❤💍#پن_تستر |عاشقو دیونه ی دلبرم

Penetration Tester | Web3 Security Researcher | Bug Bounty Hunter | Vulnerability Researcher | Red Teamer | Cybersecurity Instructor

[❤💍#پن_تستر |عاشقو دیونه ی دلبرم @rezhunting]

🚀 JavaScript Prototype Pollution to Node.js RCE
From Deep Merge flaws to full system takeover Check the attack chain & defense matrix ! 👇

#BugBounty #AppSec #NodeJS #CyberSecurity #PrototypePollution #javascript #rezhunting #0x110 #hunter #xss #RCE #prototype #ATO

[Ayub @ayub_kokabi]

یه اکستنشنِ ساده ساختم که وقتی صفحه رو ترجمه می‌کنید جهتِ صفحه رو خودکار راست به چپ می‌کنه.

سرجمع ۲۰ خط کد، زیر ۱۰ کیلوبایت، بدون هیچ دسترسی‌ای و کاملاً متن‌باز.

لطفاً اگر خوشتون اومد بازنشر کنید و در استور و گیتهاب ستاره بدید.

https://t.co/9aIDCxkcvI

[Cyber Detective💙💛 @cyb_detective]

AWESOME BUGBOUNTY TOOLS

Subdomain Enumeration
Port Scanning
Fuzzing
GraphQL/CRLF/CSRF/SQL/XSS/XXE Injections
Directory Traversal
Open Redirect
Subdomain Takeover

and more.

https://t.co/nzQqnaaxZL

#pentest #bugbounty

[Sushil Choudhary @0xchoudhary]

Found Sql Injection in a Private University. With @coffinxp7 oneliner.

Command :- subfinder -d target[.]com -all -silent | waybackurls | urldedupe |
gf sqli >sql.txt; sqlmap -m sql.txt --batch --dbs --risk 2
--level 5 --random-agent | tee -a sqli.txt

[VIEH Group @viehgroup]

"HTML Sanitizer Bypass Cloudflare leads to XSS"

payload: '<00 foo="<a%20href="javascript​:alert('XSS-Bypass')">XSS-CLick</00>--%20/

#infosec #cybersec #bugbountytips

[Professor the Hunter @bughuntar]

🐞Bug Bounty Tips🐞

🕷️How to Find SQL Injection in Registration Page?

🐜Try this in the username/email injection point:

#bugbountytips #bugbounty #bugbountytips #sqli #Professor #CyberSecurity #sqlinjection

[Godfather Orwa 🇯🇴 @GodfatherOrwa]

SQL Injection Payload

i was able to locate a SQL injection very hard to exploit , with digging I successfully got it with the sleep payload

''||(select 1 from (select pg_sleep(6))x)||'

==> i added as well to my SQL wordlist

happy hunting ♥
#bugbountytips #bugbountytip #bugbounty

[Md Ismail Šojal 🕷️ @0x0SojalSec]

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.⚔️💻

https://t.co/fLT153X3WK

#infosec #bugbounty #recon #cybersecuritytips

[❤💍#پن_تستر |عاشقو دیونه ی دلبرم @rezhunting]

@darshal_ @elcharlys2020 ALL

[Pooja Pawar, PhD @SheExploresData]

Master #Pandas with this essential commands cheatsheet

From reading CSVs & inspecting data to cleaning, filtering, merging & aggregating—these are the must-know functions every #DataAnalyst & #DataScientist uses daily!

#Python #DataScience #EDA #Analytics #BigData #MachineLearning

[Code Geek @codek_tv]

Data Science Roles and Collaboration
Image Credit- Data Science Dojo

[Gospel @4osp3l]

Huge shoutout to the one I call "the SQLi master", @5hady_

Thanks so much for the help and tips, whatever is in this article is definitely inspired by your ideas, plus a mix of my own research and what I've learned along the way.

https://t.co/EWGuujn8my

[Krishna Agrawal @Krishnasagrawal]

Excel & SQL For Data Analysts

#sql

[Aikido @AikidoSecurity]

From detection to fix, Aikido handles unsafe HTML injections inside your IDE.

[Kaido Järvemets @kaidja]

Microsoft Defender XDR Security Settings Management - Complete Implementation Guide with Azure Arc Integration and Sentinel Monitoring

Read more - https://t.co/Rkqxaj6l8C #Azure #DefenderXDR #AzureHybrid #AzureArc #MicrosoftSentinel #Microsoft #MicrosoftMVP

[Abdulkadir | Cybersecurity @cyber_razz]

GITHUB CHEAT SHEET

[NullSecurityX @NullSecurityX]

We broke it with the permission of @theXSSrat <3 , it's your turn..:)
Stored XSS PoC..:)
https://t.co/xHOcBbxtzk

#BugBounty #XSS #cybersecurity

[Harshleen @0xharshleen]

30K+ dorks & queries for Google, Shodan, Fofa, a researcher’s toolkit for spotting vulnerable servers & tech stacks📝
🔗https://t.co/qfkKNu9h8I

[Steven Lim @0x534c]

🚨 The Salesloft-Drift breach exposed Salesforce data across hundreds of orgs via compromised OAuth tokens. Vendors like Cloudflare, Palo Alto Networks, Zscaler, and others have confirmed related incidents.

🔍 To detect similar risks from other third-party integrations, especially those using OAuth tokens to access Salesforce: If you're using Entra SSO with Microsoft Sentinel, the following analytic rule can help monitor for suspicious access attempts.

#Cybersecurity #OAuthAttack #SaaS #sentinel

[Security Trybe @SecurityTrybe]

Dynamic host configuration protocol explained