Vinothkumar Paulravi

Security Engieer

[Vinothkumar Paulravi @vinothpkumar]

Wrote a blog post on What happens if your AWS credentials are leaked on GitHub? https://t.co/MphWzkWhqc #awssecurity #bugbounty

[Vinothkumar Paulravi @vinothpkumar]

Excited to share that I’ve officially earned the ISC2 -CISSP certification!

Valuable learning experience across domains including SOC, Appsec, CloudSec, Risk management, Governance, Security leadership & security architecture.

#CISSP #SecurityLeadership #ISC2 #Infosec

[Vinothkumar Paulravi @vinothpkumar]

Wrote a blog post on how home directory path information can be effectively leveraged during Open-Source Intelligence (OSINT) investigations.
https://t.co/cosssKB0lH

[Vinothkumar Paulravi @vinothpkumar]

Freshworks has added new assets in their scope. Read the program policy for more information: https://t.co/flbnShTgEx

#hackerone #freshworks #bugbounty

[Vineeth K @DealsDhamaka]

We pay 30% income tax +
2% Health cess +
2% education cess +
10% surcharge +
18% GST +
Professional tax, road tax etc.

Is having good roads, some healthcare facilities and lower pollution a big ask ?

#Tax

[Vinothkumar Paulravi @vinothpkumar]

@LGIndia @amazonIN
I wish I shouldn't have purchased LG products. This is my first LG product purchase and you proved it destructive. It's been almost a week, AC isn't installed yet. No one is picking the call from the LB brand service center. No proper customer support as well.

[Vinothkumar Paulravi @vinothpkumar]

Wrote a blog post after a very long time - "Public Exposures in Postman Collections": https://t.co/4XpG34QdxW

#BugBounty #bugbountytips #postman

[Vinothkumar Paulravi @vinothpkumar]

@semgrep @SemgrepRegistry : We use Semgrep for our SAST solutions. Do you have plans to adopt "EPSS" in your vulnerability categorization dashboard.

[John Lambert @JohnLaTwC]

"Defenders think in lists. Attackers think in graphs. As long as this is true, attackers win."
Short 🔗: https://t.co/fosrnIo4pX
Full 🔗: https://t.co/x4rzDxwl3O

[Vinothkumar Paulravi @vinothpkumar]

@hathway #Hathway @HathwayBrdband
How to disconnect your connection? I would like to switch to @ACTFibernet .

@HathwayBrdband : It's been 4 days since I registered my request on app regarding "No Internet connection". No response yet. Being in WFH, it's difficult to work.

[Vinothkumar Paulravi @vinothpkumar]

@tatacapital @TataCapitalCare @TataCompanies 4-5 calls per day from your executives. Requested multiple times to delete my number from your database. I don't want any loan. Period

[Vinothkumar Paulravi @vinothpkumar]

@HDFC_Bank @HDFCBank_Cares #hdfcbank
In order to withdraw my own hard earned money (After paying all the taxes), I was told that I need to pay Rs.500+ GST for every 1 Lakh withdrawal.

Why do you charge so much when lot of public sector banks are giving more relaxed withdrawals.

[Vinothkumar Paulravi @vinothpkumar]

Freshworks is now public on HackerOne.
https://t.co/flbnShTOu5

#freshworks #hackerone #bugbounty #hof #halloffame

[Soumitra @Spaulify]

Did you know that @FreshworksInc grew their ARPU by 25% last year; which is the fastest rate achieved by any publicly traded #SaaS company in the world?

Full marks to @mrgirish and his team! More power to them.

[publiclyDisclosed @disclosedh1]

Freshworks started using @Hacker0x01 today: https://t.co/mjYJ3iOZPr , pays: 50$ min. #hackerone #bugbounty

[Intigriti @intigriti]

5 CSRF exploitation techniques 🧵👇

[Vinothkumar Paulravi @vinothpkumar]

Do you remember when you joined Twitter? I do! #MyTwitterAnniversary

[Mike Takahashi @TakSec]

My favorite XSS payloads:

'"><img/src/onerror=prompt()>
java%26Tab%3bscript:ale%26Tab%3brt()
<iframe src=javascript:alert()//
<s<script>cript>alert()</s<script>cript>

#xss #bypass #bugbountytips #bugbounty #hacking #infosec #cybersecuritytips

[Moblig @moblig_]

Yay, I was awarded a $4,500 bounty on @Hacker0x01!
Tip:
Target had a /?back= parameter, but payloads like javascript://alert(1) did not work.
Exploited using the following with URL-encoded ASCII tab characters:
%09Jav%09ascript:alert(document.domain)
#bugbountytips #bugbounty

[Bipin Jitiya @win3zz]

If an unsafe logger is used, an attacker can inject code and execute arbitrary commands, even if the page being accessed is a 404 page.
Always test HTTP request headers to make sure the application is handling the headers correctly.
#Security #bugbountytips #Hacking #OOB_RCE

[Antonio Reza @theantonioreza]

I'm a Head of Finance at Google.

I've interviewed 100s of candidates in my career and I know my decision within the first 7 minutes.

Do these 5 things to prepare for the interview and I guarantee you'll impress recruiters and hiring managers at your dream company: