Mukul Gautam

Cyber Security Professional

[Pawan @_bas_kar_pawan]

Peak happiness of childhood

[Florian Roth ⚡️ @cyb3rops]

Someone going by "wwwiesel" on GitHub picked up @securitymeta_’s tradition this year and dropped a full list of #BlackFriday deals in the #InfoSec space

Online Courses & Training
- 8kSec Academy
- AI Security Professional Course
- Altered Security
- Belkasoft
- Blu Raven Academy
- Career Hacking Quest
- CloudBreach
- Cyber Plumber's Lab
- CyberWarFare Labs
- DevSecOps Pro
- DNS for Developers
- Evilginx Mastery
- Hack The Box Pro Labs
- HackSmarter
- HackTricks Training
- Hexordia
- Invictus IR Academy
- Invictus CloudLabs
- LetsDefend
- Mobile Hacking Lab
- OffSec Learn One
- OPSWAT Academy
- Pluralsight
- Practical DevSecOps
- Practical TLS
- http://pwn[.]guide
- CyberNow (SOC Analyst)
- TCM Academy
- TheXero
- Vantage Point / Enciphers
- White Knight Labs
- WiFiChallenge Academy
- ZeroPoint Security

Exams
- The SecOps Group

Mini Courses
- SecDim

Books
- The CloudSec Engineer

Hardware
- Hak5
- KSEC Labs

Professional Services
- Wortell

Tools
- Burp Bounty Pro
- Burp Bounty Go
- FullStro
- Grammarly Pro
- PortDroid
- Proton Mail / VPN / Pass / Drive
- HTTP Toolkit
- http://SEOengine[.]ai
- SubtitleBee
- WebsiteVoice

Services
- Grayhat Warfare
- AirVPN
- CyberGhost VPN
- Proton (second listing in file)
- NordVPN
- Tuta Mail
- InMotion Hosting
- IPVanish VPN

Misc
- Neato Stickers

URL: https://t.co/MX7WkVjmPh

[Vineeth K @DealsDhamaka]

Best 3 minute watch this week

TATA Harrier EV does a Land Rover style adventure on the hills of Kerala

Goosebumps 🔥What a machine 🚘

#TATA

[Sam Stepanyan @securestep9]

#Django: Critical SQL Injection Vulnerability in Django (CVE-2025-64459):

https://t.co/aYK8gTJVXY

[Trendulkar @Trendulkar]

The flex of the future will be the ability to disconnect. Offline may be the new premium.

[anand mahindra @anandmahindra]

This clip which was shared with me is about Shri Inder Jit Singh Sidhu of Chandigarh.

Apparently, every morning at 6 AM, in the quiet streets of Chandigarh’s sector 49, this 88-year-old retired police officer begins his day in service.

Armed with nothing but a cycle cart and an unwavering sense of duty, he moves slowly and purposefully, picking up rubbish from the roadside.

He says he wasn’t happy with the ‘low rank’ Chandigarh got in the Swachh Surekshan listing. But instead of complaining, he chooses action.

Each piece of trash he clears is more than just litter removed. It’s a statement. A quiet, persistent belief in a better world. A belief in living with meaning, regardless of age or recognition.

In a world often obsessed with youth and speed, his slow but steady footsteps tell us that Purpose doesn’t retire. Service doesn’t age.

A Salute to this quiet warrior of the streets. 👏🏽👏🏽👏🏽

[Assetnote @assetnote]

Sometimes, SQL injection is still possible, even when prepared statements are being used. Our researcher @hash_kitten has written up a blog post about a novel technique for SQL Injection in PDO’s prepared statements: https://t.co/oh7iVBc3t1

[Pinaki ❄️ @0xInfection]

TIL: there are apparently 1.4k potentially malicious MCP servers on GitHub. Cool research from VirusTotal!

https://t.co/ek8Pjv3U6f

[Aura @SecurityAura]

>C:\Windows\system32\dllhost.exe -accepteula -r -ma lsass.exe c:\programdata\[random letters].
>c:\programdata\[random letters]
>c:\programdata

'nuff said.

[James Kettle @albinowax]

This is interesting - Bugcrowd is saying there's evidence of 'leaked credentials from other platforms' and 'compromised tools', and forcing password resets on user accounts. I'd love to know more details about this.

[Burp Suite @Burp_Suite]

Welcome to the next evolution of Burp Suite… 🚀 #BurpAI

[Mukul Gautam @securitythread_]

@jatt_shailendra From these missing things what do you think is worth buying as an addon specially in gwalior 😅

[Mukul Gautam @securitythread_]

@supreetkashyap Hi! I was wondering if you could provide me with a coupon code as well? 🙂

[Mukul Gautam @securitythread_]

@pashov Comment and yes it is a comment 😀

[Bishop Fox @bishopfox]

With the new #opensource tool Swagger Jacker, #pentesters can automate analysis of response codes for each #API defined route, streamline manual testing capabilities with #curl command creation, and gather #endpoint routes.

#OSINT #pentestingtool #infosec

https://t.co/wBJ2nVmBbd

[Matt Johansen @mattjay]

One of the biggest hacks of the year has mainly gone untalked about.

A Chinese hacker group compromised a $57 billion chip manufacturer in 2017.

They weren't discovered for over 2 years. Here's everything we know:

[ISRO @isro]

Chandrayaan-3 Mission:
'India🇮🇳,
I reached my destination
and you too!'
: Chandrayaan-3

Chandrayaan-3 has successfully
soft-landed on the moon 🌖!.

Congratulations, India🇮🇳!

#Chandrayaan_3
#Ch3

[Katie Paxton-Fear @InsiderPhD]

A great place to learn some cool bugs the Top 10 web hacking techniques poll is open, honestly just learn about all of these https://t.co/7bXtFC2jQo

[Mukul Gautam @securitythread_]

Thank you, @eLearnSecurity for the eXtreme Web Vulnerability Assessment
#elearnsecurity #ewptx

[Janggggg @testanull]

CVE-2022-36804 PoC 🧐
https://t.co/VOWswcy3Hm