Nathan Griffiths

Bugbounty hunter

[JS0N Haddix @Jhaddix]

A thread🧵

💸Secrets of automation-kings in bug bounty💸

Finding 1day (or 1month) web exploits that haven't made their into scanners yet can make you big money.

Read more to understand where and how to get an edge in this area!

🚨Retweet, follow, & like for more! 🚨

1/x

[PentesterLab @PentesterLab]

Time for another giveaway!

We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!!

And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

[Nathan Griffiths @NatTheBugToo]

I've just bought #javascriptforhackers by @garethheyes

[JS0N Haddix @Jhaddix]

👮 Hacking into several Prisons 👮

Here's how I did it (legally), and what I learned along the way!

A thread for security testers and cyber security pros

🧵👇

[JS0N Haddix @Jhaddix]

🔍 My ultimate workflow for simple and easy JavaScript Analysis

⚡️ Comprehensive JavaScript analysis in offensive security, appsec testing, and red teaming wins.

Often you can find juicy hidden endpoints, parameters, & domains buried JS!

A thread 🧵 1/x
👇

[Nathan Griffiths @NatTheBugToo]

@MarkWix2 @yip404 https://t.co/HwxJR93nvR

[Abhishek Meena 🏵️ @aacle_]

Some of the major vulnerabilities and related POC’s:

➡SQLi
➡XSS
➡SSRF
➡XXE
➡Path Traversal
➡Open Redirection
➡Account Takeover
➡Remote code execution
➡IDOR
➡CSRF

#hacking #bugbounty #bugbountytips

Are Found Below🧵(1/n)👇

[Nathan Griffiths @NatTheBugToo]

@xnl_h4ck3r Interested to hear how you feel tomorrow.

[Nathan Griffiths @NatTheBugToo]

@shodanhq Thanks I'll give it a try.

[Nathan Griffiths @NatTheBugToo]

@shodanhq I have a Membership but every Search I do comes back as "nothing found"?

[Nathan Griffiths @NatTheBugToo]

@shodanhq

[Tom Chivers @TomChivers]

Something that sounds like a super-spicy hot take but actually I don't think it is: recycling plastic is at the moment not a very good idea, and putting it in landfill guarantees it won't end up in the South China Sea https://t.co/Yo0ltfeKBn

[Bounty Security @BountySecurity]

🎉New Website published🎉

🎁To celebrate the launch of the new website, we are giving away three annual Burp Bounty Pro licenses!

👉To participate you have to retweet and like. The winners will be announced on September 30.

👉https://t.co/DXxo2SKrY7

[Vala Afshar @ValaAfshar]

I love this story because it reminds me that one person can make a difference.

In 1979, Jadav Payeng began planting a tree every day for 37 years — results are stunning

[Nathan Griffiths @NatTheBugToo]

@hakluke He's probably going phishing.

[Nathan Griffiths @NatTheBugToo]

@rez0__ Thanks

[Nathan Griffiths @NatTheBugToo]

#bugbountytip

[dogwhohacks @dogwhohacks]

I’ll always put some effort into context-specific wordlists. I spent a good few hours putting some together during the last @Bugcrowd bug bash and ended up scoring a P1 because of them.

Some examples 👉🏻🧵

[Emad Shanab - أبو عبد الله @Alra3ees]

Use proxychains and tor (change ip ~10 seconds).

https://t.co/MTQl5pKDfb

[Abdullah Nawaf (HackerX007)🇯🇴 @XHackerx007]

I earned $3,000 for my submission on @bugcrowd https://t.co/04NTyt23bk #ItTakesACrowd
#TIP
GOOD Luck ;)
#bugbounty #bugcrowd #bugbountytips