校长 @OnNetFiT

Web2 Bug Hunter｜Red Team｜Web3.0 Scientists｜21-year-old | 微信公众号：不懂安全的校董｜Bilibili：不懂安全的校长 x.com/logout?redirec… Reunion District, Dallas Joined January 2019

Tweets

518
Followers

623
Following

2K
Likes

584

校长 @OnNetFiT

a week ago

I successfully discovered vulnerabilities in MacOS applications through AI analysis. mp.weixin.qq.com/s/nlrA1UG-HK3i… #0day #BugBounty #Apple #MACOS

0 0 4 148 1

校长 @OnNetFiT

3 months ago

通过这些方法，可以很轻松的窃取钱包，窃取数据等等！搞web3的要注意别开人脸识别了 mp.weixin.qq.com/s/Pvltw3SrPl1g… #web3 #web #security #AI #CyberSec #CyberSecurity

0 0 4 199 1

Intigriti @intigriti

4 months ago

New tool drop by @marcolivermunz! 🛠️ SQLTimer is a simple, blazing-fast tool to scan for time-based SQL injections! 😎 Check it out! github.com/c1phy/sqltimer

8 57 329 15K 270

Download Image

AdaptixC2 v0.4 is out github.com/Adaptix-Framew… * New Linux/MacOS "gopher" agent * TCP/mTLS external listener for "gopher" agent * New internal TCP listener for "beacon" agent * Screenshot storage Changelog: adaptix-framework.gitbook.io/adaptix-framew…

5 111 456 20K 239

Download Image

Ninad Mishra @NinadMishra5

5 months ago

Use Burp Suite's match and replace to replace payloads in the request's body, this easily bypasses client-side validation and saves a lot of time while testing #bugbountytips

1 9 57 3K 34

Download Image

C2 Matrix | #C2Matrix @c2_matrix

5 months ago

Added peeko to #C2Matrix a browser-based XSS C2 for stealthy internal network exploration via infected browser: github.com/b3rito/peeko

3 17 67 5K 42

HackerRalf @hacker_ralf

5 months ago

AdaptixC2 v0.3 is out github.com/Adaptix-Framew… New: * Linking Agents (eg SMB) * Sessions Graph * Agent marker * Health checker And more in the changelog: adaptix-framework.gitbook.io/adaptix-framew…

3 67 244 12K 127

Download Image

Ankit Anubhav @ankit_anubhav

6 months ago

Hackers are using Gamma AI to create phishing page redirectors. To make things worse, the URL of these AI assisted webpages is on gamma.app domain itself, making it challenging for vendors to detect. The phishing makes you solve cloudflare style captcha, and will…

3 22 84 9K 54

Download Image

校长 @OnNetFiT

6 months ago

Telegram has a super serious bug, click on the file is hacked mp.weixin.qq.com/s/RiFgghK96QN-… #telegram #web3 @telegram #0day

0 4 18 3K 4

Download Image

Intigriti @intigriti

5 years ago

Got an XSS? Try to 'upgrade' it to SSRF to get a bigger #BugBounty. Thanks for the #BugBountyTip, @georgeomnet! ❓Never head of ESI Injection before? Check out this @defcon talk: youtube.com/watch?v=VUZGZn… #BugBountyTips #HackWithIntigriti

0 138 362 0 124

Download Image

payloadartist @payloadartist

6 months ago

🛠️ Rogue - An open source web app vulnerability scanner that uses LLM Agents Cool, isn't it? #infosec #bugbounty #cybersecurity

1 18 66 6K 48

Download Image

elsec @adrielsec

6 months ago

they don’t fix it and just let it keep spamming duplicates in triage… A MESS!!! payload XSS: /*-/*`/*\`/*%27/*%22/**/(/*%20*/oNcliCk=alert()%20)//%0D%0A%0d%0a//%3C/stYle/%3C/titLe/%3C/teXtarEa/%3C/scRipt/--!%3E\x3csVg/%3CsVg/oNloAd=alert()//%3E\x3e #bugbountytips #bugbounty

2 55 320 11K 152

Download Image

Intigriti @intigriti

6 months ago

Top places to find PDF generators potentially vulnerable to SSRF: 🤑 • Reports (for example, analytics reports or any other report types) • Receipts & invoices (especially in e-commerce targets) • Account archives/statistics • Bank and account balance statements •…

1 23 155 10K 103

Rad @rad9800

6 months ago

I've uploaded recordings of two talks I gave in OnlyMalware last year 🧐 Getting Started with Windows Malware Development youtu.be/n2yWgyXB0uU Random Malware Techniques - Static evasion - ETW TI evasion - Usermode evasion (DLL callbacks/VEH/HWBPs) youtu.be/FWpd-Tk3818

1 83 331 16K 229

Download Image

校长 @OnNetFiT

6 months ago

Manus has a serious overreach vulnerability, and you can use Manus even if you don't have an invite code #Manus #AI

10 1 9 7K 6

Download Image

Mr_mars_hacker @Mr_mars_hacker

6 months ago

Read " Uncovering zero click Account takeover" medium.com/@jeetpal2007/u…

0 12 72 4K 33

Intigriti @intigriti

6 months ago

Found a PDF generator processing HTML? 🧐 Try one of the following payloads to escalate your initial injection vulnerability into an SSRF! 🤑

2 20 150 7K 114

Download Image

Coffin @coffinxp7

6 months ago

ffuf -w subdomains.txt:SUB -w payloads/backup_files_only.txt:FILE -u https://SUB/FILE -mc 200 -rate 50 -fs 0 -c -x http://localip:8080 payload:github.com/coffinxp/paylo…

Kanhaiya Sharma 🇮🇳 @krishnsec

7 months ago

ffuf -w subdomains.txt:SUB -w payloads/backup_files_only.txt:FILE -u https://SUB/FILE -mc 200 -rate 50 -fs 0 -c -x http://localip:8080 payload:github.com/coffinxp/paylo…

11 32 433 66K 229

Download Image

6 104 680 39K 668

chux @chux13786509

6 months ago

Another bug 🔥 XSS by uploading a file with javascript in its name! Got to say - this method has pretty high success rate on many targets😜 My payload (file name): cv.pdf<img src=nothing onerror=alert("chux")>

9 45 502 23K 330

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

6 months ago

A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery⚔️ - github.com/Invicti-Securi… #infosec #cybersec #bugbountytips