Senderwallet

[Shieldify Security @ShieldifySec]

ZK(Zero Knowledge) Proofs Learning Resources 🪙🫡

1⃣ Getting started with Zk 1⃣

▶️ Introduction to Zero-Knowledge Proofs:
🔗 https://t.co/IdzXlzG8C1
▶️ How To Create a ZK Smart Contract:
🔗 https://t.co/bWGoaESWaD
▶️ Zk Playground examples:
🔗 https://t.co/P0TohX3jA4
▶️ Hiccup's ZK Journey with Resources:
🔗https://t.co/zabbE3iPA4
▶️ Zk clearly explained with architecture:
🔗https://t.co/h7jpub3SYV

2⃣Zk Workshops & MOOCs2⃣

▶️ Zero Knowledge Proof (ZKP) Basics & dApp:
🔗https://t.co/iXiOWQhXej
▶️ ZKP and Dapp workshop by CryptoNaukri:
🔗https://t.co/hhjk0m3Z9t
▶️ ZK Hack- Introducing circom 2.0:
🔗https://t.co/dG3dfDd1p1
▶️ ZK MOOCs:
🔗https://t.co/HorzOHcnMV
▶️ Solidity dev to ZK dev workshop:
🔗https://t.co/DTqHqjnAHk

3⃣Zk Cohorts3⃣

▶️ Zk auditing cohort open sourced:
🔗https://t.co/Z4TGz32DJv
▶️ Zk Camp's Aztec/Noir Cohort:
🔗https://t.co/Oii0PwI5W7
▶️ Zk learning with 0xparc (including Halo):
🔗https://t.co/DPXv3Tw4Zh

4⃣Zk Game resources4⃣

▶️ BattleZips Game using circom and snarkJS:
🔗 https://t.co/1XOH9X0Cp8
▶️ BattleZips Game using Noir:
🔗 https://t.co/1z3Zeb84a7
▶️ Dark Forest: Lessons from 3 Years of On-Chain Gaming:
🔗https://t.co/8OuubsE63M

5⃣ZK Security5⃣

▶️ Intro to Zkp security:
🔗https://t.co/RYNq5UIpIV
▶️ Common ZK vulnerabilities:
🔗https://t.co/Bw1VFD9dtv
▶️ Trail of Bits' Zk Docs:
🔗https://t.co/sII8CsuEJM
▶️ Zk bugs tracker:
🔗https://t.co/ZyF6ooloBx
▶️ Zk hash collision vulnerability:
🔗https://t.co/aSZ0BxvHLY

[Securr @Securrtech]

Master Solidity in 2025 🚀🔥

The Learning Tree 🌳⚡️

|── Step 1: Solidity Fundamentals
| ├── Data types & variables
| ├── Functions & visibility
| ├── Events & modifiers
| ├── Structs & enums
| ├── Mappings & arrays
| └── Solidity memory vs storage
|
|── Step 2: Smart Contract Architecture
| ├── Contract deployment & interactions
| ├── Inheritance & abstract contracts
| ├── Interfaces & libraries
| ├── Custom errors & revert optimization
| ├── Fallback functions
| ├── Upgradeable contracts (Proxy patterns)
| └── Gas optimization techniques
|
|── Step 3: Advanced Solidity Concepts
| ├── Ethereum Virtual Machine (EVM) internals
| ├── Low-level calls (call, delegatecall, staticcall)
| ├── Assembly & Yul for Solidity
| ├── Storage layout & slot manipulation
| ├── Function selectors & signature collisions
| ├── Cross-contract interactions
| ├── Randomness in Solidity
| ├── Precompiles & cryptographic functions
| └── Metatransactions & account abstraction
|
|── Step 4: Security & Smart Contract Auditing
| ── Common Vulnerabilities
| ├── Reentrancy attacks
| ├── Integer overflows/underflows
| ├── Delegatecall vulnerabilities
| ├── Storage collisions in upgradeable contracts
| ├── Front-running & MEV attacks
| ├── Unchecked return values
| ├── Oracle manipulation attacks
| ├── Flash loan exploits
| ├── Access control misconfigurations
| ├── Block timestamp manipulation
| └── Denial-of-service (gas griefing, transaction spam)
|
|── Step 5: Solidity Development Tools
| ├── Remix, Hardhat, Foundry & Brownie
| ├── Debugging with Tenderly
| ├── Security tools (Slither, Mythril, Echidna)
| ├── Static & dynamic analysis
| ├── Fuzz testing smart contracts
| └── Gas optimization & profiling
|
|── Step 6: Mastering DeFi Protocols & dApps
| ├── ERC standards (ERC-20, ERC-721, ERC-1155)
| ├── DeFi protocols (AMMs, lending, staking, perpetual)
| ├── Cross-chain smart contracts & bridges
| ├── Layer 2 scaling (Rollups, Optimism, zkSync)
| ├── Solidity governance & DAOs
| ├── Multisig wallets & treasury management
| ├── NFT marketplaces & royalties
| └── Gasless transactions & meta-transactions
|
|── Step 7: Build & Get Recognized
| ├── Contribute to open-source Solidity projects
| ├── Write security research & Solidity blog posts
| ├── Participate in Solidity hackathons
| ├── Submit bug bounty reports on real-world protocols
| └── Network with Solidity developers & security experts

[Geek Lite @QingQ77]

给 Claude Code 装一套漏洞赏金和红队渗透技能包，51 个技能、574+ 报告模式、24 个漏洞类，一装就变身老练研究员。

https://t.co/Gaz5IoC1L4

[SunSec @1nf0s3cpt]

🔥I am ready to start writing "DeFiHackLabs Solidity Security Testing Guide".

