Python3 🐍 @hackfolio

Humanitarian | Ethical Hacker| Software Developer. I React with Python❤ Remote Joined March 2018

Tweets

1K
Followers

4K
Following

357
Likes

441

🇸🇦 Murtada Bin Abdullah (Rood) @0x_rood

2 years ago

some ways to bypass 403 1- using space symbols exmaple: /admin -> 403 /admin%09 -> 200 /admin%20 -> 200 2- use traversal Example: /admin -> 403 /..;/admin -> 200 you can fuzz with traversal sometimes that's end with results Example: /..;/FUZZ #BugBountytips #BugBounty

10 294 950 62K 593

Download Image

Hakin9 @Hakin9

2 years ago

Everything you need to know to understand basics of OSINT Read here: hakin9.org/product/future… #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #Linux #windows

0 3 6 1K 0

Hakin9 @Hakin9

2 years ago

Pretend to be busy or waiting for your computer when you should actually be doing real work! hakin9.org/genact-a-nonse… #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #Linux #windows

0 3 9 2K 0

Rez Karim @rezkhere

2 years ago

No more hours of video editing. ChatGPT can now create a video commercial with the script, voice-over, music and everything with just two prompts. I will show you how in 4 easy steps 👇

394 4K 20K 4.6M 32K

TCM Security @TCMSecurity

2 years ago

Are you familiar with Local File Inclusion (LFI) & how attackers use it to exploit your defenses? Understanding LFI and how to mitigate it is an integral part of managing cyber risks. Find out more in today's blog, "An Introduction to File Inclusion." tcm-sec.com/local-file-inc…

0 10 71 7K 12

Download Image

Rez Karim @rezkhere

2 years ago

AI just killed Excel. No more complex formulas and watching 10-hour tutorials. Introducing Rows, the only AI Excel tool you will ever need (It's 100% free) 👇

593 10K 47K 7.7M 48K

Longevity Dad @longevitydad

2 years ago

ChatGPT is in trouble. Google's free competitor Bard just got a MASSIVE new update. Here's 8 things Bard can do that ChatGPT can't:

766 4K 18K 5.6M 11K

HackerRats - Uncle Rat ❤️ (XSS Rat) @theXSSrat

2 years ago

100 tools every self respecting web app hacker should know Burp Suite OWASP ZAP Metasploit Framework sqlmap Nmap Dirbuster WPScan Arachni BeEF Hydra XSSer Sqlninja Cain and Abel Netcat THC Hydra Nikto Skipfish Vega sqlsus John the Ripper THC-SSL-DOS Sublist3r Wfuzz Shodan…

50 367 1K 103K 846

cje @caseyjohnellis

2 years ago

For those freshly interested in offensive ML/AI/GAI, this primer from @InsiderPhD at @Bugcrowd #levelup0x07 continues to be *awesome* - Introduction to AI & Machine Learning - w/InsiderPhD bit.ly/41oTLZH

1 13 34 7K 12

Ninad Mishra @NinadMishra5

2 years ago

This is how to find sql-Injection 100% of the time For site.com/?q=HERE /?q=1 /?q=1' /?q=1" /?q=[1] /?q[]=1 /?q=1` /?q=1\ /?q=1/*'*/ /?q=1/*!1111'*/ /?q=1'||'asd'||' <== concat string /?q=1' or '1'='1 /?q=1 or 1=1 /?q='or''=' credit:@TodayCyberNews #BugBountyTips

61 516 2K 88K 904

🇷🇴 cristi @CristiVlad25

3 years ago

Look for these file extensions in your pentests and appsec assessments. (thread)

17 81 257 47K 180

0xblackbird @0xblackbird

3 years ago

Mega-thread on IDORs

49 283 725 94K 485

nixCraft 🐧 @nixcraft

3 years ago

Deprecated #Linux commands and their replacement. For more info please see cyberciti.biz/faq/linux-ip-c… my page.

25 70 344 49K 83

Download Image

OffSec @offsectraining

3 years ago

We've provided tips and resources you can use to prepare for the #oscp. All in one place. Download the e-book: offs.ec/3BEpfkg #pen200 #penetrationtesting #cybersecuritytraining #ethicalhacking #roadtooscp #oscp

6 98 357 50K 96

Download Image

Mike Schiff @MikeSchiff_

3 years ago

Cheat codes I know in my 30’s that I wish I knew in my 20’s:

379 8K 47K 0 18K

Matt Kelly @breakersall

3 years ago

How to do a $50k social engineering pentest in a couple minutes via OpenAI playground. 1/2: Create a EC2 instance with EvilGenX 3. Limit your firewall via iptables to only accept target IP addresses 4. Purchase a domain 🧵 1/2

11 113 527 0 270

Download Image

Osmedeus @OsmedeusEngine

3 years ago

🚀 Osmedeus v4.2.0 has been released with a new template engine. The workflow now supports dynamic threads, allowing you to slow down and speed up the scan based on your demands. github.com/j3ssie/osmedeu… #security #infosec #osint #recon #attacksurface #bugbounty #bugbountytips

0 20 70 0 20

Download Image

Luke Stephens (hakluke) @hakluke

3 years ago

10 29 215 0 35

Download Image

Sam Curry @samwcyo

3 years ago

We recently found a vulnerability affecting Hyundai and Genesis vehicles where we could remotely control the locks, engine, horn, headlights, and trunk of vehicles made after 2012. To explain how it worked and how we found it, we have @_specters_ as our mock car thief:

75 1K 5K 0 914

Download Image

Sam Curry @samwcyo

3 years ago

More car hacking! Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car. Here's how we found it, and how it works: