Gaurav Kumar(GDATTACKER) @gdattacker
Recon 🔍 | Assets 🌐 | Cybersecurity 🛡️ | World + Web explorer 🌍 | Tasty food keeps me scanning | @HackenProof Security Researcher facebook.com/drago4344 New Delhi, India Joined May 2014-
Tweets4K
-
Followers884
-
Following3K
-
Likes3K
7) Even scarier: if multiple servers share the same Cloudflare-only SG, you can point records to them too. - Misconfigured apps/proxy (nginx, apache, kong, k8s) - Services trusting x-forwarded-host Lots of attack surface.
6) Now, when we access the domain we control (in this case bypass-grafana.fearsoff.org) we bypass the Cloudflare Firewall policy. In fact we are reaching the AWS server through Cloudflare's IPs.
5) Here's where it gets interesting. To access that Grafana application without the internal VPN (1.1.1.1), all we need to do is: Create a DNS A record in a Cloudflare zone we control and point it to 13.214.193.141.
4) We discover that grafana.fearsoff.net points to IP address 13.214.193.141 on AWS. But this IP is not directly accessible because the AWS security group only allows Cloudflare IP ranges.
3) This means that if anyone tries to access grafana.fearsoff.net without using the internal VPN with IP 1.1.1.1, they will get an Access denied message.
2) Let's say our target is grafana.fearsoff.net, which has this firewall rule: (http.host eq "grafana.fearsoff.net" and ip.src ne 1.1.1.1)
🏆 KNOXSS September 2025 Giveaway 🏆 ➡️ Follow, like and share! 😍 ➡️ 1 Month Pro access for 3 winners on Friday 5th Good luck! 🤞 Check what only KNOXSS can find for you: knoxss.pro/?page_id=766 knoxss.pro - try it now! #WebAppSec #BugBounty #PenTesting
🏆 KNOXSS September 2025 Giveaway 🏆 ➡️ Follow, like and share! 😍 ➡️ 1 Month Pro access for 3 winners on Friday 5th Good luck! 🤞 Check what only KNOXSS can find for you: knoxss.pro/?page_id=766 knoxss.pro - try it now! #WebAppSec #BugBounty #PenTesting https://t.co/PyUkiaYRqj
Anybody need a new processor?? We’re giving away an AMD RYZEN 7 9800X3D to one of you. To enter: -Like and RT this post -Comment Tdawg is the best helldivers 2 player -Follow @tdawgsmitty Winner selected Monday :)
Giveaway🎁 In celebration of the launch of the the KTC 5K Monitor H27P3, we are gonna giveaway 2 grand prizes to 2 lucky winners. 🎁Apple AirPods 4 Wireless Earbuds with Active Noise Cancellation * 2 TO ENTER: 1. Follow @KTC_Gaming1995 2. Like♥️& Retweet🔁 3. Tag a friend &…
🚨🇺🇸 Labor Day Giveaway 🇺🇸🚨 I’m giving away a CompTIA Security+ voucher! 🎉🎉 How to enter: • Like & RT this post • Comment or tag a friend Winners announced this Friday! Good Luck!
Sometimes the vuln isn’t in HTML at all. It’s in JavaScript itself: document.write(location.hash) If you see raw sinks like innerHTML, document.write, or eval, you’ve already won.
Think you blocked <script>? Cool. I’ll just use SVG. <svg onload=alert(1)> Browsers love SVG, and filters often forget it exists. This is why context + parser knowledge >>> memorized payloads.
HTML context ≠ attribute context ≠ JS context. ✅ Inside HTML → <img src=x onerror=alert(1)> ✅ Inside attribute → " onmouseover=alert(1) x=" ✅ Inside JS → ');alert(1);// If you don’t test the right payload in the right context, you’re just throwing darts blindfolded.
🇮🇳 𝗜𝗡𝗗𝗘𝗣𝗘𝗡𝗗𝗘𝗡𝗖𝗘 𝗗𝗔𝗬 𝗦𝗣𝗘𝗖𝗜𝗔𝗟 𝗚𝗜𝗩𝗘𝗔𝗪𝗔𝗬 🇮🇳 #DealBeeGiveAway We're giving away the newly launched OPPO Enco Buds 3 Pro to 5 lucky winners! To enter: 1. Follow @DealBeeOfficial 2. RT this post. Keeping it simple. Best of luck!
