(inc0gbyt3) @incogbyte

pentester/infosec/ infosec researcher of nothing incogbyte.github.io Inisde opcodes, between 0x's Joined August 2019

Tweets

127
Followers

411
Following

421
Likes

665

(inc0gbyt3) @incogbyte

7 months ago

In this post, I dive into how Flutter apps generally encrypt requests using RSA, how to analyze the compiled binaries, and how I reverse using frida, blutter Check it out here: incogbyte.github.io/posts/flutter-… thanks @fridadotre @enovella_ @sleepya_ #infosec

0 0 8 256 1

Jiska @naehrdine

a year ago

It's been a while – here's a brand new reversing short on how to interpret log messages in Apple's binaries! youtu.be/-uIeRISQaiI #reversingshorts

3 16 83 8K 34

Download Image

Murphy @as0ler

a year ago

Our #r2Frida trainees put their knowledge in practice and it publicly! n0psn0ps.github.io/2024/06/07/mac… If you have lost the opportunity, you have another chance to learn from it in our next @_ringzer0 Training in Las Vegas with @Hexploitable and me. ringzer0.training/doubledown24-m…

1 12 33 3K 15

(inc0gbyt3) @incogbyte

a year ago

Shosubgo now accepts a wordlist of subdomains. Checkout GitHub.com/incogbyte/shos… v3.0 thanks 🙏

0 0 5 125 0

(inc0gbyt3) @incogbyte

a year ago

Thanks @Jhaddix mentioned shosubgo github.com/incogbyte/shos… at @SANSOffensive . Awesome talk, and good tips for cloud recon 👾👾👾

0 1 5 242 0

(inc0gbyt3) @incogbyte

3 years ago

I just completed the #burpchallenge. I found a logic bug where after requesting a password reset, the link sent to the email had a token that did not expire and had a predictable pattern, after understand the pattern, it was possible to account takeover of any user

0 0 2 442 1

(inc0gbyt3) @incogbyte

3 years ago

With the arrival of @palera1n, I made a script, using frida, to bypass jb checks based on relative paths and also include some bypass for more common antitampers like ptrace, geppid. codeshare.frida.re/@incogbyte/ios… @fridadotre and thans to @ios_euphoria for the GUI♥️

0 1 5 693 0

(inc0gbyt3) @incogbyte

3 years ago

I'm sharing a script using frida, to bypass sslpinning more common (Android). gist.github.com/incogbyte/1e0e… codeshare.frida.re/@incogbyte/and… #BugBounty #BugBountytips #fridadotre @fridadotre

2 94 276 0 101

(inc0gbyt3) @incogbyte

4 years ago

thanks @Informatica it's an honor to contribute =) informatica.com/trust-center/s…

0 0 0 0 0

(inc0gbyt3) @incogbyte

4 years ago

small write up about PHPIPAM CVE-2022-23046 with exploit, incogbyte.github.io/post/2022-01-2… #bugbounty #bugbountytips #infosec #beginner

0 1 1 0 0

PT SWARM @ptswarm

4 years ago

📲 We are pleased to present the utility developed by our researcher @lmpact_l for Flutter apps traffic monitoring. Just make app trust installed certificates by repacking it with reFlutter and hunt bugs using Burp Suite. No root, no VPN, no more hassle! github.com/ptswarm/reFlut…

6 84 235 0 52

Download Image

(inc0gbyt3) @incogbyte

4 years ago

I added a template, for nuclei to identify a XSS without authentication in Lucee check. github.com/projectdiscove… #bugbountytips #nuclei

1 9 31 0 7

(inc0gbyt3) @incogbyte

5 years ago

Those who haven't seen my tool on h@cktivitycon, this one [github.com/incogbyte/shos…] and the conference also so you didn't see [youtube.com/watch?v=qLTe6Z… ] thanks to @Jhaddix @0x0g @Hacker0x01 #BugBountytips #BugBounty

0 1 3 0 0

(inc0gbyt3) @incogbyte

6 years ago

I wrote a small tool to grab subdomains from Shodan github.com/incogbyte/shos… yeah.. i know that this already exist but.. i made another ;) #peace #golang

2 15 40 0 8

(inc0gbyt3) @incogbyte

6 years ago

thanks @Philips it's a honour contribute.. philips.com/a-w/security/c…

0 0 0 0 0

Pentester Land @PentesterLand

6 years ago

Check this out if you want to learn about a lesser known IDOR variant, how to leverage markdown for hacking, what Jason Haddix & Frans Rosén are up to these days & more! #hacking #websec #InfoSec #bugbountynews #T5HN #pentesting #bugbounty #pentest pentester.land/newsletter/202…

1 14 50 0 16

(inc0gbyt3) @incogbyte

6 years ago

I wrote a little bit about a pentest that I did, and I got domain admin incogbyte.github.io/domain-admin/ #BugBounty #PenTest

0 5 5 0 3

(inc0gbyt3) @incogbyte

6 years ago

how to detect if someone is using burp suite? it's possible ? incogbyte.github.io/detecting-burp/

0 2 1 0 0

(inc0gbyt3) @incogbyte

6 years ago

I wrote a small guide with some common techniques to bypass WAF, focus on SQL injection.. incogbyte.github.io/sqli_waf_bypass #bugbountytips #bugbountytip