Sandip Das

❌Whoami?❌
👨‍💻Security Researcher
🖥️Btech in CSE
👨‍💻Penetration Tester
💻Programmer
🐞Bug Hunter
🇮🇳CTF Player

[Sandip Das @sandevsec]

@swaroopsy 💯 Correct

[Sandip Das @sandevsec]

@Krit_Sec Intrested

[Sandip Das @sandevsec]

@tabaahi_ Yes

[SickSec 🇲🇦 🇵🇸 @OriginalSicksec]

I hope to do better next month #hackerone

[Sandip Das @sandevsec]

@HackerGautam @Hacktifycs Yes, Sir 😀

[Sandip Das @sandevsec]

@xitsec @Hacker0x01 MetaMask

[Sandip Das @sandevsec]

@ADITYASHENDE17 Interested

[Sandip Das @sandevsec]

@ADITYASHENDE17 💯 Done ✅

[Sandip Das @sandevsec]

@jobertabma Hi Jobert, I'm scared of the negative points in hackerone. Why is hackerone not recommended by new hackers or hunters?

[Sandip Das @sandevsec]

I just unlocked endless possibilities at @infosechire🚀
Early access form: https://t.co/UT51meJliV. I filled the form to fast-track my success. You can too! Thanks @bsidesahmedabad

Bonus:🎁Fill the form and enter to win exclusive InfoSecHire swag – only 10 spots!🛡️#InfoSecHire

[Sandip Das @sandevsec]

@3ncryptSaan @Hacker0x01 @bsidesahmedabad @udit_thakkur @Akshanshjaiswl @marcos_iaf I am coming besides ahemdabad and super excited bro.

[Basant Karki🇳🇵 @basant0x01]

Let's find some DOM-based Vulnerabilities [ DOM XSS & Open Redirections ]

Tips
1. Always Check ?returnurl=, ?next= and other redirection parameters before login.
#bugbountytipes

[Anton @therceman]

Bug Bounty Hint

How to test for SQL injection

1) Select params for testing in:

🔹 URL query
🔹 POST body
🔹 Headers
🔹 Cookies

It can be any parameter. Typically, I test integer parameters first.

🧵 1/8

[Sandip Das @sandevsec]

@ADITYASHENDE17 TRY RODE 🎙️

[Sandip Das @sandevsec]

@bsidesahmedabad @ADITYASHENDE17 Congratulations 👏🎉👍

[X @TheMsterDoctor1]

Authorized camera access via Safari UXSS: the story of how a shared iCloud document can hack every website you've ever visited. https://t.co/xbPaRM9E1g

[Sourav Khan🇧🇩 🇵🇸 @Br0k3n_1337]

All praise is due to Allah alone❤

I earned $2,947 for my submission on @Hacker0x01 .

Bug: Reflected XSS leads to permanent account takeover.

#bugbounty #xss #bugbountytip #bugbountytips #payload #hackerone #xsspayload #BugBounty #xsspayloads #TogetherWeHitHarder

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Time based SQLI -> forgot password endpoint: 🫰

1./ Payload : '%2b(select*from(select(sleep(20)))a)%2b'

2./ Endpoint: /Forgot password

#infosec #cybersec #bugbountytip

[ProjectDiscovery @pdiscoveryio]

Get CIDR ranges owned by an organisation with asnmap, extract domain names using dnsx then check for CDNs, WAFs and cloud providers with cdncheck! 💡

Install these tools:
asnmap 👉 https://t.co/EGWR8fPJ2a
dnsx 👉 https://t.co/1319t7GcEd
cdncheck 👉 https://t.co/Pc4qruBhMi

[Sandip Das @sandevsec]

@Moblig_ @maxdha1 @infosecbackpack