Prasanth @Prasanthpror

bug hunter Joined July 2020

Tweets

406
Followers

572
Following

3K
Likes

6K

KNOXSS @KN0X55

a year ago

Not a #KNOXSS Pro user yet? Here's a 5% COUPON! 🤩👏 KNXHUNT05 5% OFF for our One Time Payment plans! (3, 6 or 12 months) ➡️ Like and share this one to get a chance to win a 100% OFF coupon next week! #GIVEAWAY🤯 Sign up now! 😎👇 knoxss.me #XSS made easy.

6 83 130 34K 6

Ben Sadeghipour @NahamSec

2 years ago

I have a one year @PentesterLab voucher for one random person retweeting and replying to this tweet with #nahamcon2023 :)

558 517 546 110K 8

VulnVision @VulnVision

2 years ago

"🎉 GIVEAWAY ALERT! 🎉 We're excited to announce that we've made some improvements to our service at VulnVision! To celebrate, we're giving away 5 FREE accounts to lucky winners. To enter, simply follow @VulnVision and retweet this tweet. Winners will be announced next week.

9 94 64 14K 2

Barbarosa @Barbarossa0x

3 years ago

You cannot master XSS without JS , also SQLi without SQL , upload file vuln without php or at least how the web app works ..Using tools like sqlmap for every sql flaw you find (or you guess by seeing user field) is a waste of time, and if the tool doesn't work you will loose alot

2 30 175 0 32

Osama Sadoqi 🇲🇦 @Osaqii

4 years ago

Censys dorks : services.http.response.body:"keyword" services.tls.certificates.leaf_data.subject.organization: services.tls.certificates.leaf_data.subject.common_name activate virtual hosts search (see img) #BugBounty #Bughuntingtips

0 4 12 0 10

Download Image

REMØNSEC @remonsec

4 years ago

I have checked every single page of this repo Real world scenarios with proper reference Must give it a look and support author @daffainfo for his excellent work #bugbountytips #infosec #cybersecurity github.com/daffainfo/AllA…

9 282 596 0 242

ᴀʙᴅᴇʟʀʜᴍᴀɴ ᴢᴀʏᴇᴅ @aufzayed

4 years ago

if you want to find more endpoints do not use Linkfinder only, use haklistgen to generate a wordlist from javascript files, then use this wordlist to fuzz the website or the endpoints you found with linkfinder 🔗 gist.github.com/aufzayed/6cabe… #BugBounty #BugBountytips #recon

4 100 207 0 90

Download Image

3th1c_yuk1 @3th1c_yuk1

4 years ago

My writeup on how I got unauthenticated access to a cloud portal. Hope you guys love this 😄 3th1c.medium.com/unauthenticate…

0 15 44 0 12

Keshav Malik @g0t_rOoT_

4 years ago

Found Missing DMARC Records using Vulnerable.Live? 🙌 Download Vulnerability Report 📑 for missing DMARC records using Vulnerable.Live 🔥 Check out vulnerable.live today and Keep #hacking !! 💰 #bugbounty #bugbountytips #infosec

0 2 9 0 1

Download Video

Prasanth @Prasanthpror

4 years ago

Using simple dork target.com "credentials" found a admin credentials Tip:- Always look for credentials in the github repository #bugbounty #bugbountytips Yay, I was awarded a $200 bounty on @Hacker0x01! hackerone.com/prasanthpror #TogetherWeHitHarder

2 10 55 0 15

Muhammad Daffa @daffainfo

4 years ago

Go scripts for checking API key/access token validity github.com/daffainfo/Key-… #bugbounty #bugbountytips #infosec #pentest

10 287 613 0 212

Download Image

Prasanth @Prasanthpror

4 years ago

Got a bounty in public program, Always check GitHub for sensitive keys Tip:- Manually check the GitHub repository #bugbountytips #bugbounty Yay, I was awarded a $200 bounty on @Hacker0x01! hackerone.com/prasanthpror #TogetherWeHitHarder

4 6 58 0 8

Prasanth @Prasanthpror

4 years ago

target is behind waf,checked shodan and censys, found a origin ip reported and got a nice bounty I earned $200 for my submission on @Bugcrowd bugcrowd.com/prasanthrpro #ItTakesACrowd

4 1 63 0 6

Purab Parihar @purab_parihar

4 years ago

SSRF URL for Cloud Instances🔥 (1/4) #Oracle Cloud http://192.0.0.192/latest/ http://192.0.0.192/latest/user-data/ http://192.0.0.192/latest/meta-data/ http://192.0.0.192/latest/attributes/ @e11i0t_4lders0n @_codeh4ck3r @kuldeepdotexe @CyberSec_Akuma #StackSmashers #bugbounty

1 98 177 0 57

Thái Vũ @thaivd98

4 years ago

Hey everyone! I have written a blog about Some ways to find more IDOR in bug bounty/pentest. This is my first blog about bug bounty. 16521092.medium.com/some-ways-to-f… Happy reading and happy hacking! #bugbounty #bugbountytips

20 311 699 0 247

Kunal Pandey @kunalp94

4 years ago

During a recent finding, I was able to find signed bucket disclosure using the question mark "?" symbol. Here is the logic behind the exploit : (1/8)

4 50 208 0 71

Alexander Mironov @sh1yo_

4 years ago

x8 v2.0.0 released. Major changes: - Implemented concurrency. Now it is possible to check thousands of parameters almost instantly. (See example below. 26k parameters in 25 seconds) - Added HTTP/2 support #bugbountytips github.com/Sh1Yo/x8