CryptoSecDev @cryptosecdev

Cryptocurrency, Blockchain Security, Application Security, Penetration Testing, Cryptocurrency Trading, Blockchain Development cryptosecdev.com Joined February 2018

Tweets

448
Followers

121
Following

1K
Likes

339

Kostas @Kostastsale

5 years ago

I created a tutorial on how to install @intel_owl for those who have the trouble of doing so. Hopefully, this will make it easier to try this great project for #threatintel data gathering or general reputation checking across multiple services 🔍🔍 youtu.be/GuEhqQJSQAs?t=0

0 5 7 0 1

Jorge Orchilles @jorgeorchilles

5 years ago

Google has made a new enterprise network scanning tool public and free: Tsunami “Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.” github.com/google/tsunami…

9 250 573 0 98

OWASP DevSlop 🇺🇦 @Owasp_DevSlop

5 years ago

***NEW SHOW ANNOUNCEMENT*** On this show, Rajni Hatti will share how she uses the @owasp API Security Top 10 from the perspective of a software tester. We will learn how to find security flaws in an API and improve the quality of API development. 🗓June 28th ⏰5:30 PM

0 2 6 0 0

Download Image

Brad Sams @bdsams

5 years ago

Microsoft’s Free New Tool to Recover Files in Windows bdsams.com/3g7i0ns

1 57 153 0 25

Download Image

Sapra @0xsapra

5 years ago

This is how I found sql-Injection 100% of the time For site.com/?q=HERE /?q=1 /?q=1' /?q=1" /?q=[1] /?q[]=1 /?q=1` /?q=1\ /?q=1/*'*/ /?q=1/*!1111'*/ /?q=1'||'asd'||' <== concat string /?q=1' or '1'='1 /?q=1 or 1=1 /?q='or''=' #bugbounty #bugbountyTips

14 673 2K 0 583

Amit Dubey @AmitMDubey

5 years ago

8 112 263 0 91

Download Image

Aditya Soni @hetroublehacker

5 years ago

Pulling up the slides which were shared in #NahamCon #NahamCon2020 @TomNomNom tomnomnom.com/talks/wwwww.pdf @securinti drive.google.com/file/d/1iKL6wb… @samwcyo docs.google.com/presentation/d… @defparam drive.google.com/file/d/1iC0972… @snyff slideshare.net/snyff/jwt-jku-… @jcran core.intrigue.io

1 165 317 0 122

Intigriti @intigriti

5 years ago

Woa, this #BugBountyTip from @hakluke works surprisingly well! Someone please automate this 🙏 #BugBountyTips

11 211 749 0 211

Download Image

dw1 - oss/acc @dwisiswant0

5 years ago

FinDOM-XSS - Find for Possible DOM Based XSS Vulnerability github.com/dwisiswant0/fi… Inspired by @dark_warlord14 by JSScanner tool, and @aslanewre with the possible patterns. #bugbounty #bugbountytips #infosec

6 114 262 0 77

Download Image

Hack3rScr0lls @hackerscrolls

5 years ago

Dirsearch like a PRO. Always try to find temp/backup files and directories on the server. We prepared a nice wordlist for this: gist.github.com/hackerscrolls/… Trick by @juwilie1337 #BugBountyTip #Pentest #Wordlist

1 114 299 0 112

Download Image

spidersec @SpiderSec

6 years ago

Manually Detect Remote Integer Overflow: 1. Note Content-Length. EX: 612 2. Take NO < Content-Length. Ex: 610 3. Add (610+612 = 1222) 4. Request Header - 'Range: bytes= -1222' => SAME RESPONSE 5. Subtract 9223372036854775808 - 1222 = 9223372036854774586 Continue.......

6 184 433 0 102

Download Video

Mazin Ahmed @mazen160

6 years ago

I'm publishing my work on the practical testing and breaking of JWT authentication. mazinahmed.net/blog/breaking-… The scripts that can make your JWT testing easier: github.com/mazen160/jwt-p… Feedback are always welcome!

6 247 504 0 117

Download Image

ch @chybeta

6 years ago

NOTICE THIS TWEET : recommended configuration for nextcloud with nginx and php-fpm is vulnerable... #bugbounty #bugbountytip #bugbountytips

Zero @zeroware_

6 years ago

NOTICE THIS TWEET : recommended configuration for nextcloud with nginx and php-fpm is vulnerable... #bugbounty #bugbountytip #bugbountytips https://t.co/cAqptRR0Ez

1 1 8 0 2

1 24 59 0 10

Download Image

Emad Shanab - أبو عبد الله @Alra3ees

6 years ago

Automate WAF Bypass with Burp:- codewatch.org/blog/?p=361 Bypass WAF: Burp Plugin to Bypass Some WAF Devices:- codewatch.org/blog/?p=408 Bypassing web application firewalls using HTTP headers:- jasonhaddix.com/bypassing-web-…

4 130 308 0 84

Download Image

Gwendal Le Coguic @gwendallecoguic

6 years ago

September was though, I spent alot of time coding. Here is my collection of GitHub tools I wrote in PHP and Python. #bugbounty #bugbountytools 10degres.net/github-tools-c…

6 106 342 0 90

Simone Margaritelli @evilsocket

6 years ago

This pre release includes the pwngrid binary, that can be used for e2ee messaging (run with sudo): pwngrid -inbox (check the inbox, use -page if needed) pwngrid -inbox -id 123 (to read a message) pwngrid -write <fingerprint> -message "hello" (to write a message to another unit).

pwnagotchi @pwnagotchi

6 years ago

3 18 60 0 3

1 13 50 0 2

Ashar Javed @soaj1664ashar

6 years ago

Brute forcing Dir/Files github.com/Nekmo/dirhunt github.com/OJ/gobuster tools.kali.org/web-applicatio… github.com/deibit/cansina github.com/xmendez/wfuzz github.com/stefanoj3/dirs… github.com/smirnovvad/rbu… github.com/maurosoria/dir… please add more in the comments #BugBounty

6 245 617 0 137

itszn @itszn13

6 years ago

If you ever tried to perform XSS without parenthesis, you may have realized that eval`payload` does not work. However you can do this instead: Function`alert\`xss\````

3 71 285 0 37

Intigriti @intigriti

6 years ago

Drop your exotic XSS payloads! 👇

24 71 239 0 72

Download Image

D Ξ Ξ P Λ K ⚙️ @1m4xx0

6 years ago

One liner to import whole list of subdomains into Burp suite for automated scanning! cat <file-name> | parallel -j 200 curl -L -o /dev/null {} -x 127.0.0.1:8080 -k -s #bugbountytips #bugbounty #bugbountytip