ΡRΛSΞUDΟ ®

AppSec Researcher, DevSecOps, Handles @DeDefenceSec, Web/Mobile/Thick Client App Pentester, API/Network Pentester, Try 👉🏻

[ΡRΛSΞUDΟ ® @praseudo]

Same IDOR.

On a blog -> nobody cares

On a hospital -> critical payout + a breach report ($10,000)

The bug didn’t change. The business did.

I broke down 7 business models and the exact bug to hunt in each one 👇

https://t.co/WJ6Co8pN4z

#bugbounty #infosec #bugbountytips

[ΡRΛSΞUDΟ ® @praseudo]

Same IDOR.

On a blog -> nobody cares ($0)

On a hospital -> critical payout + a breach report ($10,000)

The bug didn’t change. The business did.

I broke down 7 business models and the exact bug to hunt in each one 👇

https://t.co/WJ6Co8pN4z

#bugbounty #infosec #bugbountytips

[ΡRΛSΞUDΟ ® @praseudo]

Same IDOR.

On a blog -> nobody cares ($0)

On a hospital -> critical payout + a breach report ($10,000)

The bug didn’t change. The business did.

I broke down 7 business models and the exact bug to hunt in each one 👇

https://t.co/Zy6HfjeTIz

#bugbounty #infosec #bugbountytips

[ΡRΛSΞUDΟ ® @praseudo]

The JWT "none" attack still works way more often than it should 😅

Delete the signature, set alg to "none", and some servers just... believe you.

Did it 3 ways in the new video - Burp, jwt_tool & JWT Hunter 👇

#bugbounty #jwt

https://t.co/YBE7ab7WTZ

[ΡRΛSΞUDΟ ® @praseudo]

Dropped episode 3 of my JWT pentesting series. This one's just the tools + labs I actually use for JWT testing, all free.

Handy if you're starting out. 👇🏻

https://t.co/MTaUzXxkrK

[ΡRΛSΞUDΟ ® @praseudo]

Made a simple JWT hacking checklist 👇

5 questions you can run on any token to find the vulnerability fast like none attack, weak secrets, header injection, algorithm confusion, all of it.

🎥 Full video: https://t.co/OSL9MhOr0Y

#bugbountytips

[ΡRΛSΞUDΟ ® @praseudo]

How hackers fake ANY login - JWT attacks explained (beginner friendly).

Episode 1 out now 👇
https://t.co/JLYeVJMP8F…

Like it? Full series is coming. Stay tuned!!

#bugbounty #jwt #pentesting #bugbountytips

[ΡRΛSΞUDΟ ® @praseudo]

How hackers fake ANY login - JWT attacks explained (beginner friendly).

Episode 1 out now 👇
https://t.co/JLYeVJMP8F…

Like it? Full series is coming. Stay tuned!!

#bugbounty #jwt #pentesting #bugbountytips

[ΡRΛSΞUDΟ ® @praseudo]

How hackers fake ANY login - JWT attacks explained (beginner friendly).

Episode 1 out now 👇
https://t.co/JLYeVJMP8F…

Like it? Full series is coming. Stay tuned!!

#bugbounty #jwt #pentesting #bugbountytips

[ΡRΛSΞUDΟ ® @praseudo]

How hackers fake ANY login - JWT attacks explained (beginner friendly).

Episode 1 out now 👇
https://t.co/DkTRtJ3t4D

Like it? Full series is coming. Stay tuned!!

#bugbounty #jwt #pentesting #bugbountytips

[DeDefence ® InfoSec @DeDefenceSec]

🔑JWTs are everywhere. But are yours secure?

I just dropped the ultimate guide: AppSec All-in-One series 📚. From stripping signatures to kid injection.

#AppSec #BugBounty #Infosec #Hacking #JWT

Just this is blog is enough to know in and out. 👇

🔗 https://t.co/SqyaovYTC0

[ΡRΛSΞUDΟ ® @praseudo]

Try this to save ample amount of time while hunting.

[ΡRΛSΞUDΟ ® @praseudo]

🚀 One shot scanner for:

- Asset discovery
- ⁠Network discovery
- ⁠CVE discovery
- ⁠Exploit discovery

Note: It is just version 01, the script will get updated constantly powered up with multiple tools to fine tune more quality results. Try it out

https://t.co/U2JAKubePb

[ΡRΛSΞUDΟ ® @praseudo]

Try this to same ample amount of time while hunting.

[ΡRΛSΞUDΟ ® @praseudo]

🚀 One shot scanner for:

- Asset discovery
- ⁠Network discovery
- ⁠CVE discovery
- ⁠Exploit discovery

Note: It is just version 01, the script will get updated constantly powered up with multiple tools to fine tune more quality results. Try it out

https://t.co/U2JAKubePb

[ΡRΛSΞUDΟ ® @praseudo]

Try this to save ample amount of time while Pentesting. Happy hacking

[ΡRΛSΞUDΟ ® @praseudo]

🚀 One shot scanner for:

- Asset discovery
- ⁠Network discovery
- ⁠CVE discovery
- ⁠Exploit discovery

Note: It is just version 01, the script will get updated constantly powered up with multiple tools to fine tune more quality results. Try it out

https://t.co/U2JAKubePb

[ΡRΛSΞUDΟ ® @praseudo]

🚀 One shot scanner for:

- Asset discovery
- ⁠Network discovery
- ⁠CVE discovery
- ⁠Exploit discovery

Note: It is just version 01, the script will get updated constantly powered up with multiple tools to fine tune more quality results. Try it out

https://t.co/U2JAKubePb

[DeDefence ® InfoSec @DeDefenceSec]

🚀 Here is the Part - 02 of “Few most powerful bug bounty browser extensions” series. Follow these video series to find vulnerabilities on the go.

Make sure to subscribe and share. Thanks

#BugBounty #bugbountytips #cybersecuritytips #infosec #Security

https://t.co/aGVKSykh1p

[DeDefence ® InfoSec @DeDefenceSec]

👉🏻 New Video‼️

🚀 Use these browser extensions to find vulnerabilities on the go. Give it a shot !!! It’s just Part - 01. More coming up !

#BugBounty #bugbountytips #hackerone #Pentesting #infosec

https://t.co/2A62bqtzz3

[DeDefence ® InfoSec @DeDefenceSec]

🚀 🚀 Hope this approach helps you getting bounties quicker 🔥

Please do Subscribe and Share.

#BugBounty #bugbountytips #hackerone #Pentesting #infosec

https://t.co/p1doWDoZ4e

[DeDefence ® InfoSec @DeDefenceSec]

⚠️🙌🏻 Coming up next. Stay tuned !!

#bugbountytips #bugbounty #hackerone #pentest #vapt #hacker #infosec

[DeDefence ® InfoSec @DeDefenceSec]

🚀 Follow these tips while selecting a Bug Bounty Program to avoid duplicates. 100% working method. Give it a try:

https://t.co/uJLTwsR4XI