TvM

InfoSec Enthusiast | I’m here to avoid my friends on Facebook

[TvM @tvmpt]

@_jensec @Hacker0x01 I hope you enjoy this magnificent city! Good luck with the event!

[TvM @tvmpt]

@Thezinnekalu My expectation is that, as bug bounty shifts toward automation with tools like Claude Code (API/cloud-based), the need for high local RAM should decrease since most of the heavy lifting is offloaded to the cloud... 🫤

[TvM @tvmpt]

Thinking about grabbing a MacBook Air M4 (16GB) — question for bug bounty hunters: does this make sense if I haven’t used macOS in 12+ years?

Be honest: is it enough for the job, or am I about to pay premium money just to relearn shortcuts like it’s 2012 again? 😂

[TvM @tvmpt]

@thedawgyg This looks cool! I’m curious about your workflow—what type of AI are you using and how are you handling the orchestration? Good luck with that RCE! 🤞

[TvM @tvmpt]

@singe This would work if rules could be triggered based on a regex match: you’d send one request to Repeater with a dummy value, and it would know to run all rules and resend every matching request with the value substituted.

[TvM @tvmpt]

@singe It helps identify auth issues like BAC by comparing responses between requests.
It also enables fuzzing by sending multiple requests with random characters (' " ? % & > [ $) in URL/JSON params or headers to check whether any context breaks when those values are used as input.

[JS0N Haddix @Jhaddix]

Happy Arcanum-versary!

@arcanuminfosec 's 1st giveaway for the week is FOUR seats to our EPIC Advanced Client-Side Hacking course by myself and @xssdoctor !

👍 1 Like = 1 Entry!
♻️ 1 Share = 2 Entries!

Winners announced 1/21!

Syllabus for the course below 👇

[TvM @tvmpt]

No matter how much you think you know about Recon, a @Jhaddix talk will always prove there’s more to learn. Constant value every single time. 🕵️
​#CyberSecurity #Pentesting #BugBountytips #BugBounty

https://t.co/OEHhpNZLhW

[TvM @tvmpt]

@thedawgyg @busf4ctor @RodoAssis ☝️

[TvM @tvmpt]

🤯 Jumping into Bug Bounty? Stop manually sifting through minified JS!
​It's a known fact: Javascript files are a GOLD MINE for security bugs. This extension turns minified chaos into readable code instantly. 🚀
​ https://t.co/9pk1qWhCk1
​#BugBounty #WebSecurity #infosec

[TvM @tvmpt]

My Twitter algorithm is convinced I need more low-quality content and questionable influencers. 🤦 I'm fighting back!

Send me your best recommendations for top-tier #Cybersecurity and #BugBounty accounts to follow. Help me fix my feed before it's too late! 😟

[TvM @tvmpt]

Great writeup — concise + well-explained. A fantastic primer for new bug bounty hunters just getting started, perfect for learning how small issues chain into account takeover👉 https://t.co/SwUfwCKJ04
by @j_zere
#bugbounty #appsec #infosec

[TvM @tvmpt]

@zseano Wishing you comfort and peace in this time of sorrow.

[TvM @tvmpt]

@_jensec For something more advanced that might involve reverse engineering, you have this channel. It's helped me a lot in the past...
https://t.co/6vHxlg7dzt
By @SecFatal

[TvM @tvmpt]

@_jensec Sometimes ssl unpining is not trivial and a quick and easy solution for analyzing requests is to use Frida scripts directly and log everything that is http...

[TvM @tvmpt]

15 damn years! 😬#MyXAnniversary

[TvM @tvmpt]

@HusseiN98D @Bugcrowd Well done. Without going into the details of the methodology, using a purely manual approach what categories have you found to be the most prevalent?

[TvM @tvmpt]

@irsdl @PortSwigger I thought I was the only one making these simple mistakes... 😅

[TvM @tvmpt]

Resolutions for 2025:
❌ read the books I bought
❌ finish the udemy courses
❌ finish all the @PortSwigger labs
❌ read bookmarked articles
❌ view all YouTube "watch later" videos

✅