YemSec

Bio can't be blank 😎

[YemSec @yemsec]

For Data Techies 😎

I Use Data to Solve Problems

[@ddǝɐuɐp @DanaEpp]

Check out the 5 essential books that every API hacker should read and keep on their bookshelf. https://t.co/ESpT0ESD20

[ShreKy @shrekysec]

BEST #fuzzing tools for #bugbounty hunting/web app pentesting:

1. FFUF - https://t.co/kuSKrEPod4

2. Wfuzz - https://t.co/JI1xLSdiSG

3. FuzzDB - https://t.co/OZKm4wOsoz

4. Gobuster - https://t.co/yq0fC4Tqxg

#bugbountytips #infosec #cybersecuritytips #cybersecurity #recon #CTF

[🐞Sara Badran @SaraBadran18]

Bypassing captcha by HTML manipulation🤫🔥🔥❗
--------
https://t.co/rQOrrtMlDI
-------
By @abhishake100
------
#hackerone #BugBounty 
#hackeronereport
#writeups #Bugbountywriteupspublished
#bugbountytips
#bugbountytip #Bypass
#captcha #Bypassing_Captcha

[ShreKy @shrekysec]

BEST LFI/RFI Payload lists:

1. LFI Payload List - https://t.co/VCaUGEzsxR

2. Payloadbox LFI/RFI - https://t.co/CYE7VWqKpV

3. Hacktricks Guide - https://t.co/zn2xqaiLbg

4. PayloadsAllTheThings - https://t.co/WEQ7eUFmOm

#LFI #RFI #bugbounty #bugbountytips #cybersecuritytips

[Tom Anthony @TomAnthonySEO]

Video now available for a hacking presentation I did at @Hacker0x01's H@cktivitycon in Las Vegas, back in August.

If you are into bug bounty, or security, please check it out. I present a (I believe novel) approach for attacking XSS sanitizer libraries.

https://t.co/m2Nb4qNJ3m

[kassem @kassem_S94]

Yay, I was awarded a $2,150 bounty on @Hacker0x01! for default password at admin login panel.

Tips: always try [email protected] when you found that the admin panel need an email and password https://t.co/573zhTBDV8 #TogetherWeHitHarder
#bugbountytip
#BugBounty
#Hacking

[rahmetu @sshbounty]

Yay🥳, I was awarded $750 bounty on @Hacker0x01! #TogetherWeHitHarder It's my first ever bounty. It took me 2 years to get my first payout. Yeah,it took me that long to get a reward and I am so glad I did it. A little tip for those who are struggling with bug bounty hunting

A 🧵

[Mastering Burp Suite Pro @MasteringBurp]

A nice list of @Burp_Suite tips and tricks, by @TrustedSec https://t.co/7zyuBJiNgn

[Christian W @_Wra7h]

I've been accumulating some stuff over the past couple weeks. Here's a few shellcode execution methods I've found digging through Windows APIs and the Google results after page 2. https://t.co/wj3tBW7Esp

[Mohamed M.Fouad @Flash162011]

The most interesting DEFCON30 and Blackhat2022 presentations

DEFCON30:  https://t.co/4bxV3VQ0f2

AD Trust Attacks: https://t.co/WOJHFtuYiW

BlackHat 2022: https://t.co/hmuM7IyIt6

#DEFCON30 #blackhat2022 #redteam #cybersecuirty #Pentesting #SecurityTips #bugbountytip #Hacking

[Nuclei by ProjectDiscovery @pdnuclei]

New template release includes 15 new and a total of 36 templates for Adobe Experience Manager (AEM) to check for known misconfigurations.

GitHub Release - https://t.co/K8qvZetLuE

#hackwithautomation #aem #misconfig #security #bugbounty #appsec

[prin @fuxksniper]

A small gift from my side to all bug bounty hunters.
My 8-hour long burp suite focused course is for free.
share to someone who needs it.

#bugbountytips
#bugbounty
#infosec

(rt & share + enjoy)

https://t.co/SeWA5EYHpw

[Ayoub FATHI 阿尤布 @_ayoubfathi_]

Imposter syndrome in infosec:

There are LOTs (infinite) of stuff to learn around the edges of infosec, and it’s never enough, make ...

[sǝʌǝN sɐp pᴉʌɐD @david_das_neves]

Here is a valuable GitHub Dork for finding sensitive information and credentials
[Repo] GitHub Dork - by EdOverflow
https://t.co/mfi3NOnCI8

#CyberSecurity #GitHub #Governance #Reconnessaince #OSINT

[Rahul Bhichher @rbhichher]

Account Takeover by OTP bypass by Vaibhav Kumar Srivastava https://t.co/SejYTXM1M3

[Dexter0us @0xDexter0us]

I generally don't tweet about money/bounties, but I needed to show the importance to learn about CVSS.
Here I would have lost 60% of my bounty amount ($3k) and would have to keep only $2k as the bounty without proper knowledge of CVSS.

#bugbountytips #bugbounty #Infosec

[HACKTORIA || OSINT CTF 🏴 @hacktoria]

🚨OSINT TOOLS 🧵 #OSINT

[Mohsin Khan @tabaahi_]

@AkashHamal0x01 $120,000 clickjacking https://t.co/KlZX4L7h8d

[Anton @therceman]

Bug Bounty Tip

The best place to check for SQL injection is Order By clause in query / body params.

Example:
orderby=asc,(SQL PAYLOAD)

[Hossein NafisiAsl @MeAsHacker_HNA]

#Secret9
Have you ever fuzzed with Target-specific Wordlist? 🧐

This can be much more efficient 💎

You can easily make it... 🪚

#bugbountytips 🧵👇🏻