tmp

19 years old, studying cyber security

[tmp @tmptmp69]

log4j, ms17-010, and other type of vulns you can deal with them using snort rules isn't that amazing. Snort Challenge - The Basics - I have just completed this room!https://t.co/FuAHNBUfxD #tryhackme #Snort2 #IDS #IPS #log4j #snortchallenges1

[Florian Roth ⚡️ @cyb3rops]

I've decided to put a screenshot showing the hex editor view of a Turla Kazuar sample behind acrylic glass on my desk to always remind me, why I am doing all this ...

because I 💛 to be a pain in the neck of the bad guys

https://t.co/LnoC5rwkWV

[Hacking Articles @hackinarticles]

Pic of the Day

#infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness #informationsecurity

[tmp @tmptmp69]

@hackinarticles Explain how the Linux kernel works ?

[tmp @tmptmp69]

Traverse - I have just completed this room! Check it out: https://t.co/ABAJEmp7Af #tryhackme #security #web #javascript #owasp #php #coding #traverse via @tryhackme

[OccupytheWeb @three_cube]

Open Source Intelligence: Finding Vulnerable Systems Online with Netlas

The Newest and Best Site to Find System Vulnerabilities that Every Pentester Should Know

https://t.co/traQYFG71O

[tmp @tmptmp69]

@micro0x00 @iknowhatodo0x01 شكرا مهندس، ثريد اسطوري

[Mohamed Mater🇵🇸 @micro0x00]

هكلم في الثيرد ده عن js تقدر تستفيد منها ازاي bug bounty
java script
موجودة في الويب ابلكيشنز كلها تقريبا هي المسؤوله عن اي تفاعل بيحصل في الموقع: JavaScript ممكن استخدامها لإنشاء عناصر في صفحة الويب قابلة للتفاعل زي buttons المتحركة ووبتستخدم في عملية validation

[tmp @tmptmp69]

@hackinarticles Vim is amazing but there is a lot of commands to learn, I will try to learn them in summer

[tmp @tmptmp69]

@soulaannation01 @labeveryday @NetworkChuck 😂 Wtf ur talking about I am Arabian

[tmp @tmptmp69]

@NCSCJO Data leak???

[InfoSec Community @InfoSecComm]

🆕 New Post 🆕

Checkout this article where Abbas has explained and demonstrated how one can bypass rate limiting with TOR: https://t.co/yEGjbCfaMZ

[tmp @tmptmp69]

@0xclient حصل

[Ben Sadeghipour @NahamSec]

Does hacking and cybersecurity require programming?

🎥👉🏼 https://t.co/K4ihinFPjg

[Mehdi @silentgh00st]

Here is how I chained two bugs to exploit a UUID based IDOR and gained access to admin panel.

🧵THREAD🧵
1. How I knew that the target uses the same panel for both (normal users and admins)?! This is because of two things, the first one is through subdomain enumeration

[Mehdi @silentgh00st]

@Caleepha_ms Uuid is near impossible to bruteforce, so you need to find if you could leak it from somewhere, a JS file or another endpoint that gives you the UUID of another user ...
But if you tried first with you 2 accounts and it didn't works, then it may be not vulnerable to IDOR

[tmp @tmptmp69]

I highly recommend reading blog, It is about making a sql scanner in python, such a great work thanks to
Arth Awasthi https://t.co/m8ClOxRBV3

[/usr/bin/fares @SirBagoza]

hunting on API with JSON format? go to reset password and try to submit 2 emails separated with "\n" as:

{"action":"reset-password", "email":"[email protected]\[email protected]"}

You can receive reset password link on both emails

#BugBounty #bugbountytips #bugbountytip

[Rapid @Rapid_API]

Let's learn about the benefits of GraphQL

Thread 🧵👇