vaZenth🇮🇳

BUG Hunter | @Hacker0x01 | @intigriti | @msftsecresponse

[PentesterLand @PentesterLandEn]

More than 10,000$ just by one service?
🚨 During Red Team or Bug Bounty engagements, you may find a Nexus Repository Manager instance and ignore it.
I reported many reports with it in h1 & bugcrowd

https://t.co/5zQTTgdSbz

#BugBounty #RedTeam #bugbountytips #bugbountytip

[Somdev Sangwan @s0md3v]

need an advantage over other hackers?

'tuff' is available for my github sponsors, a markov-chains based directory guesser.

it will release for general public with the paper and blog later this month.

[Fardeen A. 🇮🇳 🇵🇸 @insecrez]

Underrated Bug-Bounty resources for new hunters :-

awesome-firmware-security -> a github repository that pushed you to learn Firmware security and testing.

Resource - https://t.co/UCq71VcoL8

Peace and Salam✌️

#BugBounty #cybersecurity #bugbountytip #resource #GitHubVibeRiders

[Enox @csenox1]

GitLab deserializes session data from Redis using Marshal.load without integrity verification. If an attacker can write to Redis, they can achieve RCE on the Gittlab instance.

- Tested on CE 18.8.4

https://t.co/0EDdPnpkkJ

[Sakshi @Sakshi50038]

PROGRAMMING LANGUAGES USED IN POPULAR GAMES

- Minecraft (Java Edition) — Java, some C++
- Fortnite — C++ (Unreal Engine)
- League of Legends — C++ (engine), Lua (scripting)
- World of Warcraft — C++ (engine), Lua (scripting)
- The Legend of Zelda — C / C++, Assembly (older titles)
- Counter-Strike — C++
- Call of Duty Series — C++ (engine), Lua (some titles), scripting
- PUBG — C++ (Unreal Engine), Blueprint scripting
- GTA V — C++ (custom Rockstar engine)
- Doom (1993) — C
- Doom (2016) — C++ (id Tech 6 engine)
- EVE Online — Python, C++
- Among Us — C# (Unity)
- Hollow Knight — C# (Unity)
- God of War Series — C++ (Santa Monica custom engine)
- The Witcher Series — C++ (REDengine)
- Hades — C++ (Hades custom engine), Lua
- Stardew Valley — C# (XNA Framework)
- Celeste — C# (MonoGame)
- Roblox — Lua, C++ (game engine)

[Smouk @IamSmouk]

Burp Community is heavily restricted. No extensions, limited automation, key features locked behind Pro.

Caido’s free version already gives you scripting, modern performance, and real workflow control.

If you’re not paying for Burp Pro, the comparison isn’t even close.

So I'll stay with Caido...

@three_cube @DI0256 @_aircorridor @alita53390030 @co11ateral

https://t.co/fiawoEXnci

[Javarevisited @javarevisited]

https://t.co/sizWKch9sB

[Jenish Sojitra @_jensec]

Prompt injection not working? Try changing your payload to Thai and Arabic languages.

I was able to bypass multiple LLM runtime safeguard features, including Azure Content Filter, and received a total of $37,500 in bounties across programs.

[AndrewMohawk⁽ⁿᵘˡˡ⁾ @AndrewMohawk]

Two more CVEs for NextJS powered by @OpenAI codex. Dont be sleeping on it for security research, its awesome!

[NullSecurityX @NullSecurityX]

PHP mail() Command Injection to Remote Code Execution (RCE)
By abusing sendmail arguments, a simple contact form can turn into:
• Command Injection
• Arbitrary File Read
• Full Remote Code Execution
Step-by-step write-up 👇
https://t.co/d0xJNwf3fK

#CyberSecurity #BugBounty

[Aliaksandr Valialkin @valyala]

C and C++ are completely different programming languages.

C has concise syntax. It can be learnt in one day, and a typical C code is easy to read. I like C.

C++ has over-complicated syntax, which becomes more complex with every new C++ standard. I hate C++.

Whenever I see "C/C++" phrase, I instantly understand that the author of this phrase doesn't know neither C nor C++.

[Arika @Arikalabs]

https://t.co/oViEvC9mZv

[Binni Shah @binitamshah]

Kubernetes Remote Code Execution Via Nodes/Proxy GET Permission : https://t.co/zKelkkTqG9 credits @GrahamHelton3

[Math Cafe @Riazi_Cafe_en]

"Math for Programming: Learn the Math, Write Better Code"
by Ronald T. Kneusel

https://t.co/A092BxRY9B

Contents:
1. Computers and Numbers
2. Sets and Abstract Algebra
3. Boolean Algebra
4. Functions and Relations
5. Induction
6. Recurrence and Recursion
7. Number Theory
8. Counting and Combinatorics
9. Graphs
10. Trees
11. Probability
12. Statistics
13. Linear Algebra
14. Differential Calculus
15. Integral Calculus
16. Differential Equations

[vixhaℓ @TheVixhal]

https://t.co/8QMuGgh98i

[Strace @straceX]

https://t.co/1gIR8O9eox

[Strace @straceX]

This guy explains how to build an algorithmic trading hedge fund from scratch in under 6 minutes.
It may not be perfectly accurate, but it’s still wild. 🙌

[Strace @straceX]

https://t.co/5ht7WDcLVo

[AADITYANSHA @aadityansha_06]

While making a C program using a SQLlite database, I had this question in my mind
If I can write inside the disk using fopen fwrite etc.. why do I set up a SQLlite like (self-contained) database to do the same?

I'm sure you too would have thought of it once, or at least would think now

The reason is

1. Atomic transection - i.e.what if any error occurred during read or write of data ? The data is more likely to get corrupted if written directly using fopen

2. Relationship and searching

What if I have to search among 10k of data to find a particular user, from a direct fopen and fwrite
I have to load all of them inside the memory and keep searching

While with database it will do its own using index, B-trees etc..

3. concurrency - What if multiple processes try to write inside same file at same time, from direct writing it might cause overlapping issues but with Database that will manage it's queuing and all

4. Data-integrity - A database would ensure that at the place of string only string gets written not the integers

[Strace @straceX]

C has outlived every ‘C killer’ for 50 years.
Rust won’t be the first.