Ruggiero @OldProgrammers
Bug Hunter & Python developer ::1 Joined January 2021-
Tweets115
-
Followers17
-
Following399
-
Likes431
RIP Kevin Mitnick
trick to find hidden endpoints on web apps, start with Underscore (_) ffuf -w wordlist.txt -u target.com/_FUZZ #BugBountytip #BugBounty
When you are trying to read the files of the server via SSRF and if there is any WAF in place like Akamai, Cloudflare. If you try to access file:///etc/passwd, Normally the WAF will automatically blocks your request (So don't give up.) Example: #BugBounty #BugBountytips #ssrf
Google Dorks for Bug Bounty Input your target to generate Google Dork links for easy OSINT recon #bugbountytips taksec.github.io/google-dorks-b…
🎩New 403 Bypass 🎩 🎩Error: Download.php?file=../config.php ==> 403 🎩 Done: Download.php?file=. /config.php⨀ ==> 200 Download.php?file=⊡ /config.php⨀ ==> 200 Download.php?file= .⊡ /config.php ==> 200
$500 for authentication bypass and reading internal files. Tip: fuzz for special and unicode characters. /admin/files --> 302 /authFailure /adminFUZZ/files --> 200 /admin/FUZZ/files --> 200 #BugBountytips #BugBounty
Path Fuzzing Other path bypasses: site.com/secret –> HTTP 403 Forbidden site.com/SECRET –> HTTP 200 OK site.com/secret/ –> HTTP 200 OK site.com/secret/. –> HTTP 200 OK site.com//secret// –> HTTP 200 OK #BugBounty #BugBountytip
Yay, I was rewarded $2 bounty on @Hacker0x01 (thanks for the chips) hackerone.com/mdras3lranaa
AEM default credentials allows me to get admin access to AEM login with all functions allowed and all PII for users on AEM 1. Navigate to dev.x.y.com/libs/granite/c… 2.Login using the below credentials Username: admin , password: author or Username: author , password: author 3.…
Search engines for Hackers: -censys.io -shodan.io -viz.greynoise.io -zoomeye.org -onyphe.io -wigle.net -intelx.io -fofa.so -hunter.io -zorexeye.com -pulsedive.com -netograph.io -pipl.com -abuse.ch -maltiverse.com/search -insecam.org #bugbounty #bugbountytips credit:@ofjaaah
Social Media and Real life
Video of my talk at @bsidesahmedabad is finally out!🌟 🟥 Watch it on youtube: youtu.be/xnx0IQMQD3o 🟥 Slides available at webimmunify.com/bsides Thank you for your support. I'm looking forward to giving back more to the community soon 🎉 #bugbounty #cybersecurity
📢Parameter pollution on password reset [email protected]&[email protected] email[][email protected]&email[][email protected] [email protected]%[email protected] [email protected]|[email protected] [email protected],[email protected] [email protected]%[email protected] {"email":"[email protected]","email":"[email protected]"} {"email":["[email protected]","[email protected]"]}
Top google Dorking Thread 🧵:👇 Here is how to find sensitive data issues: 1) publicly exposed documents :- site:target.com ext:doc | ext:docx | ext:odt | ext:rtf | ext:sxw | ext:psw | ext:ppt | ext:pptx | ext:pps | ext:csv #BugBounty #BugBountytips #infosec
👮 Hacking into several Prisons 👮 Here's how I did it (legally), and what I learned along the way! A thread for security testers and cyber security pros 🧵👇
Google Dorks - Part 4: site:jsfiddle.net "target[.]com" site:codebeautify.org "target[.]com" site:codepen.io "target[.]com" site:pastebin.com "target[.]com" Find hidden endpoints and sensitive data #recon #bugbountytips #infosec
If an unsafe logger is used, an attacker can inject code and execute arbitrary commands, even if the page being accessed is a 404 page. Always test HTTP request headers to make sure the application is handling the headers correctly. #Security #bugbountytips #Hacking #OOB_RCE
The secrets of Google Tag Manager👀 #BugBountyTips @bsysop 👇 #OuthackThemAll #ItTakesACrowd
Header Injection 🌵🌱 #bugbounty #infosec #bugbountytips 🧵(1/n) :👇🏻
Janice Kelly @JanicefeKelly
12 Followers 330 Following Gathered on the site of girls from all US states 🙀 They are ready to meet See nude photos before a date! Watching this https://t.co/7Rtw46yBv7
Graham Zemel @grahamzemel
157 Followers 225 Following Full-stack #developer, #hacker, and #writer. The Gray Area on #Medium (https://t.co/LkXYwE6VVS), and #Github contributer (https://t.co/Fm8CfYxxSI)
Aravind @Aravindzx
54 Followers 796 Following
XFILTRATE for Infiltr... @xfiltratecon
60 Followers 459 Following The original offensive information security conference is coming back to the beach... Did you miss us?
