Whac

Security enthusiasm || Learner

[Godfather Orwa 🇯🇴 @GodfatherOrwa]

Slide of my talk
In @bsidesahmedabad

https://t.co/oPwkDTKNfn

#bugbountytips
#bubbountytip
#bugbounty

[Whac @wangjack19]

@HusseiN98D looking forward

[Whac @wangjack19]

@samwcyo @_specters_ @bbuerhaus @xEHLE_ @iangcarroll @sshell_ @infosec_au @NahamSec @rez0__ Legend，looking forword writeup of John Deere

[Whac @wangjack19]

@bazzounkassem @yaalaab thanks

[Whac @wangjack19]

@AMakki1337 @Twitter Hi,sir! where i can find this writeup

[Whac @wangjack19]

@OriginalSicksec @Hacker0x01 Looking forward some writeups about it

[Whac @wangjack19]

@OriginalSicksec @Hacker0x01 Cool man

[Whac @wangjack19]

@NahamSec @HusseiN98D @Yassineaboukir Hey，cool hackers！Any plans to publish the slides and videos?

[JS0N Haddix @Jhaddix]

When you look up your target's ASN you'll find their ipv4 & ipv6 ranges.

Here's a one-liner to request all the webserver's SSL certificates and parse them for NEW TLD's, domains, and subdomains.

#bugbountytips

[The Bug Bounty Hunter @tbbhunter]

How to test for JWT attacks?

https://t.co/5Rdxw9mAwB

[Harsh Bothra @harshbothra_]

This year (2022), I have worked on creating educational resources in various forms, such as blogs, Twitter series, mindmaps and others. In case you missed them, here are all of them:

# SecurityExplained Twitter Series:

- https://t.co/JqwwUom4eI

🧵 - 1/5

[0x496 @gkhck_]

Disclosed last 10 days (17.12.22-27.12.22)

Always try to break JWTs https://t.co/uQ6Pw38VsZ

Always check js files to get juicy stuffs https://t.co/QlMAXJnZ2H

IDORs everywhere
https://t.co/7310ZU23VJ

Business logic error based email verification bypass https://t.co/m0TSQh2lKR

[HackerContent @hacker_content]

10 types of web vulnerabilities that are often missed

🐞 HTTP/2 Smuggling
🐛 XXE via Office Open XML Parsers
🐜 SSRF via XSS in PDF Generators
🕷 XSS via SVG Files
🦟 Blind XSS

#bugbounty #pentest #hacking

Thread 🧵👇

https://t.co/c2AIi8ev8Q

[Rood @0x_rood]

All in One Subdomain Enumeration Tool

https://t.co/EeN8Wzptpi

#bugbounty #infosec

[0xRAYAN 🇸🇦 @0xRAYAN7]

Hi hackers,😁
You can use the below tool, one of the amazing tool when it comes to source code review assessment it’s going to save your time, It’s contain a huge databases with updated signatures for critical function in different programming languages.

https://t.co/vXAXXglN0t

[Hossein NafisiAsl @MeAsHacker_HNA]

#Secret10
How to find Origin IP Automatically🔭

#bugbountytips 👇🏻🧵

[ReconOne @ReconOne_bk]

Nuclei (by @pdiscoveryio) is a vulnerability detection tool used by thousands of people every day.

But only a few master it at 100%

Here is how you can improve the use of the tool 🧵 👇

#nuclei #bugbounty #bugbountytips #hackwithautomation

[Luke Stephens (hakluke) @hakluke]

Much like Amass, a lot of people don't use Nmap to its full potential. Here's a bunch of tips on how I use actually use Nmap.

If you get something out of this article, share it!

https://t.co/QzobV6hYhe

[Hossein NafisiAsl @MeAsHacker_HNA]

#CVE
CVE-2022-1388
F5 BIG-IP Unauthenticated #RCE Vulnerability

#POC
Use POST request to execute "cat /etc/passwd" command

#Shodan:
http.title:"BIG-IP®-+Redirect" +"Server"

#Nuclei:
https://t.co/p5gwsejbck

#Cyber #CyberSecurity #CyberAttack #InfoSec #Hacking #BugBounty