🚨 GIVEAWAY ALERT 🚨 Got 2 fresh @RealTryHackMe 1-month vouchers burning a hole in my pocket 🔥 Meanwhile… my hackers toolkit is 85% off (all current + future courses in one) thexssrat.podia.com/full-house-bun… Want one? Do this: 1️⃣ Follow @theXSSrat + @RealTryHackMe 2️⃣ Share this post…
25 Parameters Devs Actually Use (and Hunters Forget) debug=true test=1 admin=1 isAdmin=true isPremium=true role=user → flip to admin uid=42 ref=partner → flip to internal redirect=/dashboard next=/secret returnUrl=evil.com (open redirect)…
We are giving away a couple of free boxes to a random person with 0 likes on their comment in 48h from now 🔥 RT + Comment below to enter!
Phenomenal DC talk by @RedByte1337 on weaponizing the Microsoft login page youtube.com/watch?v=z6GJqr…
🎁 BUG BOUNTY GIVEAWAY TIME thexssrat.podia.com/full-house-bun… Win the Endless Bundle: - All our current future and past courses - Exclusive discord community - Live lessons - CAPIE and CNWPP - ... NEW: 005 Bug Hunting Methodology included! How to enter: - Like this post - Retweet -…
Great post on decrypting credentials for priv esc from SmartDeploy by Garrett Foster (don’t know his handle). specterops.io/blog/2025/08/1…

Het Mehta @hetmehtaa
36K Followers 1K Following Security Analyst | Content Creator | I Spread Cybersecurity News & Talk about AI, Cloud, Tech, Tools & Recent Updates
sumgr0 @sumgr0
5K Followers 5K Following Pentester | Bug Bounty Hunter | #hackerone | #intigriti | #bugcrowd @[email protected]
Pratik Dabhi @impratikdabhi
19K Followers 995 Following 👨🏻💻Ethical Hacker 🐞Bug Hunter | Penetration tester 👨🏻💻Security Consultant at @Deloitte ☢️ Bugcrowd Top 300 | YouTuber (23k+ Subs) | Yeswehack Top 100
sagar yadav @sagaryadav8742
864 Followers 559 Following Bug Hunter | Student | Security Researcher 😎
Adolphus Miller @MillerAdol32219
23 Followers 2K Following
Shalini Chouhan @ShaliniDu
20 Followers 944 Following
MeganSteinbeck @0Toy87MElk19EUY
7 Followers 612 Following
an truong @ATruong48712
0 Followers 12 Following
RandomCipher07x @RCipher07x
4 Followers 171 Following
3m0n @em0n555
44 Followers 1K Following
Itwirto @Itwirto46574
17 Followers 641 Following
Aman Subedi @amsubedi2
4 Followers 661 Following
Treva Runolfsdottir @TRunolfsdo13574
53 Followers 619 Following The only limit to our realization of tomorrow will be our doubts of today.
Vaibhav Sanwa 🇮�... @n00bh4cker
91 Followers 625 Following Breaking systems, not spirits 💻 | Through my lens: travel, tech & triumph 📸 | Cybersecurity by trade, adventure by choice 🌍 | Level up daily 💪
Awglutaur @Awglutaur5986
107 Followers 2K Following
David Alexander @CalistaJiggetts
367 Followers 6K Following Coffee addict ☕️ | Dog lover 🐶 | Living my best life in NYC 🗽
web3prongs | Nothing ... @0xweb3pr0ngs
32 Followers 136 Following 🔗 Blockchain Developer | Smart Contracts Auditor ⚡ Building secure Web3 solutions 📩 DM for collaborations & audits
Creatif Cow @creatifcow
8 Followers 340 Following Media Templates. 💻🎨 Support my work: https://t.co/b0KJMOc4h4 https://t.co/HNucMWEXgA
Ashish @knowashish97
211 Followers 668 Following Solidity Security Auditor | Blockchain Security Researcher | Focused on EVM-based vulnerability analysis, DeFi protocol audits, and formal verification | Rust
Deeji @Deeji3920220
62 Followers 1K Following
Rouiqeet @Rouiqeet922589
30 Followers 2K Following
Manjit Sharma @ManjitS55588071
7 Followers 386 Following
vishnu kosuri @kvr_23
3 Followers 406 Following
Vallie Lang @LangVallie75731
74 Followers 3K Following
bb00x @NathaniaMi47971
653 Followers 3K Following Bug bounty hunter that loves programming https://t.co/zYnJ6w3FwD
Kelsey Gardner @KGardner54152
1K Followers 8K Following Living life one delicious bite at a time 🍽️ Exploring flavors, savoring moments Food lover on a tasty adventure 🌍 #FoodieLife #DailyEats
Kim Reid @iam_Kimreid
498 Followers 8K Following Startup Founder 🚀 Transforming ideas into scalable ventures & driving entrepreneurial growth. Visionary leader in startup culture. #StartupFounder #Innovation