Currently, it supports 47 types of vulnerabilities.

My todo:
1.Add missed vulnerability descriptions to the test cases written before.
2.Create a Notion version.
3.Create a PDF version.

[chrisdior @chrisdior777]

Beginner smart contract devs, auditors - don’t skip this.

This new paper dives deep into real exploitable patterns in Solidity contracts. Reentrancy, overflows, access bugs, all broken down.

Read it, or get rekt later:

https://t.co/1sckaZ02mv

[Shieldify Security @ShieldifySec]

Just published a new Solidity security audit report for @etherspot 🤝

This is our second audit for them, but this time for Credible Account Module (ERC-7579, EIP-712). Thank you for trust again! 🫡

Read the report below👇
https://t.co/gDSOIia9Vn

[Nicolas Krassas @Dinosn]

A structured course built from personal study notes of the book Linux Basics for Hackers by OccupyTheWeb. https://t.co/Yin4PQ46zt

[Vivek Galatage @vivekgalatage]

When it comes to in-depth technical write-ups, one of my favorite authors is @abhi9u. And this time, he has crafted a beautiful article, "Virtual Memory: A Deep Dive into Page Tables, TLBs, and Linux Internals."

Go, give it a read.

https://t.co/vSum7srMRT

[Shieldify Security @ShieldifySec]

An LLM-ready index of 460 Solidity vulnerabilities across 31 protocol types. Scraped from 10,000+ Solodit findings 🤠

https://t.co/rJ4Ssd5ogU

[termireum @termireum]

JS & Client-Side Security Resources
https://t.co/BwalkVAZnr

[pashov @pashov]

🚨Junior/Advanced secruity researchers - this is for you!!!

A new Training Hub that teaches you web3 vulnerability patterns and thinking as an attacker. Thanks to @ValvesSec, great job👏

URL: https://t.co/0eXoTFWEfv

[Mohit Mishra @chessMan786]

Computer Architecture from Scratch

[Ziad Salah @Zierax_x]

new tool: grafana scanner with 10 CVE checks from 2018-2025
made it cause existing ones give too many false positives.

https://t.co/l9K3DyJw27

#Pentesting #InfoSec #BugBounty #bugbountytips #Hacking #EthicalHacking

[Ziad Salah @Zierax_x]

https://t.co/aU8DevJ6Q1
Twice, my account Got restricted again, So this is the methodology for third time I hope my account still alive
@github

[Vivek Galatage @vivekgalatage]

One of the finest explanations of the CPU pipeline by this MIT course!

https://t.co/NcjvmJjDP7

[obscaries ❘ AppSec @obscaries]

If you're serious about mastering client-side bugs, this repo is a goldmine.

A curated roadmap covering:
• XSS (DOM-based & advanced)
• postMessage exploitation
• CSP bypass techniques
• Prototype Pollution
• Real-world writeups & labs

Stop jumping randomly between topics, follow a structured path.

🔗 https://t.co/0Z7YZiyTmA

#BugBounty #WebSecurity #XSS #AppSec #InfoSec

[obscaries ❘ AppSec @obscaries]

Level up your bug bounty workflow 🚀

💎 One-Liners by 0xPugal = a goldmine of powerful recon & exploitation commands — all in a single line.

🔥 What you get:
• ⚡ Fast recon pipelines
• 🎯 Ready-to-use XSS / SSRF / LFI chains
• 🧠 Real-world automation workflows
• 🛠️ Tool chaining like a pro

🔗 Source: https://t.co/EwupxSLsBG

❌ Don’t just copy-paste
✅ Understand the chain → hunt smarter

#BugBounty #CyberSecurity #Infosec #Hacking #Recon #

[DarkShadow @darkshadow2bd]

"Sensitive Information Leak & Missing Authorization via API Endpoint"

Join my BugBounty Chennal: https://t.co/LeJHHPweci

- to find info leak bugs in wordpress use my this quick wordlist:
/api/v1/export/data
/api/v1/config
/api/debug/env
/api/v2/auth/sessions
/api/v1/admin/users
/wp-json/wordfence/v1/config
/api/v1/billing/details
/api/v1/db/stats
/api/v1/logs
/api/v1/health
/api/v1/status
/api/v1/internal/settings
/api/v1/cloud/credentials
/api/v1/user/profile
/api/v1/system/info
/api/v1/backup/list
/wp-json/wp/v2/users
/wp-json/wp/v2/settings
/wp-json/wp/v2/media
/wp-json/wp/v2/posts?status=any
/wp-json/wp/v2/pages?status=private
/wp-json/elementor/v1/system-info

[HackenProof @HackenProof]

Spot the Bug 🧠

Plugin execution

What’s the issue in this code?👇

[HackenProof @HackenProof]

Spot the Bug 🧠

Time lock storage

What’s the issue in this code?👇