Youssefo

Hi

[Faav @efaav]

How I Could've Accessed 17 Trillion Microsoft Records

https://t.co/ASdR0j7rDN :)

[Max Yaremchuk @0xw2w]

Facebook Messenger for Windows RCE worth $112K via Slack/Viber DLL files override using path traversal in attachments by @vulnano https://t.co/G7GSaXovTD

[James Kettle @albinowax]

The whitepaper is live! Learn how to win the HTTP desync endgame... and why HTTP/1.1 needs to die: https://t.co/3vZ2bMx9DA

[Youssefo @YLahouifi]

@clintgibler Thank you for the mention :D

[☣ KitPloit - Hacker Tools @KitPloit]

Dorkish - Chrome Extension Tool For OSINT & Recon https://t.co/yzSoC2eVjz

[Harel @H4R3L]

Just published a writeup on my account takeover vulnerability in ChatGPT, using a really cool web cache deception technique. Waited a while to finally publish this, enjoy :)

https://t.co/P1vHoSzABX

[Omid Rezaei @omidxrz]

I just published a write-up about an account takeover where I abused reverse proxy to hijack the OAuth Code.
https://t.co/Ojq5RrMgZu

[Trickest @trick3st]

🌐 Cloud Dataset Update 🌐

Expanding beyond AWS, our workflows now enumerate GCP servers, too! This update has added 1.47 million new servers to our cloud dataset, contributing to a total of nearly 10.5 million discovered and monitored servers 🚀

https://t.co/TU0HFfwlcF

[☣ KitPloit - Hacker Tools @KitPloit]

CloudPulse - AWS Cloud Landscape Search Engine https://t.co/kVUPulTSOE

[☣ KitPloit - Hacker Tools @KitPloit]

Moniorg - Tool That Leverages https://t.co/tDg7wTxJPg Website To Monitor Domains Of A Target https://t.co/NFxFpTjTPG

[Trickest @trick3st]

Just released a new project for all you cloud enthusiasts ☁️

We’re collecting the SSL data of every AWS EC2 machine to help you with your recon. Check it out to get the data, learn how to use it, and explore the workflow behind the scenes 🚀
https://t.co/TU0HFfvNn7

[Omar Hashem @OmarHashem666]

Hello everyone, as promised, this is a detailed write-up on how I was able to get an account takeover in HubSpot Public Bug Bounty Program

https://t.co/Lz01Iqu9bA

#BugBounty #bugbountytips #Pentesting #cybersecurite #infosec ATO

[B/R Football @brfootball]

Sofiane Boufal celebrating with his mom 🥺

[Elon Musk @elonmusk]

🇲🇦🇲🇦 Congrats Morocco!! 🇲🇦🇲🇦

[张惠倩 @momika233]

Swagger-UI - from XSS to account takeovers

hxxp://x.x.x.x/index.html?configUrl=https://t.co/vrO9u1ZNG9

https://t.co/alCbaQ8V2G

#bugbountytips #BugsBunny

[Yassine Aboukir 🐐 @Yassineaboukir]

I wrote the story of exploiting a double-edged SSRF on a bug bounty program for both server and client-side impact.

https://t.co/R3U8kXUuMr

[Aditya Dixit @zombie007o]

Wrote about a cool bug @nullvoiddeath and I found in a famous blogging platform - Hashnode.

Exploiting Markdown for RCE

https://t.co/GTZv75FjSj

#bugbounty #Pentesting #Security #infosec #hacking #tutorial

[GitHub Security Lab @GHSecurityLab]

Do you want to learn how to find vulnerabilities in Google Chrome? @Nosoynadiemas just released the last exercise of Fuzzing101! https://t.co/DLeVJ5Be3T

[Laxman Muthiyah @LaxmanMuthiyah]

Apple account takeover vulnerability - https://t.co/kNK6mR9kWK