shiv sunder behera @shivsunder3108
5 Followers 61 Following
Belen @c_belen70
163 Followers 3K Following
Thestos @ThestosiajST
22 Followers 430 Following
Saulen @Saulen9137619
12 Followers 358 Following
Orpouilui @Orpouilui40283
10 Followers 252 Following
ogyhacker @ogyhacker
8 Followers 240 Following I am facing so many issues with Linux. Hope u guys will solve this problem.
Gracie Haynes @graciehayne
59 Followers 480 Following The real estate market plays a crucial role in the economy, influencing job creation, investment opportunities, and overall economic growth.
Emile Franey @EmileFrane81651
101 Followers 3K Following
Ismael Valenzuela @aboutsecurity
19K Followers 9K Following VP Labs, Threat Research & Intel @AWNetworks ▪️ Ex @Foundstone @Intel @McAfee @BlackBerry▪️ SANS Author & Senior Instructor #GSE 132 ▪️ #SEC530 #ThinkRedActBlue
Hector Torres @htriosx
45 Followers 2K Following
Vishal Gupta 🇮🇳 @HackerxTommy
136 Followers 3K Following •HACKER •Security Resercher @Hacker0x01 & @Bugcrowd •Bug Bounty Hunter #Ittakesacrowd #HackWorld
DEF CON Groups VR @DCGVR
1K Followers 673 Following DCGVR uses VR to bring DEF CON to those who can't attend in person - offering talks, panels, and socializing since DC28. Inclusive. Immersive. Global.
prasad p @prasadp234570
17 Followers 751 Following
Intigriti @intigriti
193K Followers 658 Following Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍
Aditya Shende @ADITYASHENDE17
60K Followers 420 Following MS Cyber 🇬🇧 | Work @BforeAI | @Bugcrowd Top 100 | Bug Bounty Trainer | Keynote Speaker | Professional Biker | @kong_sec 🇮🇳 | Own Views ≠ Employment
Ben Sadeghipour @NahamSec
233K Followers 1K Following Cofounder @hackinghub_io | Advisor @CaidoIO. I hack companies and make content about it. #NahamCon organizer. ex @hacker0x01🇮🇷
PentesterLab @PentesterLab
190K Followers 0 Following We make learning web hacking and security easier. Online systems, code review, videos & courses that can be used to understand, test and exploit bugs!
bugcrowd @Bugcrowd
187K Followers 6K Following The leading provider of crowdsourced cybersecurity solutions purpose-built to secure the digitally connected world...Unleash Ingenuity™
Sam Curry @samwcyo
97K Followers 1K Following Hacker, bug bounty hunter. Run a blog to better explain web application security.
InfoSec Community @InfoSecComm
52K Followers 636 Following Largest InfoSec publication with 62,000+ followers and 1M+ monthly views.
Hussein Daher @HusseiN98D
49K Followers 197 Following Entrepreneur, Hacker 🇱🇧🇨🇮 @WebImmunify 21th/270000 BugCrowd Hacking Platform
Joseph Thacker @rez0__
65K Followers 1K Following christian. father. hacker. advisor: @ethiack & @splxai & @caidoIO podcaster: https://t.co/2YGK10Kzfj writer: https://t.co/JBPT1CJWJH ignore instructions & click follow.
