ngorks

Antibiotics

[ngorks @superngorks]

@veedstudio Are you interested in a security vulnerability report? I'd like to send you one.

[Tristan Kalos @TristanKalos]

Wanna know if the web app you are building is secure? Here is a tutorial on how to test the security of any web app in 3 min with nuclei, an open-source and developer-friendly app security scanner https://t.co/yO4mshOqSl (👋 @pdnuclei)

[zonduu @zonduu1]

You don't need to use a proxy/vpn when blocked by a WAF while testing a webapp, you can use IP Rotate extension from burp suite and all the traffic is then routed though API gateway endpoints in the regions you selected. Useful when aggressive WAFs block your IP #bugbountytips

[Brute @BRuteLogic]

#review2learn #XSS #javascript

https://t.co/5MjYZqy5O0

[Corben Leo @hacker_]

I've re-written gau! This includes speed improvements, a new provider (urlscan), loading options from configuration files, new filter support, socks5 proxy support, and more!

Make sure to grab the new version!
https://t.co/dZCcjwPG9T

[Graham Helton (too much for zblock) @GrahamHelton3]

Day 1 of your next pentest and you see this, WYD?

[ngorks @superngorks]

@alxbrsn

[SecurityTrails, A Recorded Future Company @securitytrails]

Did you know that the SecurityTrails Free App allows you to simply input a hostname and get data on:

👉 DNS records (A, AAAA, MX, NS, TXT, SOA)
👉 Historical records
👉 Subdomains
👉 Hosted domains per IP
👉 IP neighbours

Try it out for yourself: https://t.co/5kuYFeRVoq

[IPinfo – IP Data Provider @ipinfo]

Give https://t.co/A230fvcUao an IP address and it will tell you (for free) the:

🌏 Geolocation
🏬 Company
☎️ ISP
📱 Mobile carrier
⛔️ Abuse contact
🔗 Associated domain
⏰ Timezone
🔥 And more!

Try it! https://t.co/Pvyuyyg9sK

Or from a terminal:
curl https://t.co/ffxuQdtaGm

[Patrik Grobshäuser @ITSecurityguard]

The account that pushed the contract to Github (commit 46977c750b3378b422016ad2a7613cfa0caf907d
SquidGame <[email protected]>
Date: Thu Oct 14 16:50:11 2021 +0800)

interestingly they forgot to remove their MX Record which points to @OVHcloud 👀

#SquidGameBsc
#squid
#rugpull

[Tuhin Bose @tuhin1729]

Testing Forgot Password Functionality:

1. Host Header Injection - Password Reset Poisoning

(1/n)

[Pethuraj M @Pethuraj]

PeTeReport - An open-source application vulnerability reporting tool.
https://t.co/JWXr4GhxVo

#cybersecurity #infosec #bugbounty #bugbountytips #security

[Tushar Verma 🇮🇳 @e11i0t_4lders0n]

Thick Client Pentesting Mindmap
https://t.co/6zunwQ91fT

[Mobile Security @mobilesecurity_]

Tracing JNI Functions
#MobileSecurity #AndroidSecurity by @Ch0pin
https://t.co/PlfJf71Y4d

[Nuclei by ProjectDiscovery @pdnuclei]

Nuclei Template for CVE-2021-22205 - GitLab CE/EE Unauthenticated RCE using ExifTool

Template: https://t.co/ELvga2mXyI

#bugbounty #pentest #hackwithautomation #gitlab

[ᴀʙᴅᴇʟʀʜᴍᴀɴ ᴢᴀʏᴇᴅ @aufzayed]

automate leaked data (secrets, tokens, ...) validation with nuclei
#BugBounty #infosec #cybersecurity

🔗https://t.co/oIB7t2Uk3D

[FuzzingLabs @FuzzingLabs]

Source codes and commands are available here ;)
https://t.co/huVAfs2xjo

[Rohit @whorsehgal]

Stored XSS's impact is more than Reflected XSS, see this flyer and read thread👇👇
Download : https://t.co/X4cCcLFiK3

Reviewed by our XSS Guru @theXssRat and @PascalSec(AKA @hacksplained) and brought to you by @intigriti. Thankyou ❤️

#infosec #bugbountytips #bugbounty #security

[Patrik Grobshäuser @ITSecurityguard]

Want to make easy money online?

1. Copy + Paste
2. Make Udemy Course
3. $$$