AV @TheModernHacker

Cybersecurity and Artificial Intelligence Student at University of sheffield. themodernhacker.com Sheffield, England Joined April 2021

Tweets

632
Followers

66
Following

198
Likes

2K

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

9 months ago

✅ CCSP Complete course for free To get the link - 🙌 Follow 🙌 Like & Retweet 🙌 Reply "GET" 🚀 I will DM the link to everyone

114 89 190 14K 104

Download Image

HackerRats - Uncle Rat ❤️ (XSS Rat) @theXSSrat

2 years ago

A list of ethical hacking tools, let me know which ones I forgot! Information Gathering: Nmap, Shodan, Maltego, Recon-ng, theHarvester, Netcat, DNSRecon, Sublist3r Vulnerability Analysis: Nessus, Nexpose, OpenVAS, Nikto, Burp Suite Scanner Exploitation Tools: Metasploit…

5 75 262 29K 252

7h3h4ckv157 @7h3h4ckv157

2 years ago

30 days of Practice (Pen-Test) by @C0d3Cr4zy Link: drive.google.com/file/d/1R6P5KO… #cybersecurity #Pentesting #Hacking #BugBountytips #infosec #cybersecuritytips #redteam #coding #CTF #pwn #vulnerabilities #BugBounty 🧵🧵 🧵 ⤵️

3 121 250 27K 246

Md Ismail Šojal 🕷️ @0x0SojalSec

2 years ago

List of GitHub Dorks for bug bounties . like Finding target Files, Languages , API Keys, Tokens,Usernames,Passwords,Information using Dates,Extension 📓 #infosec #cybersec #bugbountytips

5 107 313 29K 238

Download Image

Saif Abdullah Khan Mahi 🇧🇩 @CABKPC_Responde

2 years ago

CVE-2023-24488 - Citrix Gateway XSS Scan the internet and wait for dup :3 nuclei -l target.txt -t CVE-2023-24488.yaml -o ready_for_dup.txt nuclei template:- gist.github.com/0xmahi/c4aaa10… #BugBounty #BugBountytips #xss #CVE #Citrix

6 157 618 45K 268

Download Image

PentesterLab @PentesterLab

2 years ago

Articles worth reading discovered last week: 🗞 github.com/ZhangZhuoSJTU/… 🗞 github.com/GoogleCloudPla… 🗞 security.googleblog.com/2023/06/learni… 🗞 nassiben.com/video-based-cr… 🗞 pathonproject.com/zb/?ebf76cada6… 🗞 github.com/synacktiv/Wegg… 🗞 portswigger.net/research/how-i… #PentesterLabWeekly

2 38 125 27K 71

Nithin 🦹‍♂️ @thebinarybot

2 years ago

I re-watched @GodfatherOrwa 's talk at @InfoSecComm 's IWCON 2.0 and must say it's super informative. The talk is ~45 minutes long but I have condensed the talk for you to read in 2 minutes.

47 273 530 64K 461

Download Image

HackerRats - Uncle Rat ❤️ (XSS Rat) @theXSSrat

2 years ago

Broken Access Control (BAC): Testing for unprotected resources: Attempt to access resources without proper authentication, using simple URL manipulation or browsing to restricted areas. Forced browsing: Attempt to access restricted resources directly by modifying the URL, even…

6 19 77 12K 51

Luke Stephens (hakluke) @hakluke

2 years ago

Become an Nmap pro in 30s 👇🕥 Nmap is a port scanner, but it does much more including service/OS detection and even vuln scanning. By default nmap does a standard TCP SYN scan on the top 1000 ports of host. $ nmap host For more verbosity use -v or -vv. $ nmap -vv host 👇

40 206 701 91K 605

N$ @nav1n0x

2 years ago

SQL Injection on JSON body POST request. It took me some time, but finally found the right technique and injection point. ``sqlmap -r request.txt --level=5 --risk=3 --force-ssl --ignore-code=500 --dbs`` #SQLInjection #BugBounty

39 311 1K 113K 503

Download Image

Hammad 🇵🇰🇵🇸 @Hammad7361

2 years ago

Found another SQLi on @Bugcrowd 's private program #ItTakesACrowd #BugBounty #BugBountytips #BugBountytip Tip: Use this payload 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z In the value of every parameter and check if response delays according to the provided time in payload

26 185 679 43K 317

Download Image

Ninad Mishra @NinadMishra5

3 years ago

Search for all leaked keys/secrets using one regex! regex: gist.github.com/h4x0r-dz/be69c… credits: @h4x0r_dz #BugBounty #BugBountytips

23 234 680 45K 336

Download Image

Aditya Shende @ADITYASHENDE17

3 years ago

Authentication Bypass | Easy P1 in 10 minutes by Anirudh Makkar infosecwriteups.com/authentication… #kongsec

2 50 173 12K 69

Aditya Shende @ADITYASHENDE17

3 years ago

Few dorks which I use to find common bugs while testing. Add your so it’ll help others 1. ssl.cert.subject.CN:"*.target. com" http.title:"index of/" 2. ssl.cert.subject.CN:"*.target. com" http.title:"gitlab" 3. ssl.cert.subject.CN:"*.wur.nl" http.title:"gitlab"

9 97 303 27K 214

Nagli @galnagli

3 years ago

I just found a Critical Authentication Bypass on one of my target's Apache Tomcat Instance. example.target.com -> redirect admin.target.com (NXDOMAIN) example.target.com/debug -> 401 Basic Auth example.target.com/debug/ -> 200 OK #bugbountytips

18 75 379 40K 143

Download Image

HackGit @hack_git

3 years ago

HackingTool All in One Hacking tool For Hackers github.com/Z4nzu/hackingt… #redteam t.me/hackgit/7843

13 147 429 30K 209

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

3 years ago

Bypassing Akamai’s Web Application Firewall Using an Injected Content-Encoding Header⚡️ > praetorian.com/blog/using-crl… #xss #bugbountytips #cybersec #infosec

0 39 89 5K 15

Ninad Mishra @NinadMishra5

3 years ago

List of Tools to Detect XSS Vulnerabilities: XSSer W3af Probely Power fuzzer Burp Suite Netsparker ZAProxy WebScarab XSStrike XSScrapy wfuzz ImmuniWeb On-demand nmap JMeter wapiti ZAP-CLI Arachni XSS Hunter Firebug xsssniper Skipfish KNOXSS Psalm #bugbountytips credit:@cry__pto