Surya S @Surya_Appsec

Senior Security Consultant @ Netsentries bugcrowd.com/Surya_Appsec Tamil Nadu, India Joined April 2020

Tweets

298
Followers

121
Following

772
Likes

2K

zhero; @zhero___

a year ago

happy to release my new article entitled: Next.js and cache poisoning: a quest for the black hole zhero-web-sec.github.io/research-and-t… good reading;

38 179 771 82K 478

Download Image

Discover subdomains and assets across global IPv4 with our advanced search capabilities. As an alternative to #Shodan, our tool offers comprehensive asset discovery features. Sign up now at rsecloud.com and get 2 months of the Starter Plan for free!

0 3 0 626 1

Download Image

Tur.js @Tur24Tur

2 years ago

I've just developed my first @Burp_Suite Bambdas specifically to identify OWASP Top-25 Parameters potentially vulnerable to XSS, SSRF, RCE, SQLi, LFI, and Open Redirect. For easy code access, visit GitHub: github.com/BugBountyzip/B… #Bambdas #Java

8 170 678 90K 448

Download Image

Hussein Daher @HusseiN98D

2 years ago

Successfully bypassed a SSRF WAF by using a combination of IPV6 + Unicode. Payload for Metadata instances: http://[::ⓕⓕⓕⓕ:①⑥⑨。②⑤④。⑯⑨。②⑤④]:80 Check images for response difference between 169.254.169.254 and the above payload I shared 🔥 #bugbounty #infosec #waf

55 529 2K 182K 876

Download Image

hatice @herturk_

2 years ago

I have developed a small @Burp_Suite extension that allows you to copy HTTP requests without including cookies or tokens. I hope it will help you. Enjoy! 🧡 github.com/haticeerturk/r…

15 107 587 39K 141

Download Gif

bugcrowd @Bugcrowd

2 years ago

Breaking into bug bounty?💻 Skip the cash chase! Focus on skills, rep, and non-paying programs first. Unpopular advice (we know), but crucial if you want to smash bugs in those bigger programs. 💡 Don't miss @TechAlissa's sly tips in @SearchSecurity: bit.ly/45wR2QL

3 17 55 12K 21

Omid Rezaei @omidxrz

3 years ago

Find Origin IP. 1. subdomain enumeration. 2. Save All A records in IPs.txt. 3. Remove CDN IP. 4. Fuzz Host Header on IPs.txt with list of all subdomains. for ip in $(cat ip.txt);do echo $ip && ffuf -w ./subdomains.txt -u http://$ip -H "Host: FUZZ" -s -mc 200; done

28 179 569 33K 321

Download Image

Gwendal Le Coguic @gwendallecoguic

2 years ago

Using dnshistory.org you can find hosts that have a specific CNAME #bugbountytips

1 23 71 12K 53

JS0N Haddix @Jhaddix

2 years ago

🚀 ffufPostprocessing - an ffuf extension script by @damian_89_ when running "-o -od -of json" You can run ffufPostprocessing on the output after and get: github.com/Damian89/ffufP…

8 53 203 31K 76

Download Image

Omkar Bhagwat @th3_hidd3n_mist

5 years ago

Sometimes you might find a pendo-integration key in a js file. Here are some curl commands to increase impact. Run them at your own risk as they might return PII!

1 3 5 0 5

Hossein NafisiAsl @MeAsHacker_HNA

3 years ago

Exploiting Out-of-Band XXE in the Wild from P4 to P1 🏆 #bugbountytip

8 30 104 14K 54

Wes Bos @wesbos

3 years ago

Nice free ngrok alternative. Use Cloudflare tunnels to proxy your localhost application to the outside world with https. 1. brew install cloudflared 2. cloudflared tunnel --url http://localhost:6969

86 980 7K 671K 4K

Download Image

Mehdi @silentgh00st

3 years ago

Here is how I managed to find multiple Payment Bypass vulnerabilities on the same target. 📌THREAD📌 Thanks to @irsdl for his awesome research about "Common Security Issues in FinanciallyOriented Web Applications" Which can be found here : soroush.secproject.com/downloadable/c… #bugbountytip

32 271 864 60K 440

Download Image

RUSHII🦁🇮🇳/ @u1tran00b

3 years ago

@G0LDEN_infosec Agreed! But here are a few approaches that are useful in #bugbounty hunting. :) 1) gist.github.com/m4ll0k/31ce050… by @m4ll0k 2)docs.google.com/presentation/d… bugbountyhunter.com/guides/?type=j… by @zseano @BugBountyHunt3r 3) youtu.be/HmDY7w8AbR4?t=… Application analysis by @Jhaddix

4 37 76 4K 58

Geekboy @emgeekboy

4 years ago

Got random tokens as part of manual search or automation but not sure if the found tokens/keys are valid or which service they belong to? now it's possible to automate the process using nuclei templates. More details - blog.projectdiscovery.io/nuclei-v2-5-3-… #recon #hackwithautomation

2 45 194 0 33

Download Image

N$ @nav1n0x

3 years ago

Thanks all, with "Ghauri" by @r0oth3x49 (github.com/r0oth3x49/ghau…) It took me just minutes. this is the first-time I used it...wow.

0 30 112 7K 54

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

3 years ago

Recon Skills and Tips by God Father Orwa Link:docs.google.com/presentation/d… Pwning Admin Panels Methodology by Ahsan Khan Link:drive.google.com/file/d/10CC3n-… #infosec #bugbountytips #CyberSecurity

5 112 233 18K 115

bugcrowd @Bugcrowd

3 years ago

Bug Hunters: @riphunte4 @RootxRavi @s4thi5h_infosec @bughuntersurya

0 3 4 0 0

Ravindra Lakhara 🇮🇳 @RootxRavi

3 years ago

Easy P1 🙃 1: Collect all the Js files by using the developer tool on mozila 2: Run Link Finder Tool on that JS files which you got from dev tool or use Js Miner tool 3: Now check manually sensitive keyword js file #bugbounty #bugbountytips #security

31 331 1K 0 544

Download Image

shubs @infosec_au

3 years ago

I just published a blog post for the people that want to get into bug bounties. I hope it helps people that are thinking about doing bug bounties, but haven't started yet. It explains what to expect and how to deal with common problems / situations: shubs.io/so-you-want-to…