kmt

what is your threat model? | OSCE(3)

[kmt @secparanormal]

Since day one, our goal has been to make cybersecurity accessible for everyone.While coding is great, it introduces tons of security issues. Start securing your dream for less than $100.We are giving away 10 starter plans.Let me know if you want to try.
#startup #cybersecurity

[PhantomOps @phantomops_nz]

We successfully identified security vulnerabilities across major platforms including Google, as well as multiple private and public bug bounty programs on YesWeHack and other platforms.
#bugbounty #hackerone #startup #cybersecurity

[skull @brutecat]

StubZero: $148,337 RCE in Google Cloud Production

https://t.co/m7cBnSTaj4

[obscaries ❘ AppSec @obscaries]

If you're serious about mastering client-side bugs, this repo is a goldmine.

A curated roadmap covering:
• XSS (DOM-based & advanced)
• postMessage exploitation
• CSP bypass techniques
• Prototype Pollution
• Real-world writeups & labs

Stop jumping randomly between topics, follow a structured path.

🔗 https://t.co/0Z7YZiyTmA

#BugBounty #WebSecurity #XSS #AppSec #InfoSec

[thaidn @XorNinja]

We asked Claude to find a bug in Vim. It found an RCE. Just open a file, and you’re owned. We joked: fine, we’ll switch to Emacs. Then Claude found an RCE there too.

Full story: https://t.co/7UL9suKs8r

[Joseph Thacker @rez0__]

if you think im just some dumb dumb thinking claude can find bugs and all my examples are wrong, just watch 15 min of this talk 😝 https://t.co/3UP7ierZyB

[Het Mehta @hetmehtaa]

WebSocket Security Testing Checklist

https://t.co/zebkK4iCYh

[Het Mehta @hetmehtaa]

JWT algorithm confusion: forging tokens the library trusts

https://t.co/jPSxwnmrlU

[Griffin @aussinfosec]

I have been doing bug bounty since 2011 and ran a program for a multinational bank. Put everything I've learned into https://t.co/78z1JfSzmr. Target selection, recon pipelines, chain patterns, report templates, the business side. Free, no paywall, no course upsell.

[AISecHub @AISecHub]

Penetration Tester Agent - https://t.co/088JVXhCFu

You are a senior penetration tester with expertise in ethical hacking, vulnerability discovery, and security assessment. Your focus spans web applications, networks, infrastructure, and APIs with emphasis on comprehensive security testing, risk validation, and providing actionable remediation guidance.

#PenetrationTesting #EthicalHacking #VulnerabilityAssessment #AppSec #CyberSecurity #PentestAgent

[Behi @Behi_Sec]

Meet BugSkills.

I built a tool to convert the knowledge and methodology used in your HackerOne reports into AI skills you can use to automate vulnerability discovery.

Thank you @rez0__ for the idea.
https://t.co/Ywb3SXQ2QJ

[may.crypto {🦅} @xmayeth]

A friend quit his quant fund job and sent me 2 pages.

“These are the key formulas I used to make money on Polymarket. $400K a year. If you can apply them, you’ll get rich.”

I didn’t believe him.

I dropped both pages into OpenClaw and sent one prompt: “build a bot for Polymarket.”

Then I left for the gym. When I came back, there was a Telegram message from the agent: “MVP is ready.”

Now it’s been making me $150 a day for 4 days straight.

I attached both documents. Drop them into your AI agent and tell me what it builds.

[Nicolas Krassas @Dinosn]

After 5 months of development, I'm releasing EvilWAF v2.4 - a MITM proxy that makes ANY tool bypass WAFs https://t.co/KfBhpwKLas

[Abdul Șhakoor @abxxai]

I DON'T UNDERSTAND WHY PEOPLE DON'T USE GROK FOR STOCKS.

Most traders are looking at charts from 3 months ago.
Grok analyzes real-time sentiment on X to predict tomorrow.

Here are 8 prompts to find the next 10x stock:

[👑 OFJAAAH 👑 @ofjaaah]

Use NextJS? Recon ✨

A quick way to find "all" paths for Next.js websites:
DevTools->Console

console.log(__BUILD_MANIFEST.sortedPages)

javascript​:console.log(__BUILD_MANIFEST.sortedPages.join('\n'));

Cred = https://t.co/4hiJXDNlmU

#infosec #cybersec #bugbountytips

[Dirk-jan @_dirkjan]

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: https://t.co/jD6EaGtsn3

[Alex Finn @AlexFinn]

A lot of people don’t realize they’re 5 hours of Claude Code away from changing their entire financial lives

[Alex Prompter @alex_prompter]

R.I.P McKinsey.

You don’t need a $300k consultant anymore.

You can now run full competitive market analysis using Grok 4.

Here are the exact 3 mega-prompts I use to replicate McKinsey-style insights for free:

[Alex Prompter @alex_prompter]

I tested Grok 4 and ChatGPT-o3 with same critical prompts.

The results will blow your mind.

Grok 4 Vs. ChatGPT-o3

(Video demos are included)

[kmt @secparanormal]

@y0bera switch off the lights before opening your browser. Simple as that.

[Godfather Orwa 🇯🇴 @GodfatherOrwa]

#Bugbountytip #bugbountytips

Install JS Miner extension over Burp
After crawling all endpoints
Click on the target ==> Extensions > Js Miner > Run All Passive scans

I got a result [Js Miner] Dependency Confusion

The package is unclaimed over NPM
Next step

Create an account on NPM
Then install the NPM in Linux

~ npm login
~ mkdir (Package Name)
~ cd package name
~ npm init -y
~ npm publish --access public

And I claimed the package

Next Step: I edit the package.json file to the RCE
POC https://t.co/vfFinyoUaM

And in the end, I got a nice P1 😍

This amazing man @m359ah , taught me 6 months ago about understanding and exploiting the Dependency Confusion, so big thanks to him ♥

#bugbounty
Happy Hunting ♥