Mukul Gautam @securitythread_

Cyber Security Professional medium.com/securitythread India Joined April 2020

Tweets

161
Followers

59
Following

288
Likes

559

Trendulkar @Trendulkar

9 hours ago

The flex of the future will be the ability to disconnect. Offline may be the new premium.

17 165 1K 56K 238

Download Image

This clip which was shared with me is about Shri Inder Jit Singh Sidhu of Chandigarh. Apparently, every morning at 6 AM, in the quiet streets of Chandigarh’s sector 49, this 88-year-old retired police officer begins his day in service. Armed with nothing but a cycle cart and…

900 5K 29K 820K 631

Download Video

Assetnote @assetnote

2 months ago

Sometimes, SQL injection is still possible, even when prepared statements are being used. Our researcher @hash_kitten has written up a blog post about a novel technique for SQL Injection in PDO’s prepared statements: slcyber.io/assetnote-secu…

1 79 290 11K 182

Pinaki ❄️ @0xInfection

3 months ago

TIL: there are apparently 1.4k potentially malicious MCP servers on GitHub. Cool research from VirusTotal! blog.virustotal.com/2025/06/what-1…

0 4 10 873 2

Aura @SecurityAura

5 months ago

>C:\Windows\system32\dllhost.exe -accepteula -r -ma lsass.exe c:\programdata\[random letters]. >c:\programdata\[random letters] >c:\programdata 'nuff said.

Microsoft Threat Intelligence @MsftSecIntel

5 months ago

>C:\Windows\system32\dllhost.exe -accepteula -r -ma lsass.exe c:\programdata\[random letters]. >c:\programdata\[random letters] >c:\programdata 'nuff said.

8 122 304 71K 104

0 53 331 25K 199

James Kettle @albinowax

5 months ago

This is interesting - Bugcrowd is saying there's evidence of 'leaked credentials from other platforms' and 'compromised tools', and forcing password resets on user accounts. I'd love to know more details about this.

bugcrowd @Bugcrowd

5 months ago

7 10 77 45K 15

Download Image

9 9 106 17K 12

Burp Suite @Burp_Suite

7 months ago

Welcome to the next evolution of Burp Suite… 🚀 #BurpAI

39 202 1K 159K 356

Download Image

Bishop Fox @bishopfox

2 years ago

With the new #opensource tool Swagger Jacker, #pentesters can automate analysis of response codes for each #API defined route, streamline manual testing capabilities with #curl command creation, and gather #endpoint routes. #OSINT #pentestingtool #infosec…

0 49 147 20K 86

Download Image

Matt Johansen @mattjay

2 years ago

One of the biggest hacks of the year has mainly gone untalked about. A Chinese hacker group compromised a $57 billion chip manufacturer in 2017. They weren't discovered for over 2 years. Here's everything we know:

40 852 4K 1.5M 2K

ISRO @isro

2 years ago

Chandrayaan-3 Mission: 'India🇮🇳, I reached my destination and you too!' : Chandrayaan-3 Chandrayaan-3 has successfully soft-landed on the moon 🌖!. Congratulations, India🇮🇳! #Chandrayaan_3 #Ch3

69K 274K 829K 70.7M 7K

Katie Paxton-Fear @InsiderPhD

3 years ago

A great place to learn some cool bugs the Top 10 web hacking techniques poll is open, honestly just learn about all of these portswigger.net/polls/top-10-w…

1 22 107 14K 33

Mukul Gautam @securitythread_

3 years ago

Thank you, @eLearnSecurity for the eXtreme Web Vulnerability Assessment #elearnsecurity #ewptx

0 0 2 0 0

Download Image

Janggggg @testanull

3 years ago

CVE-2022-36804 PoC 🧐 anquanke.com/post/id/280193

13 327 1K 0 179

Download Image

Nuclei by ProjectDiscovery @pdnuclei

3 years ago

Scanning for - CVE-2022-31474: 0-day WordPress BackupBuddy plugin affects 140,000 websites via @TheHackersNews using nuclei template shared by @AlphaRingo Template PR: github.com/projectdiscove… Source: thehackernews.com/2022/09/hacker… #hackwithautomation #bugbounty #security #wordpress

8 136 391 0 58

Download Image

Avinash Jain @logicbomb_1

3 years ago

This is really interesting - The gravatar in WordPress blogs or in people’s comments on WordPress Websites can be used to identify their Email Addresses. The link of such avatars actually contains the hashed value of the author’s/user's mail id. #OSINT #security #WordPress

12 73 274 0 82

Download Image

Sahil Bloom @SahilBloom

3 years ago

23 lies you've been told about the world:

537 7K 22K 0 12K

Sanjay Gondaliya @devsecboy

3 years ago

A good reference for Android testing and finding esoteric vulnerabilities explained at @bsidesahmedabad by me(@RealSanjay) and @PanegavSharan. Special Thanks @NotSoSecure youtube.com/watch?v=nr4I1a… #android #androidsecurity #pentest #mobilepentest #mobilesecurity #bsides

2 25 50 0 8

Mukul Gautam @securitythread_

4 years ago

When new people entering into bug bounty, according to my experience we should have patience, running tools and using single linear does't gave anything. Understanding things help much in long term. Seeing screenshot may be tempting but just ignore...

0 0 0 0 0

Stephen Sims @Steph3nSims

4 years ago

I’m going to randomly pick 3 people who retweet this to receive a copy of the book. I’ll tweet out the winners tomorrow. I’ll also be giving away two more copies later this week complements of @RayRedacted! …and maybe a couple more next week just for university students