Pradeep Kumar

SecEng

[Pradeep Kumar @sickuritywizard]

Collab with @silentbronco

@GoogleVRP
#googlebugbounty #bugbounty #bugbountytips #googlevrp #vdp #pentesting #xss

[Pradeep Kumar @sickuritywizard]

Checkout my new writeup on OAuth Security:
https://t.co/JmvUZgwPMa

#bugbounty #webpentesting #tech

[InfoSec Community @InfoSecComm]

New Write-up on InfoSec Write-ups publication : "PII Leakage via IDOR + Weak PasswordReset = Full Account Takeover" #bugbounty #bugbountywriteup #bugbountytips https://t.co/5PUdSJ36xk

[OSO @osodevops]

Unlocking Kubernetes Security: The Complete Checklist https://t.co/dwyI7dZCNw #kubernetes

[Nicolas Krassas @Dinosn]

JNDI Injection — The Complete Story https://t.co/40kyE7uaiT

[Pradeep Kumar @sickuritywizard]

I recently published a new blog on pentesting and securing Kubernetes environments. The article provides a detailed checklist with strategies and actionable steps to improve your K8 security framework.

Read the full article here: https://t.co/0bxwcdNFhq

#Kubernetes #Pentesting

[Cybernetic Research @cybernetic_res]

Checkout @sickuritywizard latest blog on how Java's ProcessBuilder and Runtime classes can unwittingly open the door to Command Injection Vulnerabilities.

https://t.co/NxW9BRBaod

#bugbountytips #bugbounty

[LiveOverflow 🔴 @LiveOverflow]

For every 10 likes this gets, I will ask ChatGPT to make this code more insecure

[D∆₹K⚜LÖ†Û$ @darklotuskdb]

The iOS Reloader is a weaponizing tool designed for jailbroken iOS devices. It facilitates the installation of a collection of essential tools on iOS devices for penetration testing purposes.

https://t.co/qXR8A3EJPG

#HR51KDB
#bugbountytip #bugbountytips #ios #vapt

[Pradeep Kumar @sickuritywizard]

"Recently delved into Jackson deserialization vulnerability and built a lab for testing purposes. Sharing the code on GitHub:
https://t.co/muF5BST1U6

#CyberSecurity #SecureCoding #Pentesting #BugBounty #ctf #bugbountytip

[huntr Hacktivity @huntrHacktivity]

Stack-based Buffer Overflow in https://t.co/CSoICvtMPX (CVE-2022-1771) reported by @GreaterGoodest - Patch: https://t.co/HwF4Dv9B9y
https://t.co/EAD7qAaPQb #bugbounty #infosec #opensource

[shubs @infosec_au]

My colleagues @seanyeoh and @devec0 found some phenomenal vulnerabilities in Cloudflare Pages. I highly recommend you read about their adventures in pwning CI systems. There's a lot to learn from their research. https://t.co/kdV6SXm3YF

[Pratik Khalane @KhalanePratik]

Here is my second blog of how i was able to bypass the admin using the default credentials in @BBC website.

Link : https://t.co/n2BPyE8iUv

[Dominic @dee__see]

@streaak's KeyHacks is great, but most keys aren't sensitive and aren't in there so I present NotKeyHacks, the list of tokens that look sensitive but aren't. The idea is to have a place we can CTRL-F instead of wasting time searching for the right docs https://t.co/ODtOIl4SLn

[Pradeep Kumar @sickuritywizard]

@darklotuskdb @openbugbounty 🔥🔥

[Jomar @J0_mart]

Hey guys, following the last @BugBountyHunt3r event, I have the opportunity to provide an invitation to a person of my choice, if you're interested, just leave a retweet and I will randomly pick someone on Tuesday :) #BugBounty

[D∆₹K⚜LÖ†Û$ @darklotuskdb]

To Find Compromised User Credentials 👨‍💻

1. Navigate to https://t.co/pVkZqs5lTF
2. Put the uname/email in the search box.
3. Copy the hash of the password.
4. Past in https://t.co/DQntEgoiT7 OR
https://t.co/SDAkg6b8lK

#HR51KDB #bugbountytip #infosec #databreach #bugbountytips

[Sourav @Sourav18644081]

@JAINUNIVERSITY is asking students to pay 1500 exam fess for online exams too, it won't even cost a single penny if they have purchased the domain. We are ready to pay but I just want to request that can't they donate 50% of the exam fees to fight corona virus?@ChenrajRoychand

[Rahul Sasi @fb1h2s]

we analyzed over 10,000 mobile apps and found over .5% of them has hardcoded AWS keys.
Report- https://t.co/Ie98snAcbO

[D∆₹K⚜LÖ†Û$ @darklotuskdb]

Useful #Shodan Dorks For #bugbounty.

Shodan CLI:
1. git clone https://t.co/nf3TeILKTN; cd easy_install; python2.7 https://t.co/4o6Ona6l39 install
2. easy_install shodan
3. easy_install -U shodan
4. shodan init YOUR_API_KEY

#HR51KDB #bugbountytips #bugbountytip #infosec

[D∆₹K⚜LÖ†Û$ @darklotuskdb]

Account TakeOver(#ATO) By Locking The Cookies.

#HR51KDB #bugbountytip