BugBountyPlayer @TipsBug

{{fname}} {{lname}} Twitter bookmark account. Used to prevent spamming my regular twitter followers with boring appsec tweets. Joined July 2018

Tweets

1K
Followers

4K
Following

31
Likes

2

Bug X Hunter 💻 @Bug_X_hunter

2 years ago

Wanted To fetch Endpoints of the Web Application . #bugbountytips #bugbounty #bug @iAnkitKapoor01 Here's the simple way Without any tool. :👇

6 33 113 12K 57

Download Image

🎯 Red Team/Bug Bounty recon method 📋 2nd level subdomain brute forcing: > cat knownsubs | rev | cut -d . -f 1-3 | rev | sort -u | tee sub.subdomains 🔨 Brute force those. Any that had * from SSL certs (wildcards) are ideal candidates. (learned from @NahamSec & @m0chan98)

14 131 454 48K 272

Download Image

HackGit @hack_git

2 years ago

APKLeaks Scanning APK file for URIs, endpoints & secrets. github.com/dwisiswant0/ap… #pentesting #infosec #bugbounty t.me/hackgit/8901

4 163 843 88K 432

Download Image

JS0N Haddix @Jhaddix

2 years ago

⏰ Want a one-liner that notifies you of any fresh domains (if they come up) to you each hour? #3 ⬇️ > screen > subfinder -silent -d {target}.com -o {target} > while true; do subfinder -silent -dL {target} -all -nW | anew {target} | notify; sleep 3600; done

16 188 659 106K 504

Download Image

HackGit @hack_git

2 years ago

🌙🦊 Dalfox A powerful open-source XSS scanner and utility focused on automation. github.com/hahwul/dalfox #infosec #pentesting #redteam

4 165 528 59K 179

Download Image

ProjectDiscovery @pdiscoveryio

2 years ago

The sky is the limit with Katana's customizable field options! 🚀 🪐 🌌 🌀 Here's a basic example of how katana could be used to look for API keys in responses! 📝 Change the regex to match actual API keys! More details 👉 🔗 github.com/projectdiscove… #Hackwithautomation

1 20 68 13K 29

Download Image

James Kettle @albinowax

2 years ago

You can find a curated list of my past research, tools & presentations at jameskettle.com - now with an enhanced topic-based structure

14 70 304 50K 101

Muhammed Anzil @alone_breecher

2 years ago

Some dorks for public bug bounty programs🚨 inurl /bug bounty inurl : / security inurl:security.txt inurl:security "reward" inurl : /responsible disclosure inurl : /responsible-disclosure/ reward inurl : / responsible-disclosure/ swag inurl : / responsible-disclosure/ bounty…

4 38 145 9K 74

ProjectDiscovery @pdiscoveryio

2 years ago

Use PTR queries to extract subdomains associated with an ASN using dnsx! 🚀 Discover more subdomains by querying PTR records! Install dnsx now 👉 github.com/projectdiscove… #Hackwithautomation #ASN #Security

2 32 100 16K 52

Download Image

ProjectDiscovery @pdiscoveryio

2 years ago

📣 Nuclei Cloud Beta is fast approaching. We're excited to announce a new feature, Nuclei Cloud AI! Use AI to write templates based on vulnerability reports, blogs, and more! Here's @olearycrew to tell you all about it! youtu.be/LQ0y23Xcm1U

0 11 46 8K 11

Luke Stephens (hakluke) @hakluke

2 years ago

How to hack web applications in 2023: Part 1 🚀 💻 Types of web apps ⚙️ Setting up for testing 🪲 RCE 🐞 SQLi 🐛 XXE 🪳 Insecure Deserialization 🐜 XSS And that's just Part 1! 😱 👇 #hacking #pentesting #bugbounty labs.detectify.com/2022/05/16/how…

11 178 599 77K 396

Douglas Day @ArchAngelDDay

2 years ago

100 (very) short bug bounty rules:

76 718 2K 239K 2K

Paul Seekamp @nullenc0de

2 years ago

@d3mondev @TomNomNom github.com/xnl-h4ck3r/url… Is really all you need.

1 4 32 4K 11

Osirys @osiryszzz

2 years ago

The old auth bypass by editing http responses from 302 to 200 never stops paying. 10 unique endpoints vuln to sqli. Always pay attention to 30x redirects with unusually long responses. Again, another occasion for the “expectation VS reality” check. Will find out soon enough

25 57 483 188K 175

Download Image

ProjectDiscovery @pdiscoveryio

2 years ago

A bug bounty hunters guide to building a fast one-shot recon script! 🚀 🎯 DNS enum subfinder, shuffldns, haktrails, puredns + dnsx 🚢 Port scanning nmap, httpx (+ naabu) 🕷 Crawling gospider (+ katana) Learn how 👇 #hackwithautomation blog.projectdiscovery.io/building-one-s…

8 79 245 28K 128

Hammad 🇵🇰🇵🇸 @Hammad7361

2 years ago

Found another SQLi on @Bugcrowd 's private program #ItTakesACrowd #BugBounty #BugBountytips #BugBountytip Tip: Use this payload 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z In the value of every parameter and check if response delays according to the provided time in payload

26 185 678 43K 317

Download Image

JS0N Haddix @Jhaddix

3 years ago

@NahamSec @bbuerhaus @Rhynorater @arneswinnen @stokfredrik @infosec_au Don’t compete or compare to others, challenge and compete with yourself. Failure is just a lesson. Appreciate it teaching you how to adjust.

3 5 43 4K 3

JS0N Haddix @Jhaddix

3 years ago

@NahamSec @bbuerhaus @Rhynorater @arneswinnen @stokfredrik @infosec_au Collab more. Make friends sooner. Don’t stick with programs that don’t respect your time. Don’t over index on community toxicity.

2 5 28 3K 0

HackGit @hack_git

3 years ago

Cloudmare Cloudmare is a simple tool to find the origin servers of websites protected by Cloudflare, Sucuri, or Incapsula with a misconfiguration DNS. github.com/mrh0wl/Cloudma… t.me/hackgit/6945

2 30 89 5K 30

Download Image

Intigriti @intigriti

3 years ago

Same goes for IP addresses.. turns out there's a lot of ways to write the same thing. If your application only blacklists one, these can be easy bypasses!