Shuva @scriptshuva

Security Researcher linktr.ee/scriptshuva Joined March 2017

Tweets

22
Followers

167
Following

163
Likes

626

Shuva @scriptshuva

3 months ago

Once again, bypassed 2FA. Another $$$$$ bounty from meta #BugBounty #Infosec #AppSec

5 2 196 9K 43

Download Image

Shuva @scriptshuva

a year ago

medium.com/@scriptshuva/i…

1 20 113 6K 75

Critical Thinking - Bug Bounty Podcast @ctbbpodcast

a year ago

Bug bounty can be a cruel mistress sometimes. Dupes, downgrades, mass closes and misunderstandings get us all down. Solid tips were dropped on the pod last week to help in these times. Here are 14 of them.

4 59 226 25K 172

Download Image

LiveOverflow 🔴 @LiveOverflow

a year ago

please come with low expectations! But we hope you see some value regardless 😅

hextree.io @hextreeio

a year ago

please come with low expectations! But we hope you see some value regardless 😅

6 7 104 28K 33

Download Image

5 9 106 16K 12

Web Security Academy @WebSecAcademy

2 years ago

🔔 New topic alert: Web LLM attacks 🔔 Stay ahead in application security - dive into the world of LLMs to discover their weaknesses and understand how to exploit them. Read our latest learning materials and try your hand at the new interactive labs. portswigger.net/web-security/l…

6 118 394 55K 108

Orange Tsai 🍊 @orange_8361

2 years ago

@man_maii @pyn3rd 可搭配部落格一同觀賞XD blog.orange.tw/2023/08/2023-w…

1 7 29 2K 4

Doyensec @Doyensec

2 years ago

Interested in #appsec and/or #graphql and contributing to an #opensource project? We're announcing a call for contributors for #inql! InQL is our #BurpSuite extension for GraphQL security testing - check it out today! #doyensec github.com/doyensec/inql

0 8 13 3K 2

Download Image

Doyensec @Doyensec

2 years ago

Great news! Our Proxy Enriched Sequence Diagrams (PSED) Exporter tool is fully integrated in #Burpsuite & in the BApp Store. You'll love how it creates professional diagrams & helps communicate complicated traffic flows. Install today! #doyensec #appsec portswigger.net/bappstore/3c1b…

0 6 16 1K 7

Download Image

LiveOverflow 🔴 @LiveOverflow

2 years ago

Authentication Bypass or bullshit #bugbountytips? youtube.com/watch?v=2vAr9K…

10 55 255 58K 68

JS0N Haddix @Jhaddix

3 years ago

Here's another "meta" long-form hacking tip that has paid its weight in gold. == Don't rely on TOO much automation == A thread 🧵 🚨follow, retweet, & like for more 🚨 Some examples: 👇 1/x

17 112 315 0 154

Download Gif

JS0N Haddix @Jhaddix

3 years ago

= Infosec super-thread = A big part of my presos is tools/resources I like for offensive security & bug hunting. Here's a thread of "PRINT" resources cited in the Bug Hunter's Methodology Application Analysis v1 docs.google.com/presentation/d… a 🧵 #bugbountytips #Pentesting 1/x

47 226 652 0 459

PortSwigger Research @PortSwiggerRes

4 years ago

You can now trigger file-upload XSS with no user-interaction using a technique spotted by @kkotowicz. We've just added it to our XSS cheat sheet: portswigger.net/web-security/c…

4 124 351 0 82

Youstin @iustinBB

4 years ago

Cache Poisoning at Scale: Identifying and Exploiting over 70 Cache Poisoning Vulnerabilities youst.in/posts/cache-po…

24 626 1K 0 621

PortSwigger Research @PortSwiggerRes

4 years ago

We've launched the long-awaited @WebSecAcademy HTTP/2 topic! Learn about and practice HTTP/2 request smuggling, request tunnelling, and response queue poisoning! portswigger.net/web-security/r…

4 130 419 0 34

James Kettle @albinowax

4 years ago

H2C Smuggling is a seriously cool HTTP/2 attack technique. It won't directly feature in my upcoming presentation, but you should still check it out: labs.bishopfox.com/tech-blog/h2c-… blog.assetnote.io/2021/03/18/h2c…