Mohammad Rhidoy 🇧�... @0xRh1d0Y
319 Followers 200 Following Bug Bounty Hunter @Hacker0x01 @yeswehack @yogoshaofficial
David Eckel @mcdave2k1
555 Followers 3K Following Cybersecurity nerd | Ethical hacker | Foodie | Hiker | Let's hack the digital world together! #ethicalhacking #infosec #dfir #kaeferjaeger
Cyber Tzar @cybertzar
1K Followers 5K Following Official Twitter account of Cyber Tzar. Cyber Security Assessment, Score Carding, Benchmarking, and Risk Management Platform.
Robert Weiss @pwcrack
2K Followers 1K Following Head of Information Security, OpenVPN (views are my own) and Defcon Speaker Goon.
BrenShirer Consultant... @brenshirer
4 Followers 26 Following Brenshirer consultants & contractors are leaders in workforce Development. BrenShirer engages in social and economically challenged environments
Charles Shirer @bsdbandit
25K Followers 27K Following A Hacker who is A Lover of People, and Life @RetroTwinz @Secbsd, @GrumpyHackers, @NovaHackers, @deadpixelsec @hacknotcrime Advocate @PositivelyBlue_ OSCP, OSWP
Lovelesh Gangil @loveleshgangil
239 Followers 1K Following CEH (Practical) | ISMS ISO 27001:2022 | CAP | GPCSSI '21 | ICSI (CNSS) | Offensive Security | Digital Forensics and Incident Response (DFIR)
George DevOps Thomas @DevopsGeorge
19 Followers 99 Following •Software Engineer •Back-end, database, and scientific programming •Learning full-stack and cloud development •Dad •Dog walker
Best Videos @10SECVIDEOS
1.1M Followers 2 Following Only The Best Videos | Turn On Post Notifications 🔔
Begin n Bounty @beginnbounty
7K Followers 208 Following 👉Practical Bug bounty tips 👉Beginner friendly 👉Pentesting DM for queries
Damian Strobel @damian_89_
7K Followers 744 Following Penetration tester/Ethical Hacker; Sold my eASM to a NASDAQ company; Founder of an IT security company; Building a Legal Tech AI startup in my spare time :P
ProjectDiscovery @pdiscoveryio
38K Followers 132 Following Detect real, exploitable vulnerabilities. Harness the power of Nuclei for fast and accurate findings without false positives.
Kanhaiya Sharma 🇮�... @krishnsec
18K Followers 579 Following Hacker | Top 25 @Bugcrowd all-time | MVP | Top 15 P1-warrior
HackerOne @Hacker0x01
325K Followers 3K Following The only official HackerOne Twitter account. A global leader in offensive security solutions. #HackForGood #togetherwehitharder
ReconOne @ReconOne_bk
20K Followers 54 Following Tweet about Bug Bounty, Recon, Recon Tips and Attack Surface Management.
𝘻𝘰𝘪𝘥𝘴�... @z0idsec
5K Followers 327 Following 💻👨💻☕ • Bug Bounty Hunter, • SRT Member @synack, • Building cybersecurity SaaS solutions • Work for @pentesterlab ❤️ Be calm and hack.
Mahshooq Zubair @mq_xz_
1K Followers 572 Following On a Quest to Find What’s Missed. // Software Engineer
sw33tLie @sw33tLie
10K Followers 916 Following Web application hacker, 25yo. Top 30 @ https://t.co/wX0yr85Tzk https://t.co/ZI7a8oJJcQ https://t.co/LGYK7tMOGo
Un9nPlayer @Un9nPlayer
1K Followers 93 Following Bounty Hunter | Penetration Tester | Cyber Security Researcher
Critical Thinking - B... @ctbbpodcast
22K Followers 69 Following A 'by Hackers for Hackers' podcast focused on technical content ranging from bug bounty tips, to write-up explanations, to the latest exploitation techniques.
