🇪🇬 المحترف 🇸🇦 @sec_bug

مصر Joined September 2016

Tweets

4K
Followers

204
Following

2K
Likes

9K

Ben Sadeghipour @NahamSec

9 months ago

🚨 I convinced my team to do one last giveaway! Options: hhub.io/eu2wxGj 🏆 Full Access: $199 💻 Lifetime Course: $39 (includes updates) 🎯 1-Month trial (no updates): $19 TWO WINNERS (1 each): - Full cert bundle - Lifetime access Enter: ↪️ RT + Reply with 🎯

433 403 544 66K 95

Download Image

Jayesh Madnani @Jayesh25_

2 years ago

🚀Bug Bounty Tips: Act quickly to report issues related to CVE-2020-27838, as many vulnerable instances are still out there. I've identified over 100+ instances vulnerable to CVE-2020-27838 so far. A flaw was found in Keycloak in versions prior to 13.0.0. The client registration…

7 63 339 28K 241

Download Image

Het Mehta @hetmehtaa

2 years ago

An automation tool for enumerating subdomains, filtering out XSS, SQLI, Open Redirect, LFI, SSRF, and RCE parameters, and scanning for vulnerabilities. github.com/h4r5h1t/webcop…

1 38 135 9K 87

Brut 🇮🇳 @wtf_brut

2 years ago

🌟Subdominator🌟 is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. 📥github.com/sanjai-AK47/Su… #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #GitHub #offsec

1 50 170 10K 89

Download Image

Abdullah 🇸🇦 @A_cyb3r

2 years ago

📍Scanning APK file for URIs, endpoints & secrets. أداة لتحليل ملفات apk 🖇️github.com/dwisiswant0/ap…

1 14 109 6K 59

Download Image

Mcerfa11l | Sultan Al-Abdali @7evv1

2 years ago

THREAD How did I find 2 DOM XSS by hacking Swagger-UI? 1-Do a subdomain enum to find subs that use Swagger Ui 2-Get the live subs 3-Run Nuclei in all the live subs using the (-tags swagger) 4-Find Swagger Ui endpoints #BugBounty #BugBountytip #BugBountytips #Cybersecurity

11 68 251 25K 192

Download Image

Mustafa Adam Gamaraldin Abdalla @wadgamaraldeen

2 years ago

Thanks to Allah always and forever ♥️ First Triage in 2024, HTML Injection on Login Page #Tips :- 1- site:*[.]redacted[.]com login.php 2- arjun -u .../login.php -> parameters with body length reflection (username) 3- Test for :- SQLi, LFI, XSS, HTML inj,..etc #bugbountytips

4 52 223 14K 95

Download Image

m0uka_Dz 🇩🇿 @m0uka_Dz

2 years ago

- Simple tip for port scan 1) after enumerat your subdomains save in subs.txt 2) run this command "cat subs.txt | dnsx -a -ro | naabu -silent -top-ports 1000 -exclude-ports 80,443,21,22,25 -o ports.txt" #bugbountytips #bugbounty #infosec #cybersec

6 147 533 27K 423

Download Image

/usr/bin/fares @SirBagoza

2 years ago

شكرًا لعبدالرحمن ذكي، لخص فيديو الرود ماب ف تكست ❤️ للي مش حيقدر يتفرج عالفيديو او معندهوش وقت، دقيقه اقرا الاتي: ——————————— 1. html | elzero.org 2. css ازاي تعمل تزيين بس كدا وخلاص | elzero.org 3. js | elzero.org 4. php |…

/usr/bin/fares @SirBagoza

2 years ago

5 21 117 30K 59

Download Image

6 34 195 23K 270

X @TheMsterDoctor1

2 years ago

🔖Penetration Testing, Beginner To Expert! Massive Web Application Penetration Testing & Bug Bounty Notes📚 github: github.com/xalgord/Massiv… #web #pentest

5 160 500 22K 320

88 @0x88__

2 years ago

I'm thrilled to introduce Recon88r, a Python script designed to streamline and automate the reconnaissance process # Features: Subdomain Enumeration Live Results in Discord Perform XSS scans JS Exposures Port scanning Full nuclei scanning Panels #bugbounty t.ly/FfmSP

0 37 159 10K 71

Khaled Samy @khaleedsamy12

2 years ago

"Don't ignore 403 subdomains" Try to bypass or fuzz more. Also, always check Symfony targets for these directories: /_profiler. You might find phpinfo containing Symfony secrets, which can lead to RCE. Great tip by @GodfatherOrwa! ❤️❤️ #BugBounty #SecurityTips

5 94 462 25K 203

Download Image

Saad Ahmed @XSaadAhmedX

4 years ago

Ghauri - An Advanced SQL Injection Automation Plugin-In By @SecurityFoster. 💫💫 Latest Acunetix VS Ghauri 🧐🧐 Coded By: @r0oth3x49 🎩 #Cybersecurity #automationtesting #BugBounty #BugBountytips

11 139 361 0 126

Download Image

Het Mehta @hetmehtaa

2 years ago

Some Shodan Dorks that might be useful in Bug Bounty. 1. org:"http://target. com" 2. http.status:"<status_code>" 3. product:"<Product_Name>" 4. port:<Port_Number> “Service_Message” 5. port:<Port_Number> “Service_Name” 6. http.component:"<Component_Name>" 7.…

4 85 280 22K 247

zack0x01 @zack0x01

2 years ago

This tool ( unisub ) , its one of the best option for you to bypass WAF's and filters .🙂 by @TomNomNom #bugbountytips #bugbounty #Hackingtime

6 118 480 30K 349

Download Image

🇪🇨🍫 @bxmbn

2 years ago

Wanna know How I prevented a Mass Data Breach? Go Read: medium.com/@bxmbn/how-i-p… Wanna know How a Bank offer led to PII Leak? Go Read: medium.com/@bxmbn/i-recei… More writeups coming soon 🖤

20 106 578 35K 232

Harsh vardhan Singh @root_lucky_

2 years ago

1/7 Web Application Recon Tips 1 : Resolution # github.com/projectdiscove… cat subdomains/subdomains.txt | httpx -follow-redirects -random-agent -status-code -silent -retries 2 -title -web-server -tech-detect -location -no-color -o websites.txt #BugBountytips #BugBounty #Hacking

5 36 148 9K 134

H4x0r.DZ @h4x0r_dz

2 years ago

Ok, here is another #bugbountytip You can find this issue with “login with Google ” too, or any other Idp providers During the signup process, delete the email value from the scope 💣

Jayesh Madnani @Jayesh25_

2 years ago

Ok, here is another #bugbountytip You can find this issue with “login with Google ” too, or any other Idp providers During the signup process, delete the email value from the scope 💣