secshad0w1 @TechRubin

Cyber Security Gujarat, India Joined February 2018

Tweets

252
Followers

16
Following

269
Likes

138

André Baptista @0xacb

2 months ago

Have you checked out @hadriansecurity's subwiz? It's a recon tool that uses ML to predict and resolve subdomains👇

3 51 253 14K 240

Download Video

New Hackyx Version 🚀🚀 hackyx.io - AI Search Mode - New dashboard to manage content - Automatically fetch new write-ups, bug reports and articles - RSS feed crawler - A queue system to handle jobs - Content with embeddings for better search - Filtered content to…

5 43 153 9K 122

Download Image

André Baptista @0xacb

5 months ago

This email domain confusion technique from @garethheyes is so cool! Some really weird behavior can be found between different mail agents and the right characters/symbols 🤔

3 87 605 34K 507

Download Image

Hack3rScr0lls @hackerscrolls

5 years ago

Sometimes you can control the href value in HTML tag<a>. So it's a good place for XSS payload! We've created a scheme how to use various encodings in href to bypass filters. gist.github.com/hackerscrolls/… @XssPayloads #BugBountyTip #Bypass

0 177 427 0 119

Download Image

Kévin GERVOT (Mizu) @kevin_mizu

10 months ago

I'm thrilled to finally share my research on HTML parsing and DOMPurify at @grehack 2024 📜 The research article is available here: mizu.re/post/exploring… The slides are available here: slides.com/kevin-mizu/gre… 1/3

18 180 704 75K 375

Download Image

s1r1us @S1r1u5_

10 months ago

@NahamSec Pick a niche, become an expert, find bugs maybe even 0days or reverse n-days, and write blogs. Even if you don’t hit those $100k bounties, it’ll be a stepping stone toward a $100k job. What niche? How to pick? Examples? infosec being so vast from web3 sec to web2, mobile,…

19 199 904 88K 884

encodedguy - jsmon.sh @3nc0d3dGuY

12 months ago

🚀🚀Launched Reverse JS Search in jsmon.sh today!! Let's say you want to know, an IP address 10.0.0.1 is in how many JS urls? Or, a particular hostname, api path, email or a GQL query is present in which JS urls? Here's how you can do this!!

2 15 63 8K 46

Download Video

VAIDIK PANDYA @h4x0r_fr34k

2 years ago

Daily Notes : Day 86 Content Security Policy Bypasses - Part 1 1. Unsafe Inline Content-Security-Policy: script-src google.com 'unsafe-inline'; Working payload: "/><script>alert(1);</script> 2. Unsafe Eval Content-Security-Policy: script-src…

0 14 73 6K 41

Will Gates @WllGates

2 years ago

I just published my new tool DirDar; DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it Link on Github: github.com/M4DM0e/DirDar credit: @M4dM0e #bugbountytips #bugs #Hackerone #BugCrowd #hackingnews

2 105 329 18K 217

Download Image

Ankita Tripathi @ankitatr_

2 years ago

People start with 3 LPA and reach 30. People start with sharing a room in an apartment to living alone in a 2bhk. People start with nominal English sentences to being fluent. People start with being camera shy to being great creators. People start with ordering food online with…

133 487 5K 317K 897

Tony @TJ_Null

2 years ago

After a few months of reviewing the latest PWK course, I have decided to refactor my list to create a new list of VM's for those who are preparing for the PWK/OSCP. Here is the link to see the new list: docs.google.com/spreadsheets/d…

13 153 463 71K 279

Download Image

Derin Eryilmaz @deryilz

2 years ago

My first blog post! It's about CVE-2023-4369, a $10,000 bug I found in ChromeOS in July. The bug used a chrome:// URL XSS to allow Chrome extensions to execute privileged code and read/edit downloaded files without user interaction. 👀 0x44.xyz/blog/cve-2023-…

9 134 525 51K 163

Jayesh Madnani @Jayesh25_

2 years ago

🔒Sharing more secrets - It's 2023, and CSRF issues are far from extinct. In fact, I've discovered and reported 100+ CSRF vulnerabilities this year, raking in five figures $$$$$!💰 🚀 My top 5 CSRF bypass techniques and their secrets to success: 1️⃣ Swap "POST" with "GET":…

18 146 581 45K 414

Ananda Dhakal @dhakal_ananda

3 years ago

Never expect anything after reporting a bug. Unmet expectations lead to frustration which might eventually lead to burnout. #bugbountytips

9 13 102 0 3

Mahmoud Abd Alkarim @Maakthon

2 years ago

DOM based XSS Recently I was able to find a DOM based XSS, This vulnerability usually arise when JavaScript takes data from an attacker-controllable source. Thread 🧵 #bugbountytips #domxss #xss

5 17 127 11K 51

Download Image

sudi @sudhanshur705

2 years ago

I along with @aszx87410 was recently able to find an interesting case of a DOM based xss in figma.com Sharing the details in this writeup as the bug is fixed now github.com/Sudistark/xss-…

15 48 187 42K 81

Md Maruf Hosan 🇵🇸 @0xMaruf

3 years ago

here is my writeup of 8 account takeovers method 0xmaruf.medium.com/firing-8-accou… #infosec #bugbountytips #bugbounty #cybersecuritytips

12 220 499 0 243

Nithin 🦹‍♂️ @thebinarybot

2 years ago

☃️ Plution ☃️ Use Plution to scan and test web pages that are vulnerable to client side prototype pollution via a URL payload.

3 98 328 31K 148

Download Image

Lauritz @_lauritz_

2 years ago

🧵 When hunting for (DOM-)XSS vulnerabilities, I usually keep a close eye on the JS console to spot any new messages & errors being logged when fiddling around with params. Could this be semi-automated? My approach for this is DOMSCAN github.com/lauritzh/domsc… (v0.0.1, Alpha) 1/3

2 58 197 27K 117

Download Image

Mehdi @silentgh00st

2 years ago

🧵THREAD ALERT🧵 Here is how i was able to upload a webshell into an old target with already 1000 resolved reports on @SynackRedTeam and got my first RCE approved! This was using google dorks, Js inspection and File upload filter bypass.. #bugbountytip #bugbountytips