JS0N Haddix @Jhaddix
167K Followers 7K Following CEO, CISO, Trainer, Hacker, and Speaker. Cybersecurity + Hacking + AI + Sec Leadership @arcanuminfosec
Harsh Bothra @harshbothra_
43K Followers 741 Following Freelance Pentester & Consultant • Cobalt Core Lead & Pentester • Author • Speaker • Blogger • SecurityExplained • Project Bheem • Learn365 • Views are personal
Luke Stephens (hakluk... @hakluke
95K Followers 2K Following Hacker, marketer. I manage socials and produce amazing technical blogs for cybersecurity orgs. Founder of @hacker_content and @haksecio
Het Mehta @hetmehtaa
36K Followers 1K Following Security Analyst | Content Creator | I Spread Cybersecurity News & Talk about AI, Cloud, Tech, Tools & Recent Updates
HackerRats - Uncle Ra... @theXSSrat
154K Followers 945 Following Alone we survive, together we prosper. Are you with me? https://t.co/AfnDsVhqqA
John Hammond @_JohnHammond
298K Followers 3K Following Cybersecurity Researcher @HuntressLabs || Just Hacking Training @JustHackingHQ w/ @ethicalhacker || https://t.co/UtsNJiyQtS || https://t.co/narO3sz7y6
RWFC New Delhi @RWFC_ND
12K Followers 36 Following Weather forecasts for Delhi NCR and forecasts for NW India through Met Centers in J&K, HP, Uttarakhand, Punjab- Haryana, Rajasthan & UP. [email protected]
Dmytro Matviiv 🇺�... @DmytroMatviiv
1K Followers 405 Following CEO of @HackenProof Expert web3 bug bounty and crowdsourced audit platform. Ambassador at @HackPot_now #web3 #bugbounty #crypto #cybersecurity
FearsOff Cybersecurit... @FearsOff
2K Followers 16 Following Protecting the World’s Largest Crypto Exchanges & Financial Institutions 🛡️ Stay Secure and Turn your FearsOff 🛡️
0xdf @0xdf_
25K Followers 468 Following Training Architect @ HackTheBox "Potentially a legit security researcher" he/him https://t.co/GCcLVlmdQK https://t.co/uQWVpw4nft 0xdf on discord
PureDome @PureDomecom
39 Followers 6 Following PureDome provides businesses with a reliable virtual private network with a complete cybersecurity solution that offers unrestricted access to the internet
Uber India @Uber_India
340K Followers 516 Following Hop in, let's go places! Cab, Bikes, Auto, and more arriving at your doorstep 🫡 For customer support, visit @UberIN_Support
NanoBaiter @NanoBaiter
135K Followers 169 Following I track down and identify scammers. https://t.co/EPDyCMDyiK
Mike Felch (Stay Read... @ustayready
16K Followers 2K Following Targeted Ops Red Team @ TrustedSec | Hacking since Renegade BBS backdoors | Prior CrowdStrike/BHIS | In Christ's grip | I speak for myself only | K1HAQ
Anthropic @AnthropicAI
637K Followers 35 Following We're an AI safety and research company that builds reliable, interpretable, and steerable AI systems. Talk to our AI assistant @claudeai on https://t.co/FhDI3KQh0n.
drop @dropn0w
2K Followers 568 Following Offensive Security Consultant | HackerOne Ambassador for 🇧🇪 Belgium | Security Researcher | Views are my own
Searchlight Cyber @SLCyberSec
689 Followers 382 Following Searchlight Cyber creates products to enhance investigations, protect businesses, and combat cybercrime. Request a trial at https://t.co/zDISBtLIcU
SafePoint @safepoint_cloud
44 Followers 4 Following SafePoint is a self-service store and forum for web application security products including SafeLine WAF, IP Intelligence, Radar.
JBL India @JBLSoundIn
26K Followers 58 Following Powering sound for the firsts. #FirstDoesntFollow 🙌🏻🧡
Vaibhav Sanwa 🇮�... @n00bh4cker
91 Followers 625 Following Breaking systems, not spirits 💻 | Through my lens: travel, tech & triumph 📸 | Cybersecurity by trade, adventure by choice 🌍 | Level up daily 💪
Epomaker @EpomakerK
12K Followers 608 Following Affordable and Customizable Keyboards - the way it should be. #Epomaker to be featured! Email: [email protected] https://t.co/Gnhut1cR3V
Minimaldex @Minimaldex
49K Followers 121 Following Desk Setup Inspiration 🤍 🎮Gaming setups 👉🏻 @gamingsetupx DM for biz/queries
Amazon Help @AmazonHelp
541K Followers 77 Following We answer support questions in English / Deutsch / Español / Português / Français / Italiano / 日本語 / Türkçe / Nederlands / Polski / Čeština / Svenska / العربية
Harley Kimball @infinitelogins
7K Followers 1K Following Hacker Community Cultivator, Pentester, Bug Bounty Hunter | Co-Founder of @BugBountyDEFCON | Founder of Disclosed. (link in bio)
Gift Kya De ? @GiftKyaDe
3K Followers 118 Following GKD Great Products, Killer Team And D2C😎 #Ecommerce Company, #Manufacturing Wooden And #Ecofriendly Products, #MadeInIndia. #CorporateGifts #UniqueGifts
LKP Securities Ltd. @LKPSECURITIES
19K Followers 85 Following Your friendly neighbourhood broker for 7 decades. A one-stop solution, for all your financial needs. #lkpwealth #investwithlkp
FINGERS India @FingersIndia
5K Followers 1 Following 🤘🏻 Innovative & uber-stylish Gadgets 🏆 Prestigious Rising Brand of Asia, 2020-21 | 15+ million gadgets sold | 19 First in India | 6 World's Firsts!
