omatician

[omatician @omatician]

@F4tM4n2k @loay_morad_ @backdegree @fattselimi How much for high , critical and exceptional bro ? Can you please tell ?

[Burp Suite @Burp_Suite]

🚨New Black Hat research released: Over $200k in bounties earned in just two weeks. Join the movement to kill HTTP/1.1 today ⬇️

🔍PortSwigger’s James Kettle (@albinowax) introduces two new classes of HTTP desync attacks capable of compromising credentials on tens of millions of sites.

• Exploit previously unseen desync variants (https://t.co/TJaiisGn5N, Expect-based)
• Leverage the open-source HTTP Request Smuggler v3.0 toolkit for systematic discovery
• Learn how to protect your websites

#BHUSA

[PentesterLab @PentesterLab]

Their only weakness...

[Abdullah Al-Sultani @Abdulahhusam]

📷 Just released ProKZee v0.0.1!

My new cross-platform tool for HTTP/HTTPS traffic interception features a modern UI and powerful analysis capabilities. Perfect for developers and security researchers. Check it out:
https://t.co/ys3sn5bYKN

#infosec #bugbounty #bug_bounty

[Shivam Kumar Singh @MrRajputHacker]

Do not share any images or information about the movement of security forces on social media.
Also, report any profiles or pages that are sharing such information.

🇮🇳 Jai Hind

[omatician @omatician]

@erencodes Eyesight

[omatician @omatician]

@RenwaX23 @S1r1u5_ Prompt: Imagine you are showering and perform code review of the following code

[Maddockfilms @MaddockFilms]

Dinesh Vijan and Maddock Films present the trailer of Hindi Cinema's biggest spectacle ever - #Chhaava

Yeh Sher Shiva ka Chhaava shor nahin karta, seedha shikaar karta hai!

#ChhaavaTrailer #ChhaavaTrailerOutNow

🔗 - https://t.co/GUwZjGoNlf

Releasing in cinemas on 14th February.

#ChhaavaOn14Feb

[Cybernetic Research @cybernetic_res]

Happy PWN!
RCE script: https://t.co/XLxei20P5c
#CVE-2024-27198

By:@W01fh4cker

#bugbountytips #bugbounty

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

SMTP Smuggling got to number 3 of Portswigger's top 10 and here's why:

By default, new lines in SMTP are delimited by \r\n .

The end of data sequences are marked by characters \r\n. \r\n.

Some servers instead use \n . \n or \r \r
...

[PortSwigger Research @PortSwiggerRes]

The onloadstart event no longer works with image tags, but @h4nsmach1ne discovered video tags work instead! We've updated the our XSS cheat sheet to reflect this:

https://t.co/2nfogPO8XA

[Ben Sadeghipour @NahamSec]

In this video we cover Cross-Site Request Forgery (CSRF) and take a look at different ways to bypass CSRF mechanisms!

https://t.co/JxD1WHNadZ

[Alif Hossain @alifcoder]

Get FREE Data Science courses now! 😱

1. Python
2. Artificial Intelligence
3. AWS Certified
4. Cloud Computing
5. BIG DATA
6. Data Analytics
7. Machine Learning
8. Ethical Hacking

Follow these steps:

1. Follow me for a DM.
2. Like and repost.
3. Comment "Send"

[Corben Leo @hacker_]

Directory-brute forcing?

You should NEVER filter based on status code.

Paths can exist and return a 404.

I’ve seen this so many times:

/noexist/ -> 404 Not Found.

/api/ -> 404 Not Found, but different response body (JSON formatted)

/api/endpoint -> 200 OK

Filter by Content-Length, number of words or lines in the response body.

#typefully day 6

[Kanhaiya Sharma @krishnsec]

On March 6, 2028
I will retweet this tweet .

[omatician @omatician]

@h4x0r_dz These bots are the reason why you're reports get duplicate 😉

[0xdln @0xdln]

My 2023 #BugBounty Recap

- Earned 46,369$ in Bounties ( all platforms combined )
- Made it to top 20 in @intigriti
- Top 3 in 2023 Q1 @intigriti
- Able to maintain streak for 12 months in @Hacker0x01 @intigriti and @Bugcrowd
- Crossed 1000 reputation @Hacker0x01

[omatician @omatician]

@0xConda @APalpitation How do you automate lfi and sqli ? @0xConda

[omatician @omatician]

@HannanHaseeb11 @SynackRedTeam How do you guys even hunt with that sloww vpn. Its irritating. is it just me ?