Picture

Brute Force @bruteforce_algo

Programmer Joined April 2023
  • Tweets
    195
  • Followers
    21
  • Following
    510
  • Likes
    1K
Brute Force retweeted
BuildHackSecure Profile Picture

Adam Langley @BuildHackSecure

4 weeks ago

Here’s my slides from today’s “Regex For Hackers” talk at DEFCON with @NahamSec, bookmark this for some exciting news in the near future docs.google.com/presentation/d…

Brute Force retweeted
albinowax Profile Picture

James Kettle @albinowax

3 months ago

I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame" is coming to #DEFCON33! This talk will feature multiple new classes of desync attack, mass exploitation spanning multiple CDNs, and over $200k in bug bounties. See you there!

Brute Force retweeted
galnagli Profile Picture

Nagli @galnagli

a month ago

I hacked a popular vibe coding platform with a simple, straight-forward logic flaw - allowing access to private applications . Here’s how I did it 🧵

Brute Force retweeted
rikeshbaniya Profile Picture

Rikesh Baniya @rikeshbaniya

3 months ago

CSRF ATO using not so known technique of chaining facebook login csrf had made over 11,000$ across programs in 2022 #bugbounty #bugbountytips

Brute Force retweeted
YShahinzadeh Profile Picture

YS @YShahinzadeh

3 months ago

How did we (@AmirMSafari) earn $50k using the Punycode technique? I’ve published a detailed blog post about our recent talk, we included 3 attack scenarios, one of which poses a high risk of account takeover on any "Login with GitLab" implementation blog.voorivex.team/puny-code-0-cl…

Brute Force retweeted
NahamSec Profile Picture

Ben Sadeghipour @NahamSec

3 months ago

This #NahamCon2025 talk has generated over $50,000 in bounties for @YShahinzadeh and a few other hackers: Puny-Code, 0-Click Account Takeover. 🎥👉🏼youtu.be/4CCghc7eUgI

Brute Force retweeted
0x0SojalSec Profile Picture

Md Ismail Šojal 🕷️ @0x0SojalSec

3 months ago

Blind SQL injection in JSON 💉 #infosec #cybersec #bugbountytips

Brute Force retweeted
intigriti Profile Picture

Intigriti @intigriti

4 months ago

💡 Quick Tip! Found a subdomain takeover on a CDN or cloud bucket (S3/Azure)? ❌ Don't stop there! ✅ Always investigate if the main application loads any resources from that subdomain, such as scripts and images. Check the Network tab in your web console and filter by your…

Brute Force retweeted
intigriti Profile Picture

Intigriti @intigriti

3 years ago

12 #recon tools you NEED to know about! 🧵 Recon, the gathering of information about your target, is becoming more and more important! 🧠 Here are the tools to help you spot subdomains, vhosts, S3 buckets, parameters and more faster and more effective than the others 👇

Brute Force retweeted
avlidienbrunn Profile Picture

­Mathias Karlsson @avlidienbrunn

4 months ago

I made a tool to help test archive (zip/tar) extraction bugs (synk working directory into archive, add path traversals, links, permissions, etc): github.com/avlidienbrunn/…

Brute Force retweeted
slonser_ Profile Picture

slonser @slonser_

4 months ago

Today I used a technique that’s probably not widely known in the community. In what cases could code like this lead to a vulnerability? ->

Brute Force retweeted
Jayesh25_ Profile Picture

Jayesh Madnani @Jayesh25_

6 months ago

Bug Bounty Tip: Keeping It simple & consistent Over time, I’ve realized that overly complicated automation in bug bounty isn’t as exciting or rewarding—at least not for me. Instead of trying to automate everything under the sun, I’ve found that focused, consistent recon on core…

Brute Force retweeted
Jayesh25_ Profile Picture

Jayesh Madnani @Jayesh25_

5 months ago

I’ve noticed that most new folks who reach out for guidance in bug bounty feel overwhelmed early on trying to learn everything at once. That often leads to half-baked knowledge across multiple areas and slower overall progress. Here's what I recommend instead 👇 1/ Pick one…

Brute Force retweeted
TheMsterDoctor1 Profile Picture

X @TheMsterDoctor1

4 months ago

🚨 PART 2 — ADVANCED BUG BOUNTY RECON PLAYBOOK 🚨 Stealth, Automation & Finding What Others Miss Most hunters STOP at surface recon. This is where REAL MONEY starts. Here’s how to step into the elite 1% → (Stealth + Deep + Automated Recon Blueprint) ⸻ 1️⃣ JS Recon — Extract…

