Noob

Hi There 🥱

[Smart Tech Flow @TechFlow99]

Instead of watching Netflix tonight.

Spend a day mastering Claude here: https://t.co/2sFA41V2w1

→ Level 1 - 24 min: The basics.

Claude For Dummies: https://t.co/y0nRzbmsPV…
Claude Setup: https://t.co/cekCLuVt3U

→ Level 2 - 1 hour: Real workflows.

Claude Cowork: https://t.co/smbaRt6Woy
Claude for teams: https://t.co/D3y9Egp8Zg
Claude Design: https://t.co/5pQIgSsRzz
Cowork + Projects: https://t.co/7Crpf8BZfx…
Claude for slides: https://t.co/wy6pLiDCo2
Claude Skills: https://t.co/E71M19YVwM

→ Level 3 - 3.5 hours: The pro moves.

Avoid sycophancy: https://t.co/cVtgg4WRKJ…
Claude Code: https://t.co/Fcw5be3o7O
Claude 101: https://t.co/zhzTbLFn6e
Stop hitting Claude limits: https://t.co/m0FVJXAeUz…
Stop Prompting: https://t.co/nDBZJMSLa4…

→ Level 4 - 8 hours: Expert mode.

Claude Computer: https://t.co/gs5SGWjK6v…
Build with Claude API: https://t.co/9r7yXXNqPI…

Pro tip: Don't binge it. Do one level per sitting.

Actually apply each guide before moving to the next

[John Hammond @_JohnHammond]

BEN SAID I COULD DO A GIVEAWAY TOO 🥳

HackingHub Black Friday deal: https://t.co/Uf3mW11mcR

$39 for lifetime access ♾️
OR
$19 for a month trial ⏰

AND I can match his giveaway--
2️⃣ WINNERS (1 each)
- Full cert bundle
- Lifetime access

To enter: ���️ retweet and reply w/ 🦃

[Ben Sadeghipour @NahamSec]

🚨 I convinced my team to do one last giveaway!

Options: https://t.co/60rsOCKTnO
🏆 Full Access: $199
💻 Lifetime Course: $39 (includes updates)
🎯 1-Month trial (no updates): $19

TWO WINNERS (1 each):
- Full cert bundle
- Lifetime access

Enter: ↪️ RT + Reply with 🎯

[Mobile Hacker @androidmalware2]

Frida Script Runner

Hook Android and iOS apps using default or your custom #Frida scripts conveniently from a browser
https://t.co/jgo3105xfT by @zenalarifin_

[Aryan Bhetwal @yamarajislitaf]

Arjun + Piper + Knoxnl + @KN0X55 = XSS

cc: @xnl_h4ck3r @KN0X55

Found a path for creating address.
Used Arjun for finding parameters
Used Knoxnl + Piper + Knoxss API key
Found Reflected XSS, Escalated to Account Takeover.

[Muqsit 𝕏 @mqst_]

🌏 Browser Exploitation 101: A Series of Blog posts for anyone interested in Chrome Browser Exploitation.

Part 1: https://t.co/2MyvKCeU3k
Part 2: https://t.co/ouhLfrY74O
Part 3: https://t.co/hAsE5UIpDZ

#infosec

[HADESS @Hadess_security]

Fuzzing Cheatsheet
https://t.co/5qJDbveqWT

#fuzzer #afl #radmasa #cheatsheet #pwn #redteam

[Quentin Texier 🦀 @g0h4n_0]

Hi everyone 👋🦀
New repo for RustHound-CE, this version is only compatible with BloodHound-CE: https://t.co/DketejurA8
Many thanks to @f3rn0s for code refactoring!
And many thanks to NeverHack!
I'll be handing over development of the project from today.

[HADESS @Hadess_security]

Virtual Patching Best Practices
https://t.co/uObVEiSsRF

Other Guides and Series👇
https://t.co/jcFcwKB0VU

#virtualpatch #waf #rasp #fortiweb #cloudflare #aws #azure #f5 #devsecops #devops

[Abdillah @abdilahrf]

Android side of security is somehow remains an underexplored area and still have a lot of bugs to explore, in my last 2 weeks of bug-hunting session I have uncovered over 20 bugs across various Android applications from multiple organizations - https://t.co/xY6EyNgJS6

[daniel @hackermondev]

1 Bug, $50K+ in bounties: how Zendesk left a backdoor in hundreds of companies #bugbountytips
https://t.co/8pkfFsXRWR

[mRr3b00t @UK_Daniel_Card]

Can you detect?

Kerberoasting?
Passwords Sprays?
DCSync Attacks?
AD CS Abuse?

[Ben Sadeghipour @NahamSec]

🔍💻 Discovering GitLab misconfigurations is one of my favorite reconnaissance tricks when it comes to enterprise tools! 🎥 In this video, I share 2 examples:

👀👉🏼https://t.co/msr2tH4LSo

[Het Mehta @hetmehtaa]

IOS Pentesting Series

Learn how to work with useful tools and apps such as Frida, Objection, 3uTools, Cydia, Burp, fsmon, fridump, SSL bypass, reFlutter etc.

Part 1:
🔗https://t.co/McUWApKN2j

Part 2:
🔗https://t.co/dQZzDQza6R

Part 3:
🔗https://t.co/tcC2FPtRbA

[Jayesh Madnani @Jayesh25]

Bug Bounty Tips: Extract API Endpoints and Construct Complex HTTP Requests from JavaScript Files Using AI

Stuck analyzing complex JS files while manually hunting on a target and can't figure out how to construct those GET/POST requests? 🤯 No fancy tools needed!

👉 Quick tip: Copy the JS file from your Chrome Dev Console, save it locally, and upload it to ChatGPT. Use this prompt:

"Could you read this JavaScript file and help me construct GET/POST endpoints?"

Then, ask for specific requests like:

"Can you help me construct the API request for getUserDetails with a raw HTTP example based on the JavaScript file uploaded?" and other similar questions based on the functionality you're looking into within the JavaScript source code.

You’ll be amazed by the results as ChatGPT constructs these complex GET/POST requests with parameters based on the AI code review—making what seemed impossible at first glance possible! 🚀

Once you have this information, you can start manually testing the endpoints with your cookies to test for IDORs, SQLi, CSRF, Privilege Escalations, XSS, etc.

#BugBountyTips #SourceCode #Infosec #HackerOne #BugCrowd 🕵️‍♂️🎯

[JS0N Haddix @Jhaddix]

10 of my favorite free Secure Coding Resources:

https://t.co/NqqZk6Xgrh

[Fat @fattselimi]

With https://t.co/B4LDBal5YE API you can automate your Recon and make it faster and efficient to find more hidden subdomains for more potential vulnerabilities.

#bugbounty #bugbountytip #bugbountytips #ethicalhacking #infosec #cybersec #cybersecurity

[Hannan Haseeb @HannanHaseeb11]

I’m pleased to announce that our team has successfully qualified for BlackHat MEA 2024, ranking #131 out of 3,000 participants! 🎉 We are among the top 250 teams who made it to the final round.

A big thank you to my amazing team members, especially @ShawarkOFFICIAL.

[Saurabh Kumar Pandey @thesaurabh___]

How HTTPS Works!!🌐🧾🖥️

[Digitalearn @DIGITALEARN_1]

Python Atmosphere 🌐🛡️🖥️