #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #linux #cybersecurityawareness #bugbounty #bugbountytips

[TCM Security @TCMSecurity]

This week, we updated the ENTIRE section of Active Directory in our PEH course, so we're releasing the original AD content on our YouTube Channel for FREE. You can watch it here: https://t.co/GklPku9lrD

PEH Course with updated AD section: https://t.co/gDrcZJ8o98

[elSec @adrielsec]

CVE-2023-24488 Citrix XSS

subfinder -d https://t.co/D03OVpG23w -silent | nuclei -t http/cves/2023/CVE-2023-24488.yaml

Nuclei Template https://t.co/9kqTumdBOi

Shodan
ssl:https://t.co/D03OVpG23w title:"Citrix gateway"

Dork
intitle:"Citrix Gateway" -site:https://t.co/XKym4VkaNn

[Murthycode @MurthyCode]

Spammers are targeting fake job offers, be aware before you share any information @WiproCareers @Wipro

[Professor the Hunter @bughuntar]

403 Bypass techniques

#BugBounty #403bypass #bugbountytip

[elSec @adrielsec]

Folks, NucleiFuzzer is an automation tool that combines ParamSpider and Nuclei to bugbounty. It uses ParamSpider to identify potential entry points and Nuclei's templates to scan for vulnerabilities.

https://t.co/upJutLF4zz

#BugBounty #bugbountytip #bugbountytips #nuclei

[SunSec @1nf0s3cpt]

🔥Web3 Security Onboarding

Since the last time, 70+ DMs and many people who join the community often ask the same question:
"How can I learn web3 security?"

So, I have created an onboarding channel and added a lot of resources for them.
🤟https://t.co/RdCjzfw3E4

[Devansh Bordia @devansh_bordia]

12. Arithmetic Overflow/Underflow
13. Flash Loan Attack
14. Unchecked Return Value
15. Oracle Manipulation
16. DAO/Governance Attacks
17. Floating Pragma
18. Unexpected Ether
19. Unprotected Ether
20. Fakestable Coins
21. Arbitrage-Related Attacks
22. External Contract Reference

[Devansh Bordia @devansh_bordia]

1. Reentrancy
2. Access Control
3. Default Function Visibility
4. Front Running Attack
5. Signature Replay
6. Signature Malleability
7. Timestamp Manipulation
8. Phishing via Tx.Origin
9. Storage Collision
10. Unprotected Self-Destruct Function
11. Untrusted Delegate Call

[cryptostaker | peanuts @cryptostaker22]

Spent the past few days organizing my github portfolio, taking inspiration from excellent auditors like @pashov , @adrianromero . Here's my journey in smart contract auditing as a person without any tech background. 1/5

https://t.co/uZ0X27SrLF

[Dhiyaneshwaran @DhiyaneshDK]

@cyph3r_asr Hi @cyph3r_asr this blog might help to get start with hands on your AWS Security Journey:)

https://t.co/0vKaXemLnN

[7h3h4ckv157 @7h3h4ckv157]

Something I found interesting in online.
Here are 10 use cases #ChatGPT 📍

1. Connect your ChatGPT with your Whatsapp: https://t.co/Juu9BfnnPg

2. ChatGPT Writer : It use ChatGPT to generate emails or replies based on your prompt!: https://t.co/O7YDpH4S5F

#infosec #Hacking

[Abhinav Mishra @0ctac0der]

Interested in learning #iOS #penetrationtesting ? Here is how you can start:

Requirements:
- Mac (Intel/M1/M2) Or Mobexler virtual machine (Apple proprietary tools not available)
- Jailbroken iPhone Or Corellium virtual iOS device

[Anugrah SR 📌| #HackLearnDaily @cyph3r_asr]

Top 25 Browser Extensions for Pentesters and Bugbounty Hunters (2022) https://t.co/FgN7fifaem

#BugBounty #infosec #cybersecurity

[Fardeen A. 🇮🇳 🇵🇸 @insecrez]

Cloud security Penetration Testing practice labs :-

- https://t.co/gUOkt5A63O
- https://t.co/VI2AuUVy5G
- https://t.co/FFjg4noSLZ
- https://t.co/ff6yCDshG7
- https://t.co/u5UQZpJqV3
- https://t.co/h0t7B5fCzG

#BugBounty #bugbountytips #CyberSecurity #CyberSec #Tweets #Security

[whitecyberduck @whitecyberduck]

Offensive Security has banned ChatGPT from the OSCP exam

[Rapid @Rapid_API]

API security best practices 👇

{ 1 / 6 }