Rootbakar Official

Security Enthusiast - Penetration Tester - Bug Hunter - CEH

[Elora khatun @elora_khatun]

12 Websites that pay you daily

1. https://t.co/HYD97uw0wg

2. https://t.co/F24TGXU6Yw

3. https://t.co/GyrZ1XN6rC

4. https://t.co/h3VMw6Qnyv

5. https://t.co/O1vnUZScR7

6. https://t.co/BwjqWtnUq2

7. https://t.co/He6ZKIRLFh

8. https://t.co/wZB9JbWyK4

9. https://t.co/lB0dbDembo

10. https://t.co/dCD0fgaG7b

11. https://t.co/zdg3mdYbNZ

12. https://t.co/okyE7DyOTz

13. https://t.co/uQSJW4BrXT

Follow me @elora_khatun for more AI IDEA.

[Khusboo Tayal @KhusbooT14835]

Learn AI for free directly from top companies

𝟭 - 𝗔𝗻𝘁𝗵𝗿𝗼𝗽𝗶𝗰:
https://t.co/AzjSWA5mtP

𝟮 - 𝗚𝗼𝗼𝗴𝗹𝗲:
https://t.co/RjJuqyr1LZ

𝟯 - 𝗠𝗲𝘁𝗮:
https://t.co/0yFWyeojlO

𝟰 - 𝗡𝗩𝗜𝗗𝗜𝗔:
https://t.co/pAMm0PokME

𝟱 - 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁:
https://t.co/OYdcDQgIAK

𝟲 - 𝗢𝗽𝗲𝗻𝗔𝗜:
https://t.co/aPEiMUm6dX

𝟳 - 𝗜𝗕𝗠:
https://t.co/CqopfplSZh

𝟴 - 𝗔𝗪𝗦:
https://t.co/80K7JAk61J

𝟵 - 𝗗𝗲𝗲𝗽𝗟𝗲𝗮𝗿𝗻𝗶𝗻𝗴𝗔𝗜:
https://t.co/6ikbH9lj3i

𝟭𝟬 - 𝗛𝘂𝗴𝗴𝗶𝗻𝗴 𝗙𝗮𝗰𝗲:
https://t.co/J2EcHggA1A

❤️ Like
🔁 Retweet
🔖 Bookmark

Follow @KhusbooT14835 for more AI Posts

#AI #ArtificialIntelligence #AISkills #AIAgents #RAG #LLM #PromptEngineering

[VIEH Group @viehgroup]

PDF Generator Injection → SSRF

POC →

- Tested PDF export feature
- Injected external image URL in HTML
- PDF service fetched attacker-controlled URL
- Accessed internal network resources via SSRF

Learning →

- Sanitize HTML used in PDF generation
- Restrict outbound requests from backend services

#infosec #bugbounty #bugbountytips

[TheOuts1derX @TheOuts1derX]

35 tools for bug bounty hunters:

Recon & Subdomain Enum

1. Amass
2. Subfinder
3. Assetfinder

DNS Resolution

4. MassDNS
5. dnsx
6. Shuffledns

Port Scanning

7. Nmap
8. Masscan
9. Naabu

HTTP Probing

10. httpx
11. Aquatone

Crawling & URL Discovery

12. Katana
13. GoSpider
14. Hakrawler
15. gau
16. waybackurls

Vulnerability Scanning

17. Nuclei

Proxies & Interception

18. Burp Suite
19. Caido
20. mitmproxy

Fuzzing & Content Discovery

21. ffuf
22. feroxbuster
23. Dirsearch

Parameter Discovery

24. Arjun
25. ParamSpider

JS Analysis & Secrets

26. LinkFinder
27. SecretFinder
28. TruffleHog
29. Gitleaks

XSS

30. Dalfox

SQL Injection

31. SQLMap

OOB & Takeovers

32. Interactsh
33. Subzy

Mobile

34. Frida

Automation

35. bbot

#BugBounty #CyberSecurity #InfoSec #EthicalHacking #PenTesting #AppSec #WebSecurity #BugBountyTips

[Rootbakar Official @rootbakar]

Automated Open Redirect Hunting: Oralyzer & OpenRedirector Workflow (Part 3)

https://t.co/CprLv9854l

[Rootbakar Official @rootbakar]

Automated SQL Injection: Waymap, SQLScan & SQLMap Workflow (2026)
https://t.co/OeRqK4PkUZ

[bugcrowd @Bugcrowd]

You don’t need 20 tabs for recon. You just need a pipe.

Here’s the one-liner 👇

subfinder → httpx → gau → grep

Turn passive recon into real findings.

[Rootbakar Official @rootbakar]

Automated Bug Bounty Recon: Subfinder, Nuclei & Httpx Workflow (2026)
https://t.co/iRD417n0Kc

[FalconFeeds.io @FalconFeedsio]

🚨 Ransomware Alert 🚨

Bank Rakyat Indonesia, has fallen victim to Bashe Ransomware.

[Rootbakar Official @rootbakar]

Link: https://t.co/PwEE5Dlcx1

[Rootbakar Official @rootbakar]

Link: https://t.co/ZvJofPil3b

[The Bug Bounty Hunter @tbbhunter]

Learn Android Hacking! - University Nevada, Las Vegas (2024)

https://t.co/zEh52FRPRG

@LiveOverflow

[Rootbakar Official @rootbakar]

@ChishtiFayyaz Kun Fayakun. Semifinal Menunggu ❤️

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Android Pentesting Lab Setup - Android Studio 📱

- https://t.co/8YuHVFL0zG

#infosec #CyberSecurity #bugbountytip

[Luke Stephens (hakluke) @hakluke]

IPs go in
⬇️
DNS PTR lookups
⬇️
Extracts Subject Alternative Names (SANs) from SSL certificates
⬇️
Extracts Common Names (CNs) from SSL certificates
⬇️
Hostnames come out! 🚀

Useful for finding hostnames belonging to a company from their IP addresses!

Link in thread 🧵👇

[Rootbakar Official @rootbakar]

https://t.co/fWpzia80gc

[Michael Skelton @codingo_]

Learning to chain bugs is invaluable, and exploring impact is key to success as a pentester, bug bounty hunter, or red teamer. Digging through some of my old submissions in a chat with @InsiderPhD to brainstorm a collab, aiming to teach some of this soon!

[The Bug Bounty Hunter @tbbhunter]

Bypass Instagram and Threads SSL pinning on Android
You can download already patched APKs for none-rooted devices, patch APK using Python script yourself, or download Frida bypass script for rooted Android
https://t.co/5U3WaYPtSB

[YoKo Kho @YoKoAcc]

Bismillah.

Here is a simple story when Allah allowed me to successfully achieve P1 through a broken access control issue.

“The Unexpected “0” Master ID for Account Data Manipulation”

https://t.co/Hz4OzgyWPQ

Note: not much new things.

[Rootbakar Official @rootbakar]

[META BUG BOUNTY 2023] - IDOR on Marketplace Item Appeal
https://t.co/ZVGXVorknU

#BugBounty #bugbountytips