Robotshell

Computer engineer 💻 Bug Bounty Researcher🕵️ Ethical Hacker 👾 Cibersecurity teacher 📕

[Robotshell @robotshelld]

https://t.co/sxJmF8u0nm

#infosec #bugbounty #bugbountytips #tool #pentest

[elhacker.NET @elhackernet]

[Blog] Detenido por hackear al Betis. Su objetivo: conseguir abono antes que los demás socios
https://t.co/xLum5xY08z

[Jack Rhysider 🏴‍☠️ @JackRhysider]

Your DNS queries are like a diary of everything you do online.

Some DNS providers love reading that diary.

[Brave @brave]

Wow, trash has changed a lot over the years! 😮

[Jesús Seijas @jseijasdev]

Hilo de pantallazos azules de hoy promocionados por CrowdStrike:

[What a week, huh? all Wednesdays @whataweekhuh]

Hello there, long time no see

[Yunus Emre Öztaş @ynsmroztas]

If you see android:exported="true" in AndroidManifest.xml in Android pentests, you should definitely try the intent injection method, this may give you ssrf, exfiltration sensitive data, rce. 🥰🌹🥳

#BugBounty #bugbountytips

[Thomas Roccia 🤘 @fr0gger_]

🤯 The level of sophistication of the XZ attack is very impressive! I tried to make sense of the analysis in a single page (which was quite complicated)!

I hope it helps to make sense of the information out there. Please treat the information "as is" while the analysis progresses! 🧐 #infosec #xz

[Nuclei by ProjectDiscovery @pdnuclei]

🎉 Version v9.7.6 of Nuclei Templates is here!

⚡️ Super powered with:
🧬 49 new Templates
🥇 12 first-time contributions
🛡️ 22 new CVEs added

https://t.co/PtBFIsMMLW

[Dolores GPastor 🇪🇺🇪🇸 @dgpastor]

Sam Altman el viernes, Sam Altman el domingo. #OpenAI

[Joseph Thacker @rez0__]

Generated some seriously cool and vibey hacker art

[Anonymous @YourAnonCentral]

Never pay for Twitter

[HackGit @hack_git]

Depix

A tool for recovering passwords from pixelized screenshots.

https://t.co/FiKHyXvvgV

#cybersecurity #infosec
https://t.co/axZ53OMIJ1

[f4mi ‼️ @f4micom]

https://t.co/1lgtOSXLS2

this tool lets you extract text from an audio recording of keyboard strokes, right now, for free

i am not making this shit up, you can potentially steal a password from an audio recording in an office

[Cyber Detective💙💛 @cyb_detective]

NUCLEI CHEATSHEET

A small addition for those who have read my article "Using Nuclei for OSINT. A 5-minute basic guide":

https://t.co/fvXS7PTux6

You only need to know 10 commands (flags) from this cheatsheet to start using #Nuclei.

[Mike Takahashi @TakSec]

🍪💣 Cookie Bomb 💣🍪

URL that causes the cookie length to exceed request header limits for all requests until the cookie expires.

1. Find a Cookie set by a parameter
2. Inject as many commas as you can into the parameter until you DoS that user

#bugbountytips #infosec

[rootsecdev @rootsecdev]

GitHub - MattKeeley/Spoofy: Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records. https://t.co/E4y04yF7z1