pentesting @PenTesting

Breaking stuff for fun and profit | tweets are not affiliated. /dev/random Joined August 2009

Tweets

4K
Followers

6K
Following

861
Likes

3K

Gareth Heyes \u2028 @garethheyes

3 days ago

Haha: <input onclick=attributes[0].value='`'+URL+'`'> portswigger-labs.net/xss/xss.php?x=…${alert(1)} portswigger-labs.net/xss/xss.php?x=…${alert(1)}

1 26 130 8K 94

pentesting @PenTesting

a week ago

Noir is a project specializing in identifying attack surfaces for enhanced whitebox security testing and security pipeline. This includes the capability to discover API endpoints, web endpoints, and other potential entry points within source code. github.com/owasp-noir

0 0 0 113 0

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

2 weeks ago

JShunter JShunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for developers, bug…

3 135 675 30K 627

Download Image

gfw.report @gfw_report

2 weeks ago

The Great Firewall of China (GFW) today experienced the largest internal document leak in its history. More than 500GB of source code, work logs, and internal communications have been exposed, revealing details about the development and operation of the GFW. The leak originated…

145 2K 8K 1.2M 4K

Download Image

Two Seven One Three @TwoSevenOneT

2 weeks ago

#redteam Now, you can dump the #Windows password from the LSASS process with help from the past: WerFaultSecure.exe Github: 2x7EQ13/WSASS Experimental version: Windows 11 24H2 #Blueteam

13 148 620 44K 480

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

2 weeks ago

Let's LLMs automate reverse engineering in Ghidra : - github.com/LaurieWired/Gh… #infosec #cybersec #bugbountytips

1 103 475 20K 316

Download Image

Harshleen Chawla @harshleenchawl2

3 weeks ago

API-specific wordlists for fuzzing hidden routes & endpoints🚀 wordlists-cdn.assetnote.io/data/automated/

4 81 395 18K 274

Download Image

Gareth Heyes \u2028 @garethheyes

a month ago

Imagine you have a XSS vulnerability but you have a undefined variable before your injection. Is all hope lost? Not at all you can use a technique called XSS Hoisting to declare the variable and continue your exploit. Big thanks to @ycam_asafety for the XSS cheat sheet submission

1 16 120 9K 66

Download Image

Gareth Heyes \u2028 @garethheyes

a month ago

I discovered how to use CSS to steal attribute data without selectors and stylesheet imports! This means you can now exploit CSS injection via style attributes! Learn how below: portswigger.net/research/inlin…

13 85 358 23K 230

Download Image

OccupytheWeb @three_cube

a month ago

FREE Caido beats expensive Burp Suite! Master HTTP interception, replay attacks & HTTPQL filtering without breaking the bank. hackers-arise.com/web-app-hackin…

8 92 493 28K 336

Download Image

pentesting @PenTesting

2 months ago

MCP Vulnerabilities Every Developer Should Know composio.dev/blog/mcp-vulne…

0 0 1 193 0

Harshleen Chawla @harshleenchawl2

2 months ago

📌LLM pentesting tool focused on prompt injection attacks🫡 🔗pbs.twimg.com/media/GyAuj11b…

8 103 331 17K 285

Download Image

Bilgin Ibryam @bibryam

2 months ago

Kubernetes on-prem security overview 🌟 kubesec-diagram.github.io

11 214 1K 102K 1K

Download Image

Pethuraj M @Pethuraj

2 months ago

If you’re a pentester exploring how to bring AI into your workflow, check out 𝗛𝗲𝘅𝗦𝘁𝗿𝗶𝗸𝗲 𝗔𝗜 🔥 Connects LLMs with 150+ tools and 12+ AI agents to automate pentesting.Ask ChatGPT 🔗 github.com/0x4m4/hexstrik… #Cybersecurity #Pentest

8 171 670 39K 751

Download Image

Michael Bargury @mbrg0

2 months ago

@simakov_marina apples btw are long strings that start with "eyj" lovely injection by @simakov_marina

1 9 226 18K 48

Download Image

Alex Prompter @alex_prompter

2 months ago

I tested ChatGPT 5 and Grok 4 with same critical prompts. The results will blow your mind. ChatGPT 5 Vs. Grok 4 (Video demos are included)

291 1K 17K 5.9M 11K

Download Image

Two Seven One Three @TwoSevenOneT

2 months ago

#oldnewthing Need something blue? Create the file "C:\Windows\System32\config\OSDATA" and restart Windows. You’ll get a permanent Blue Screen of Death( BSOD ). #pentester #redteam

10 82 679 59K 442

Download Image

Dark Web Informer @DarkWebInformer

2 months ago

Puredns: A fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries. GitHub: github.com/d3mondev/pured…