0x999 🇮🇱 @_0x999
1K Followers 275 Following "ɪ ᴛᴏᴏᴋ ᴛʜᴇ ʜᴇʟʟ ɪ ᴡᴀꜱ ɢᴏɪɴɢ ᴛʜʀᴏᴜɢʜ (666) ᴀɴᴅ ꜰʟɪᴘᴘᴇᴅ ɪᴛ ᴏᴠᴇʀ ɪɴᴛᴏ ꜱᴏᴍᴇᴛʜɪɴɢ ᴘᴏꜱɪᴛɪᴠᴇ (999)"💔
Patrik Fehrenbach @ITSecurityguard
31K Followers 285 Following rɪsˈpɒnsəbl dɪsˈkləʊʒə https://t.co/UKFhw5EBwf https://t.co/uCOkOOoNnP
Faique @imfaiqu3
951 Followers 425 Following Hacking for fun & profit 💸 | Ewptx | Traveler ✈️ | Alhamdulilliah Always 🤍
/usr/bin/fares @SirBagoza
8K Followers 701 Following PartT bb hunter | Sec consultant | living my own life | YT@CyberBugz
Restitutor Orientis �... @restitutorII
116K Followers 1K Following Moyen-Orient Anatolien Républicain Tiktok: @restitutor.orient
Hussein Daher @HusseiN98D
49K Followers 199 Following Entrepreneur, Hacker 🇱🇧🇨🇮 @WebImmunify 21th/270000 BugCrowd Hacking Platform
Bien 🇻🇳 @bienpnn
4K Followers 481 Following P (Million Live!) hackerman at @qriousec & @seasecresponse & @ProjectSEKAIctf Tiếng Việt / English / 日本語 范阮玉邊
Six2dez @Six2dez1
10K Followers 560 Following Bash lover | https://t.co/UoQ57OTS7f | reconFTW | RT @visma
x1337loser @x1337loser
4K Followers 48 Following A 24-year-old Hacker, Gamer, Eater, Trainer, programmer(python, go, bash) Hungry learner, Noob at bug bounty😪😪
Internetwache.org @internetwache
3K Followers 152 Following IT Security, Bugbounties & Whitehats - Helping companies to find bugs. A project by @gehaxelt & @TimPhSchaefers.
Lupin @0xLupin
17K Followers 682 Following Roni Carta alias Lupin. Co-Founder of Lupin & Holmes. R&D. Red Teamer. Bug Hunter. Musician 🤘
Sam Curry @samwcyo
98K Followers 1K Following
0x0Asif🇧🇩 @0x0asif
5K Followers 874 Following Security Researcher aka Bug Bounty Hunter | HackerOne|BugCrowd|Yogosha #bugbounty #whitehathacker || Follow me on social media @0x0asif
Avinash Jain @logicbomb_1
9K Followers 386 Following Security Head | Ex-Security @Microsoft | Built Security in Startups | Speaker | Breaking stuff to learn | Covered in Forbes,BBC | Ack by Google,Yahoo,UN
Asmodeus @Anmolvi22924492
192 Followers 2K Following Cyber Security Professional | Security Researcher | Penetration Tester | Sustainable Future Builder | Crafting an Environment-friendly Startup |
Savoir du Monde 🌍 @SavoirDuMonde
3.0M Followers 2 Following Avide de savoir ? Des #infos du monde pour les curieux.
🐞Sara Badran @SaraBadran18
8K Followers 100 Following #bugbounty hunter / penetration tester , gamer 🎮 eWAPTX / eWAPT / eJPT 💻
The Gray Area @TGAonMedium
170 Followers 3 Following Cybersecurity and computer science posts from the Medium writing site. Message @grahamzemel to become a writer for The Gray Area today!
Md Ismail Šojal �... @0x0SojalSec
31K Followers 5K Following Cyber_Security_Re-searcher || 0SINT || Malware Analysis II Pwn || Ai Re-searcher || Project @AIStrikeSec || 0ld Accounts Suspended @0xSojalSec ||
S Rahul @7srambo
388 Followers 308 Following Information Security Analyst | Bug Bounty Hunter | CEH-Pratical | RHCSA | SOC | ISMS | CRTP
Augusto Zanellato @auguzanellato
1K Followers 381 Following BSc in CS, currently MSc in Cybersecurity student @UniPadova n00b CTF player with @pwnlentoni
Dataflow Security @dfsec_com
5K Followers 4 Following
redpwnCTF @redpwnCTF
483 Followers 13 Following A high-school/college cybersecurity team/competition.
Nuclei by ProjectDisc... @pdnuclei
37K Followers 184 Following Nuclei uses a vast templating library to scan applications, cloud infrastructure, and networks to find and remediate vulnerabilities.
Gunnar Andrews @G0LDEN_infosec
5K Followers 917 Following Hack Stuff | Code Stuff | Fitness | Kaizen OSCP | OSWA | OSWE https://t.co/4lgaVGZxd0 https://t.co/db6Gmb2ImT https://t.co/uY8NkPXaqATrends for United States
You might like