Brute Force retweeted
GodfatherOrwa Profile Picture

Godfather Orwa 🇯🇴 @GodfatherOrwa

2 years ago

For first time i found a SQL Injection On **sitemap.xml** endpoint 😎😎 #BugBountytips #BugBountytip target[.]com/sitemap.xml?offset=1;SELECT IF((8303>8302),SLEEP(9),2356)# sleep payload [1;SELECT IF((8303>8302),SLEEP(9),2356)#] = 9s Happy Hunting #BugBounty

Brute Force retweeted
intigriti Profile Picture

Intigriti @intigriti

4 months ago

Do you want to master NoSQL injection vulnerabilities? 😎 Open this thread! 🧵 👇

Brute Force retweeted
jsmonsh Profile Picture

Jsmon - jsmon.sh @jsmonsh

5 months ago

❌GraphQL introspection disabled? ✅No problem! Extract all GraphQL operations from Javascript files! 1. go install github.com/rashahacks/jsm… 2. Scan the JS URL with -u flag. 🚀View all the GraphQL operations in seconds -- no introspection needed.

Brute Force retweeted
0x0SojalSec Profile Picture

Md Ismail Šojal 🕷️ @0x0SojalSec

5 months ago

Use NextJS? Recon Tip by renniepak A quick way to find "all" paths for Next.js websites: DevTools->Console console.log(__BUILD_MANIFEST.sortedPages) javascript​:console.log(__BUILD_MANIFEST.sortedPages.join('\n')); #infosec #cybersec #bugbountytips

Brute Force retweeted
0xacb Profile Picture

André Baptista @0xacb

5 months ago

This email domain confusion technique from @garethheyes is so cool! Some really weird behavior can be found between different mail agents and the right characters/symbols 🤔

Brute Force retweeted
tabaahi_ Profile Picture

Mohsin Khan @tabaahi_

3 years ago

So many beginners ask what to do after finding subdomains 🧵 1. Do directory search 2. Do Github dork 3. Do google dork 4. FUZZ for params 5. FUZZ for vhosts 6. Find Wayback data (gau, waybackurl) 7. Find javascript files 1/n

Trends for United States

#VMAs
687 B posts
Derrick Henry
11,1 B posts
Ravens
56,8 B posts
Packers
88,9 B posts
Bills
117 B posts
Ricky Martin
7.425 posts
Lions
113 B posts
Tate
51,4 B posts
ariana
212 B posts
#GoPackGo
14,2 B posts
Titans
57,3 B posts
Gaga
137 B posts
Moody
27,5 B posts
Josh Allen
9.915 posts
Doja
88,4 B posts
Joe Brady
Cam Ward
10,9 B posts
Broncos
50,8 B posts
Purdy
16,4 B posts
Jessica Simpson
1.195 posts

You might like

Elon Musk
@elonmusk
225.4M Followers
Dad, husband, President, citizen.
Barack Obama
@BarackObama
130.6M Followers
Welcome to the official account of Cristiano Ronaldo.
Cristiano Ronaldo
@Cristiano
115.8M Followers
@skylrk
Justin Bieber
@justinbieber
108.9M Followers
45th & 47th President of the United States of America🇺🇸
Donald J. Trump
@realDonaldTrump
108.8M Followers
Rihanna
@rihanna
107.6M Followers
And, baby, that’s show business for you. New album The Life of a Showgirl. Out October 3 ❤️‍🔥
Taylor Swift
@taylorswift13
93.7M Followers
Official NASA account. Exploring the universe, advancing science, and inspiring the next generation of explorers. Verification: https://t.co/8nok3NP4PW
NASA
@NASA
87.8M Followers
MAYHEM, INCLUDING “THE DEAD DANCE”, OUT NOW
Lady Gaga
@ladygaga
81.7M Followers
football is so back
YouTube
@YouTube
79.0M Followers
@SKIMS
Kim Kardashian
@KimKardashian
74.4M Followers
Comedian, talk show host and ice road trucker. My tweets are real, and they’re spectacular.
The Ellen Show
@EllenDeGeneres
73.2M Followers
what's happening?!
X
@X
68.9M Followers
A proud husband and father ❤️
Virat Kohli
@imVkohli
67.9M Followers
Sharing things I'm learning through my foundation work and other interests.
Bill Gates
@BillGates
66.4M Followers
“I Said I Love You First…And You Said It Back” Out Now🖤
Selena Gomez
@selenagomez
64.9M Followers
Filho de Deus, Pai, Feliz e Ousado !
Neymar Jr
@neymarjr
63.9M Followers
Breaking news from CNN Digital. Check @cnn for all things CNN, breaking and more.
CNN Breaking News
@cnnbrk
63.9M Followers
It’s our job to #GoThere and tell the most difficult stories. For breaking news, follow @CNNBRK and download the CNN app ➡️ https://t.co/7PQD7o6fLw
CNN
@CNN
63.7M Followers
I write hooks but I’m really just here for the bridge.
Justin Timberlake
@jtimberlake
59.2M Followers