Robin Verma

IAF BRAT 🇮🇳, Freak Computer Geek 🤓, Hacker 👨🏻‍💻, Bug Bounty Hunter 💰, C|EH and Engineer 👨🏻‍🎓

[Robin Verma @RobinVerma007]

If you ever come across a subdomain that shows error 404, then just don’t leave the subdomain by checking it’s cname, there can be much more. Who knows there’ll be easy $200 hidden for you.
Dirbuster is your friend, I repeat Dirbuster is your friend.
#bugbounty #BugBountyTips

[Emad Shanab - أبو عبد الله @Alra3ees]

Easy $$$ bug bounty:-

1: Download

https://t.co/j9Ye9wKQQU

2: Download

https://t.co/dPrp5vnk1p

Run:-
apachetomcatscanner -tf domains.txt -C T 500

Find outdated software, default credentials and CVES

Good luck and thanks to @podalirius_ the Author of apachetomcatscanner

[Argal Rawat Atul Pratap Singh Gautam @kunwaratulhax0r]

Hacking into scammers portal-2

https://t.co/RqI9u17uGy

@rahullraz @Sri_Hxor @AniR0y
#hacking #scammers #hackers #infosec #securityawareness

[Corben Leo @hacker_]

Uber was hacked.

The hacker social engineered an employee -> logged into the VPN and scanned their intranet. 👇

[Sunny Nehra @sunnynehrabro]

Hackers are exploiting a very critical (9.8 rating) security flaw of the vulnerable Hikvision's CCTV Cameras on a massive level. The #Chinese Hikvision is the leading CCTV Camera provider in the world.

I always doubted if the flaw (CVE-2021-36260) is rather a Chinese🇨🇳 Backdoor.

[Red Sentry @redsentry_tech]

🚨Cloud Hacking Tools🚨

AWS - https://t.co/rUdObWNI0J
GCP - https://t.co/pCcwpUmXfs
Azure - https://t.co/cmp9S57KIT

Multi Cloud - https://t.co/scg2JWeNQ7
Multi Cloud - https://t.co/bFP7b1j0yS

#bugbountytips #bugbounty #redteam #Pentesting #PenTest #infosec #aws #gcp #Azure

[☣ KitPloit - Hacker Tools @KitPloit]

Njsscan - A Semantic Aware SAST Tool That Can Find Insecure Code Patterns In Your Node.js Applications https://t.co/YgHwN2BKO6

[Chris Wysopal @WeldPond]

For Apache Log4j remediation priority it seems the best approach right now is:

1. log4j 2.x through 2.14 - update to 2.16
2. log4j 1.x - update to 2.16
3. log4j 2.15 - update to 2.16

[James Kettle @albinowax]

The ActiveScan++ #Log4Shell check has now been superseded by dedicated tools like burp-log4shell, which can detect asynchronous and deferred variations. I hope you found it useful! Go switch :)
https://t.co/LyD98LL1wF

[Chris Wysopal @WeldPond]

The patched version of log4j 2.15.0 requires a minimum of Java 8. If you are on Java 7 you will need to upgrade to Java8

When there is active exploitation and you need to patch fast it is beneficial if you have been updating your other dependencies over time.

[/r/netsec @_r_netsec]

Windows 10 RCE: The exploit is in the link https://t.co/H23q6hwYQT

[Manas @ManasH4rsh]

Here we get almost everything about android hacking:)

https://t.co/xgH7r38tjz

[Hacking Articles @hackinarticles]

Best of OSCP CTF Cheatsheet

https://t.co/SEJdYN3mFs

https://t.co/AIUdoUaDV6

https://t.co/HLfe9mGFVN

https://t.co/JxuTswFwbn

#infosec #oscp #hackthebox #tryhackme #vulnhub #cheatsheet #cybersecurity #pentesting

[Pentester Academy @SecurityTube]

Even with a perfectly secure JWT implementation, things can still go wrong (hint: key size). Check out our lab walkthrough at https://t.co/rjkMCEAatm to learn more!

[Oliver Lyak @ly4k_]

I’ve been playing a lot with PrintNightmare recently, and I thought I’d share my tool. Features include checking if a host is vulnerable, listing and deleting printer drivers and of course creating a new printer driver with full customization.

https://t.co/EWPhCal8yD

[Abhisar Pandey (MrGrep) @imabhisarpandey]

Want to learn SSRF? save this thread 🔥
(1/5) Blogs:
https://t.co/pnUhb9b1MH

https://t.co/NoWhMJsv5K

https://t.co/VXAMp7hYq1

https://t.co/A8Vxj4TWHS

https://t.co/HkmSq8xOOB

https://t.co/Jy16amvz22

https://t.co/mM647kiaXZ

https://t.co/Fo9SuhYOke

#bugbounty #cybersecurity

[Nguyen The Duc @ducnt_]

So, here is another gift for you about Imagemagick RCE 0-day that afftceted to GhostScript-9.50 😀

https://t.co/RR2uvMFuIn

#RCE #imagemagick #ghostscript

[bugcrowd @Bugcrowd]

Have a great #LaborDay 🙃

#hackers #bughunter #bugbounty

[Abhisar Pandey (MrGrep) @imabhisarpandey]

XXE Resources to learn and practice 🔥
------
Blogs:
https://t.co/Cy7S0QRRTb

https://t.co/BzguZ70Kb0

https://t.co/4RhFjbMC65

https://t.co/bGh0do4Dm4

https://t.co/tK9eeFdpta

https://t.co/fsCrlMGH0y

https://t.co/2Upu9TJxqh

https://t.co/fBO3ONfjga

#cybersecurity #bugbounty

[Harsh Bothra @harshbothra_]

Created a MindMap to help while testing the "SAML" based functionalities.

XMind: https://t.co/xhTNeT9P5D

Drive: https://t.co/VmOGmMVkla

#appsec #Resources #bugbounty #bugbountytips #mindmaps #infosec