TheGetch @_TheGetch_

Tweets

181
Followers

88
Following

373
Likes

230

JS0N Haddix @Jhaddix

2 years ago

I've dropped my 403 bypass tampers on @DanielMiessler , @g0tmi1k , and I's project SecLists this afternoon. I have found many bugs with these tricks. Enjoy 🫶✌️🤫 github.com/danielmiessler…

12 163 684 44K 411

DirectoryRanger @DirectoryRanger

2 years ago

Active Directory Exploitation Cheat Sheet github.com/Integration-IT…

2 91 288 29K 138

DirectoryRanger @DirectoryRanger

2 years ago

Persistence Techniques That Persist cyberark.com/resources/thre…

0 30 63 11K 23

BC Security @bcsecurity

3 years ago

If you couldn’t make our @defcon workshop, all the materials are available on GitHub for you to enjoy at our own pace. See you next year! github.com/BC-SECURITY/Be…

8 297 759 0 297

Thanks to everyone who attended Browser-Powered Desync Attacks, hope you enjoyed it! If you missed it but you're in the area, I'll be doing a repeat at 15:30 on Friday at #DEFCON. You can find the whitepaper, slides, code and labs at portswigger.net/research/brows…

3 79 304 0 45

Paul Seekamp @nullenc0de

3 years ago

I am convinced that if OAuth is being used, it is configured incorrectly. In the past 4 pentests I have done. Only 1 got it correct. I strongly recommend doing the labs: portswigger.net/web-security/o… Also, installing: github.com/PortSwigger/oa…

6 323 1K 0 446

Pethuraj M @Pethuraj

3 years ago

GooFuzz - A tool to perform fuzzing with an #OSINT approach, managing to enumerate directories, files, subdomains, or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking) » github.com/m3n0sd0n4ld/Go… #cybersecurity

36 488 2K 0 672

Download Image

Steve Campbell @lpha3ch0

3 years ago

If you want to learn web app pentesting, read the OWASP WSTG and then work through the Portswigger Web Academy. All free.

11 38 368 0 106

BurpSuite.guide @BurpSuiteGuide

3 years ago

"Evaluation of Black-Box Web Application Security Scanners in Detecting Injection Vulnerabilities" An excellent paper that describes the scanning capabilities of #BurpSuite and #ZAP against OWASP JuiceShop using different modes. mdpi-res.com/d_attachment/e… mdpi-res.com/d_attachment/e…

1 3 4 0 2

Cas van Cooten @chvancooten

3 years ago

Kicked off my "MalDev for Dummies" workshop successfully yesterday, which means the repo is now public! Slides, exercises, example code and resources to get you started on your malware development journey. C# and Nim supported for now. Enjoy!! github.com/chvancooten/ma…

16 189 592 0 219

/r/netsec @_r_netsec

3 years ago

How to Evade Windows Defender and Commercial AV with Msfvenom Payloads github.com/RoseSecurity/A…

2 90 248 0 65

Web Security Academy @WebSecAcademy

3 years ago

Web Security Academy @WebSecAcademy

3 years ago

14 105 390 0 47

Download Image

2 9 34 0 5

BApp Store @BApp_Store

3 years ago

Added: Pentest Mapper portswigger.net/bappstore/af49…

1 43 216 0 46

Pethuraj M @Pethuraj

3 years ago

Agartha 🏴‍☠️ A burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi) » github.com/volkandindar/a… #cybersecurity #infosec #bugbountytips

2 129 366 0 122

Download Image

Abhishek Meena - {🔥} @aacle_

3 years ago

========= Master XSS ========= Share this with your friends 😀 Tags: #cybersecurity #hacking #bugbounty #xss #masterXSS #infosec #offsec #labs Check :🧵0/n 👇

31 152 357 0 190

Clint Gibler @clintgibler

3 years ago

🔒 Tool: SSH No Ports SSH to a remote Linux host/device without that device having any open ports (not even 22) on external interfaces All network connectivity is outbound No need to know the target's IP By @atsigncompany github.com/atsign-foundat…

3 62 208 0 53

Corben Leo @hacker_

3 years ago

Are you into web hacking? If so, you must have technology-specific wordlists If not, you're missing obvious vulnerabilities. Don't believe me? Let's look at an information disclosure in an ASP[.]NET Core site: