Vanshal Gaur

Building in Cybersecurity, Automation & AI

[Vanshal Gaur @VanshalG]

Happy to share that i have successfully passed the OSWE Exam in my first attempt. This was the best journey, learned lot of cool web exploitation techniques. Thanks @offsectraining for this Awesome Course.

#oswe #cybersecurity #infosec

[Bug Bounty Village @BugBountyDEFCON]

We’re excited to announce that Vanshal Gaur (@VanshalG) will be speaking at the Bug Bounty Village at DEF CON 33!

Stay tuned for more details on their talk, you won’t want to miss it.

#BugBounty #DEFCON #BBV #BugBountyVillage

[Vanshal Gaur @VanshalG]

I accessed private university @github repos. No exploit. Just a Classroom link.

Here’s how bearer tokens + broken trust = exposed data, impersonation, and design-level flaws.

🔗 Read: https://t.co/qWjGCIOxbr

#infosec #bugbounty #GitHub #Education #responsibledisclosure @GitHubSecurity

[OffSec @offsectraining]

See you at OffSec Live: https://t.co/YJSVIZVMQF

🟪 In today's session, @appliedtechac instructor Jake Mayhew will cover PEN-200 training at Black Hat
🟪 Tomorrow, we'll showcase how to use OffSec KAI to enhance your learning experience

[vx-underground @vxunderground]

The xz backdoor was initially caught by a software engineer at Microsoft. He noticed 500ms lag and thought something was suspicious.

This is the Silver Back Gorilla of nerds. The internet final boss.

[GISEC GLOBAL @GISECGlobal]

💰THE GIST OF IT💰 Just when you thought winning a mastermind’s challenge was hard, four heroes went and hacked their way to it at the CyTaka World Cyber Championship! Congrats to our winners - you out-pwned the challenge and rolled in $20,000 each! 🙌 #GISECGlobal

[The SecOps Group @TheSecOpsGroup]

Exploiting IDORs - A compilation of some neat, new and crazy examples!

New Blog from @TheSecopsgroup

https://t.co/9qY22UdM27

[Vanshal Gaur @VanshalG]

@EduMinOfIndia Diksha application needs some serious security.

[Adrian ⛩️ Hetman 🐺 | 📓+🖋️+☕️ @adrianhetman]

How to make a jump from Web2 hacking to Web3 hacking?

This is the question I started getting over DMs and I decided to answer all of them in a form of a Twitter thread so other can learn to.

knowledge will be compressed so keep that in mind🙃

Here we go!

🧵👇

[root@MAALP🇮🇳 @MAALP1225]

I just published my blog: Pwning OTT Platform: File Upload to RCE
https://t.co/zxV4NysC1x

#bugbountytips #BugBounty #RCE
#cybersecurity

[Vanshal Gaur @VanshalG]

Microsoft Exchange Server SSRF Exploit.

https://t.co/7ExDbXWWrO

#bugbounty #infosec

[Vanshal Gaur @VanshalG]

@intigriti SSTI line#5

[Vanshal Gaur @VanshalG]

@DKidolle Well i did it for learning purpose.

[Vanshal Gaur @VanshalG]

Got My First CVE 💜 (CVE-2021-23426)

https://t.co/haMqMf6Hbi

#Infosec #bugbounty

[CySuite @CySuite_]

Yet another Account Takeover technique.

Seperator:
[email protected],[email protected]
[email protected]%[email protected]
[email protected]|[email protected]

Array:
{"email":["[email protected]","[email protected]"]}

Follow for more #infosec updates and #bugbountytips

[Vanshal Gaur @VanshalG]

@CVEannounce I already sent mail but didn’t get any updates.

Here’s the reference number: 1100572

[Vanshal Gaur @VanshalG]

Hey @CVEannounce
Can you please update me about the Reference ID: 1100572
There's no response on CVE ID that I applied some time ago.

[Vanshal Gaur @VanshalG]

@NISTcyber

[Vanshal Gaur @VanshalG]

@tomorrowisnew_ @CVEannounce Its been more than a month. Idk i saw some replies with this account.