makarov @JacoubRob

toujours derrière ton pare-feu. Algeria Joined June 2020

Tweets

539
Followers

37
Following

501
Likes

3K

James Kettle @albinowax

5 months ago

I just built a custom action to let you test for race conditions with a single click! No tab groups required, and it uses the cutting edge single-packet attack under the hood.

10 63 356 24K 178

Download Image

1/6 Tired of manually testing every parameter hoping to find an XSS? Yeah us too. It's time-consuming, repetitive, and let's be honest, not the most exciting part of the job. So we built a Burp Suite extension @onetestfr to automate the entire process (Caido coming soon).

5 13 106 7K 96

Download Image

nisedo @nisedo_

2 years ago

Security Researcher walks into a bar. Orders a beer. Orders 0 beers. Orders 999999999 beers. Orders a lizard. Orders -1 beers. Orders a sfdeljknesv.

40 29 219 17K 11

YesWeHack ⠵ @yeswehack

5 months ago

Want to know how to exploit HTTP headers? From basic to advanced techniques, our guide to HTTP header hacks gives you invaluable knowledge for securing bug bounties 💸 👉 yeswehack.com/learn-bug-boun… #YesWeRHackers #BugBounty #BugBountyTips

0 20 94 7K 55

Download Image

Burp Suite @Burp_Suite

5 months ago

🔌 Introducing the Burp Suite MCP Server extension Join us this Tuesday at 4pm BST (11am EDT) to see how you can leverage MCP for powerful AI integrations with Burp Suite. Live demo + Q&A with the devs. Join the PortSwigger Discord to attend 👉 bit.ly/4jwJDHt

0 9 100 5K 39

Download Image

X @TheMsterDoctor1

5 months ago

From Upload to Shell: Advanced RCE Techniques via File Extensions, PHP Uploads, and SSTI Exploitation [1/25] [Advanced Thread] How I escalated three common web app features into full Remote Code Execution: 1.Shell injection via filename extension 2.Arbitrary PHP…

4 144 499 30K 403

Download Image

André Baptista @0xacb

5 months ago

Black-box regex fuzzing to bypass validations with REcollpase. Just pushed a new update 👀 Repo: github.com/0xacb/recollap…

3 83 386 18K 272

Download Image

JS0N Haddix @Jhaddix

6 months ago

Wanna make some cash with your AI Hacking skills? Some of my friends @GraySwanAI are running a paid agent hacking competition! ⚔️ app.grayswan.ai/arena/challeng…

4 12 58 4K 19

Download Image

Devansh (⚡, 🥷) @0xAsm0d3us

6 months ago

Everything I learned about Prompt Injection Attacks in last 2 years is here in this guide. This should be your stepping stone to the field of AI Red Teaming. Link in comments 👇

9 130 620 40K 781

Download Image

مُحمد @0xSekiro

6 months ago

الحمد لله Tip: modify origin header from target.com to attacker.com Why not p2 ⬇️ #BugBounty #BugBountytips #BugBountytip

9 15 212 11K 77

Download Image

🇷🇴 cristi @CristiVlad25

6 months ago

this is a really good primer on the wayback machine medium.com/@learningstuff…

0 13 76 4K 45

makarov @JacoubRob

6 months ago

Who wants to collaborate on this @yeswehack private program: yeswehack.com/programs/82bcf… #YesWeRHackers

2 0 1 76 1

z1 @vcantry

7 months ago

Just a bypass tip /admin/user/list -＞ 403 /admin/user/list;.js -＞ 200 hh~

0 21 137 5K 105

Intigriti @intigriti

4 years ago

Very impactful #BugBountyTip by @m4ll0k: whenever you see an @Company.com Google login for restricted assets, check if you can leverage the &hd=company.com parameter in the URL to login or sign up with your own e-mail address. #BugBountyTips

3 124 424 0 116

Download Image

makarov @JacoubRob

7 months ago

Bug Bounty friends, I just published my first write-up please give me feedback! medium.com/@makarov_bm/th… #bugbounty #bugbountytips

0 0 2 62 0

Pomme @pxmme1337

7 months ago

Don’t go out of scope

19 73 643 53K 54

Download Image

Ben Sadeghipour @NahamSec

8 months ago

I'm honestly still in disbelief... grateful to receive a $100k bounty from @Meta. Feels surreal. Sharing this to show that with time and dedication, it's possible. This was my first and only submission to Facebook - something I've been chasing for a decade! 🙏 Big thank you to…

561 472 12K 1.1M 2K

Download Image

Swissky @pentest_swissky

7 months ago

Android Web Attack Surface ndevtk.github.io/writeups/2024/…

1 35 174 9K 111

Will Gates @WllGates

7 months ago

After finding a bug you can use httpx -tech-detect This flag will allow you to see other subdomains with similar technology and can look for that same issue there credit: @remonsec #BugBountytips #BugBounty

1 27 231 8K 124

Download Image

@ddǝɐuɐp @DanaEpp

7 months ago

Let me show you how to modify API requests during testing to corrupt data and manipulate code flow, allowing you to uncover new vulnerabilities. #apihacking #apisecurity danaepp.com/attacking-apis…