Chirag Rai @crai_in

Cyber Security and stuff||Pentester by profession||IamNull on Bugcrowd and HackerOne Joined June 2019

Tweets

24
Followers

17
Following

286
Likes

411

PortSwigger Research @PortSwiggerRes

3 years ago

Bypassing Firefox's HTML Sanitizer API by @garethheyes portswigger.net/research/bypas…

2 62 193 0 27

Supr4s @LdrTom

3 years ago

3 months later I confirm that this bypass still works ! 🤟#bugbountytips

Brute Logic @BRuteLogic

4 years ago

3 months later I confirm that this bypass still works ! 🤟#bugbountytips

28 204 723 0 205

Download Image

3 43 196 0 54

Rohit @sec_r0

3 years ago

Hola Hola 👋👋, Here is new Monday Flyer, and it talks about Compromises that can happen in CI/CD pipelines. Download : securityzines.com/flyers/cicd.ht… Proudly brought to you by @GitGuardian 😍❣️♥️❤️💗 #infosec #appsec #cybersecurity #bugbountytips #security

3 87 278 0 49

Download Image

LetsDefend @LetsDefendIO

4 years ago

Log4j RCE CheatSheet

2 255 754 0 167

Download Image

Yalu Jailbreak @Yalujb

4 years ago

Team Pangu's demonstration of iOS 15 remote web-based jailbreak on iPhone 13 Pro. #iOS15 #jailbreak

11 71 367 0 14

Download Video

OWASP Top 10 (2021): 1. Insufficient security funding 2. Using “god” as password 3. Too busy tweeting 4. <redacted> 5. Mispronouncing “gif” 6. 1264 tickets in Jira backlog 7. Too many meetings 8. Hiring w/ whiteboard coding exercises 9. Helicopters 10. Workday deleting goals

23 340 1K 0 68

Dhiyaneshwaran @DhiyaneshDK

4 years ago

Steps to Reproduce Dependency Confusion 🔥 Detailed dhiyaneshgeek.github.io/web/security/2… @pdnuclei #bugbountytip #bugbountywriteup #bugbounty

9 161 339 0 113

Chirag Rai @crai_in

4 years ago

My blog on CSRF attacks: CSRF Today: Techniques, Mitigations and Bypasses: medium.com/@chiragrai3666… Special thanks to @sec_r0 for his CSRF zine.

1 17 36 0 12

XSS Payloads @XssPayloads

4 years ago

Nice finding by @0xInfection: <scrpt>confrm()</scrpt> will by pass WAF and execute on web apps running PHP pspell_suggest().

1 77 281 0 42

Raunak Parmar @trouble1_raunak

4 years ago

I have created a Mind map for #CloudPentest Focused on #AWS, #GCP & #Azure I will keep updating the repo as I keep learning🤓 GitHub: github.com/TROUBLE-1/Clou…

4 176 420 0 150

Download Image

Chirag Rai @crai_in

5 years ago

I completed the Web Security Academy lab: Stealing OAuth access tokens via an open redirect @WebSecAcademy portswigger.net/web-security/o… I definitely recommend their labs to everyone. Keep up the good work @PortSwigger @WebSecAcademy @PortSwiggerRes

0 0 0 0 0

Shahrukh Rafeeq 🇮🇳 @d3tonator

5 years ago

Check out my basic reference checklist for iOS Pentesting / Bug Bounty Methodology... 🤓🤓🤓 mm.tt/1713501700?t=R… @india_shield @softwaroid #bugbountytips #infosec #iOSsecurity

6 155 371 0 140

Download Image

bugcrowd @Bugcrowd

5 years ago

🎁 Merry X(SS)MAS! Hackers!🎄 Beginning today we are doing 12 swag-ful days of giveaways and challenges. Today's challenge is simple: spread the cheer of #XSSMAS with a retweet of this tweet to be one of 12 researchers to get today's exclusive swag! ☃️

44 456 555 0 6

TryHackMe @RealTryHackMe

5 years ago

Advent of Cyber is back! 🎅 Learn the basics of security by doing a beginner friendly security exercise everyday leading up to Christmas for free, starting Dec tryhackme.com/christmas We're excited to have @offsectraining sponsoring the event with PWK & Proving Ground Vouchers!