hhack0x7 @Hhack0x7

A lazy Ethical Hacker root@hhack0x7:~# pwd Joined November 2019

Tweets

73
Followers

70
Following

702
Likes

268

Luke Stephens (hakluke) @hakluke

2 years ago

Bypassing WAFs just got easier: Trace the origin host behind a reverse proxy with hakoriginfinder! ✅ Unravel the WAF mystery ✅ The art of discovering IP addresses ✅ Introducing the 'Hakoriginfinder' Read this 👇 labs.detectify.com/ethical-hackin…

6 93 306 21K 204

Intigriti @intigriti

2 years ago

4 tools to find hidden query parameters! 🛠️ A thread! 👇

3 76 216 46K 216

ProjectDiscovery @pdiscoveryio

2 years ago

🚨 Major #Nuclei Update 🚨 Nuclei v3 is out TODAY! There are TONS of new features in this #OpenSourceSecurity update and we're excited to share it with our community. Check out some of the available features of Nuclei v3 in this blog 👇 nux.gg/nuclei3

8 113 303 41K 55

iFenix @dlymension

2 years ago

PoC exploit for CVE-2023-41993 Webkit JSC 👀 iOS 17.0 and Below.. Bug fixed at iOS 17.0.1 By - @po6ix github.com/po6ix/POC-for-…

10 48 266 70K 28

shubs @infosec_au

2 years ago

Really love this WAF bypass technique documented and found by @irsdl in 2017: soroush.me/downloadable/r… - still super effective today!

9 119 429 62K 267

InfoSec Community @InfoSecComm

2 years ago

Learn more about Docker Security by using Syft and Grype via this wonderful article published at InfosecWriteups, written by Gowthamaraj Rajendran here: infosecwriteups.com/devsecops-dock…

0 12 39 7K 12

JS0N Haddix @Jhaddix

3 years ago

@NahamSec @bbuerhaus @Rhynorater @arneswinnen @stokfredrik @infosec_au Collab more. Make friends sooner. Don’t stick with programs that don’t respect your time. Don’t over index on community toxicity.

2 5 28 3K 0

Frans Rosén @fransrosen

3 years ago

Here's my talk for the RCE on Apple I found using hot jar swapping youtu.be/A-O-irpqUWQ And here's the demo code you can play with to test the flow I abused: github.com/fransr/hot-jar…

4 75 342 43K 58

Download Image

Rapid @Rapid_API

3 years ago

API security best practices 👇 { 1 / 6 }

199 1K 6K 0 3K

Download Image

Ryan Basden @_rybaz

3 years ago

For a long time, I thought the only way to run a successful pentesting practice was to have access to expensive tooling and software. This is completely untrue. Here's what we use internally at @risk3sixty to run pentesting engagements (for little to no cost whatsoever):🧵

44 324 1K 0 772

hhack0x7 @Hhack0x7

3 years ago

Yay, I was awarded $4000 bounty from Apple. #BugBounty #CyberSecurity #infosec #PenetrationTesting

1 0 0 0 0

Download Image

Luis Madero @_Y000_

4 years ago

🔴DB Connection String and Password Exposure (Unauthenticated) 🔴 #Dork intext:"index of" inurl:"/core/config/" #Payloads /core/config/databases.yml /core/config/parameters.yml #poc http://<site>/core/config/(databases.yml - parameters.yml)

0 109 259 0 67

Download Image

Detectify @detectify

4 years ago

throw[onerror]=[eval],`=alert(\x27Welcome, @MohammedShine8!\x27)`

3 11 36 0 1

Suraj @PwnFunction

4 years ago

New Video! Binary Exploitation 0x02 Why you should Close Your Files youtu.be/6SA6S9Ca5-U

5 71 285 0 31

Download Image

Janggggg @testanull

4 years ago

I just published Microsoft Exchange From Deserialization to Post-Auth RCE (CVE-2021–28482) link.medium.com/a2T3FpCjLfb

6 267 654 0 83

blackorbird @blackorbird

4 years ago

Microsoft Office Remote Code Execution Vulnerability(CVE-2021-27059) Internet Explorer Remote Code Execution Vulnerability(CVE-2021-27085) 0day(exploit) in the Wild But no one talk about it😅 msrc.microsoft.com/update-guide/v… msrc.microsoft.com/update-guide/e…

3 190 387 0 28

Download Image

Nagli @galnagli

4 years ago

XSS payload to keep on your notes: <script>alert(1)</script> -> nginx block "><img src=x onerror=alert(1)> -> Wordfence block ax6zt%2522%253e%253cscript%253ealert%2528document.domain%2529%253c%252fscript%253ey6uu6 -> successful execution #BugBountytips #BugBounty

11 298 730 0 246

Download Image

Somdev Sangwan @s0md3v

4 years ago

pretty much what hackers do all day

2 11 101 0 0

Download Image

Hacking Articles @hackinarticles

4 years ago

Credit @pavan2318 hackingarticles.in/nax-tryhackme-… #oscp #ctf #tryhackme @RealTryHackMe #infosec #hacking

0 6 7 0 0

Nuclei by ProjectDiscovery @pdnuclei

4 years ago

Scanning networks to detect unauthenticated MongoDB instances using nuclei templates - 𝙣𝙪𝙘𝙡𝙚𝙞 -l 𝙝𝙤𝙨𝙩𝙨.𝙩𝙭𝙩 -𝙩𝙖𝙜𝙨 𝙢𝙤𝙣𝙜𝙤𝙙𝙗 #hackwithautomation #pentest #security #bugbounty