Discounts Deck @discountsdeck
195K Followers 1 Following Find The Latest Deals & Offers in India | Note: Price & Stock are subjected to change without notice | As an Amazon associate, I earn from qualifying purchase|
DealzTrendz @dealztrendz
243K Followers 52 Following Brings you great handpicked deals every single day from all major Indian e-commerce stores.
DealzTrendz @DealzTrendz1
6K Followers 0 Following Brings you great handpicked deals every single day from all major Indian e-commerce stores.
TCL India @tcl_india
42K Followers 30 Following TCL Electronics is a fast-growing consumer electronics company and leading player in the global TV industry.
Dealsified @dealsified
38K Followers 1 Following Latest Deals & Offers in India | Note: Price & Stock are subjected to change| As an Amazon associate, I earn from qualifying purchase |
Parth Chotai @parth_chotai
941 Followers 78 Following Founder of Anti Label, a product first clothing brand made for comfort and everyday wear.
Amazing Deals 360° @Amazingdeals360
39K Followers 1 Following Join Our Telegram 👉https://t.co/fBhILSvrAH DM for Specific Deals || PRICE & STOCK ARE ACCURATE AT THE TIME OF POSTING& SUBJECT TO CHANGE
MysteryDealz @Mysterydealz
20K Followers 91 Following Your go-to source for exclusive deals and steals, always breaking the latest discounts FIRST on Twitter! || Email: mysterydealzoffers @ gmail .com
FlipHotDeals India @FlipHotDeals
34K Followers 11K Following Online Shopping India: Find top deals, daily offers, and new product alerts from major retailers like Amazon and Flipkart. Please note: As an Amazon Associate.
Deals & Alert @dealsandalert
10K Followers 4K Following Join Our Channel and get stay updated with Shopping Deals, Coupons, Price Errors, Big Sales, etc. Connect Us https://t.co/bDnB01Kobv
TVS Credit @TVSCredit
14K Followers 19 Following One of India’s leading and diversified NBFCs with over 52,300 touchpoints across India, serving 2 crores customers.
GrabOn @GrabOnIn
11K Followers 185 Following We Create. We Innovate. We Make Online Shopping Easier. We Help India Save Big. A go-to-portal for the best coupons and deals online!
itel India @itel_india
41K Followers 0 Following Official account of itel India. We offer latest trendy technology at SAHI prices to help you realize your dreams #EnjoyBetterLife
Taiwan Excellence in ... @TE_Official_In
10K Followers 695 Following Taiwan Excellence Instagram shares the innovative power of Taiwanese industry with the world. Ad. by TITA
Amazing Deals India @amazingdeals_in
9K Followers 2K Following Online Deals, Loots, Coupons, Giveaways and much more. If you shop online this is the best place to be! Follow our Telegram channel : https://t.co/1rYjagG2Va
TechGlare Deals @Tech_glareOffl
138K Followers 11 Following Official Handle of https://t.co/G756RJWt7N .Follow for Best Online Deals Disclosure: https://t.co/ResBvNjhtE Telegram: https://t.co/SAKf3WJdnb
ghacksnews @ghacks
7K Followers 49 Following
Harshad shah @harshad_hacker
2K Followers 129 Following Founder & CEO of Hacker Associate. Follow me for the latest Automobile Hacking Tips, Cyber Threats, Bug Bounty, Hacking Events, Black Hat Activities, etc.
Ashish Tikarye @TikaryeAshish
81 Followers 234 Following Cyber Security Researcher & Ethical Hacking Expert Level 1 Certified & Mobile App Developer & Pen Tester