Dinesh Biswal @mr_3xploitdb

Cyber Security Engineer || 127.0.0.1 Joined September 2021

Tweets

197
Followers

46
Following

823
Likes

319

Dinesh Biswal @mr_3xploitdb

a month ago

Hey, @grok, who was the most famous person to visit my profile? It doesn't need to be a mutual, don't tag them, just say who it was. Also list top 20 persons to visit my profile ir last 3 months. Don't tag them.

1 0 0 24 0

Today Cyber News @TodayCyberNews

2 years ago

👀 Bug Bounty Tips by Unknown Bypassing Cloudfront XSS WAF 1) alert = window["al"+"ert"] 2) bypass () with `` 3) replace space with / 4) encode symbols: 🔹< = %3c 🔹> = %3e 🔹" = %22 🔹[ = %5b 🔹] = %5d 🔹` = %60 Not Encoded Payload:…

1 70 202 18K 140

Threatsys Technologies Pvt. Ltd. @threatsys

6 months ago

Supporting Cyber Security Awareness at BKRT 230 with CEO Deepak Kumar Nath and ACP Anjana Tudu. #CyberSecurityAwareness #BKRT230 #TechInnovation #DigitalSafety #CyberSecurity #SecureFuture #CyberCrimePrevention

0 1 2 76 0

Download Image

ReconOne @ReconOne_bk

2 years ago

How to start RECON in your #BugBounty Hunting 1. Subdomain Enumeration 2. Getting live hosts 3. Web Server Detection 4. Scan for file&dirs 5. Grab urls 6. What's in the JS file? 7. Github recon 8. Virtual Hosts Open your terminal and start now 💪 #cybersecurity #recontips

6 86 299 27K 229

H4x0r.DZ @h4x0r_dz

4 years ago

If you Are Interested In Developing your Hacking skills Read some amazing @BlackHatEvents pdf <3. Demo Google dork: site:blackhat.com intext:"RCE" filetype:pdf #CyberSecurity #BugBounty #infosec

16 478 1K 0 690

Download Image

Saurabh Kumar Pandey @thesaurabh___

a year ago

Certified Cloud Security Professional (CCSP) Certification🌐📚🧾 Link 🔗mega.nz/folder/MnphVBB…

4 299 1K 106K 2K

HackerRats - Uncle Rat ❤️ (XSS Rat) @theXSSrat

a year ago

CONTEST!! Lab of the day: labs.hackxpert.com/IDOR/ IDOR fun :D How many can you crack without looking at the solutions? Whoever can write the best writeup in 24 hours from this post going up about MORE THAN ONE LAB!! Gets a nice price <3 - Funniest writeup: 1x Endless…

1 6 32 5K 14

Laxita Purbia @PurbiaLaxita

a year ago

To bypass 403 restrictions 1. Use patterns like in the URL path /* /%2f/ /./ / /*/ 2. Adding Headers in request with value 127.0.0.1 X-Custom-IP-Authorization X-Forwarded-For X-Remote-IP Forwarded-For X-Client-IP 3. Switch from GET to POST (or other methods) #CyberSecurity

14 106 481 31K 379

Katie Paxton-Fear @InsiderPhD

2 years ago

Reminder: API security Masterclass episode 2 is on the 20th of Feb, it’s a completely free and interactive course teaching you everything you need to know about API security. In episode 2 we’ll be looking at API discovery!

9 20 112 14K 39

Roberto Nunes @0x_Akoko

2 years ago

Yay, I was awarded a $1,500 bounty on @Hacker0x01! hackerone.com/roberto99 Bug : Swagger XSS Tips : I mostly use fofa.info with favicon filter to find Swagger UI. #TogetherWeHitHarder #bugbounty #bugbountytips #swagger

10 65 441 23K 223

Download Image

Dinesh Biswal @mr_3xploitdb

2 years ago

thebotsite.notion.site/Access-Control…

0 0 5 32 0

Arshad Kazmi @arshadkazmi42

2 years ago

🕵️‍♂️ Inspired by @GodfatherOrwa's GitHub recon methodology, I dug into Docker Hub layers & struck gold! 🪙 Bug bounty hunters, this is a treasure trove of exposed employee credentials! 🔍💰 (1/3)

5 36 123 20K 181

Ahsan Khan @hunter0x7

2 years ago

~PII Disclosure

13 60 362 20K 150

Download Image

Lupin @0xLupin

2 years ago

Today I received a $12,000 bounty using the Sandwich Attack ! 🤑 The vulnerability allowed me to enumerate the API Keys of other users 🤯 How did I do that ? Well the API key was a UUIDv1. If you are not familiar with UUIDv1s you need to know that they are constructed in 6…

34 266 1K 98K 787

Download Image

bugcrowd @Bugcrowd

2 years ago

Do you have a New Year's resolution to start bug bounty hunting? Get a head start with @NahamSec's HUGE list of resources for beginners: 🐞 Basics 🐛 Blogs & Talks 🐜 Books 🦟 Setup 🪲 Tools 🪳 Labs 🕷️ Talks 🐜 Coding 🦟 Mindset And more! 👇 github.com/nahamsec/Resou…

4 84 264 20K 170

Atal @ZabihullahAtal

2 years ago

Android Hacking and Bug Bounty Course! A Complete Udemy Course for Free! Download Link: mega.nz/folder/b7BBWQo… Follow @ZabihullahAtal for free Tech Knowledge, Tech Updates, and Career Growth.

4 139 378 23K 318

Download Image

Abhishek Meena - {🔥} @aacle_

3 years ago

24 Javascript path files used to store sensitive information in Web Application 1. /js/config.js 2. /js/credentials.js 3. /js/secrets.js 4. /js/keys.js 5. /js/password.js 6. /js/api_keys.js 7. /js/auth_tokens.js 8. /js/access_tokens.js 9. /js/sessions.js 10. /js/authorization.js

41 338 972 72K 466

Mike Takahashi @TakSec

2 years ago

Google Dork - Bug Bounty Programs 💰 inurl:bounty "reward" "scope" "report" -yeswehack -hackerone -bugcrowd -synack -openbugbounty Find bug bounty programs others don't know about 🕵️‍♂️

0 92 468 24K 306

Download Image

X @TheMsterDoctor1

2 years ago

Bug bounty Cheatsheet: XSS github.com/EdOverflow/bug… github.com/ismailtasdelen… SQLi github.com/EdOverflow/bug… SSRF github.com/EdOverflow/bug… github.com/swisskyrepo/Pa… CRLF github.com/EdOverflow/bug… github.com/swisskyrepo/Pa… CSV-Injection github.com/EdOverflow/bug… github.com/swisskyrepo/Pa……

6 256 690 34K 696

Download Image

Brute Logic @BRuteLogic

2 years ago

CloudFlare #XSS Bypass <Img Src=OnXSS OnError=confirm(1)> => Why this new one is better? Because the <Img> element pops also in DOM scenarios where <Svg> can't. That very payload is currently available in @KN0X55 Pro and also in demo.