Vasu @VasuMudiraj18

Offensive Security Researcher Joined October 2021

Tweets

115
Followers

41
Following

367
Likes

474

Vasu @VasuMudiraj18

a week ago

blog.certcube.com/detailed-cheat…

0 0 0 1 0

Coffin @coffinxp7

a year ago

so finally wait is over i released my customBsqli tool i hope this will help you all in bbp to find timebased sqli.. github.com/coffinxp/BSQLi

27 117 512 35K 414

𝐑𝐀𝐢𝐡𝐚𝐧 ✪ @zapstiko

a year ago

Advanced SQL Injection Technique @ynsmroztas @nav1n0x #BugBountytips #sqli #BugBounty github.com/ynsmroztas/SQL…

0 49 162 6K 129

Will Gates @WllGates

a year ago

Cross Site Scripting Payload 👇 <%2FScriPt><sCripT+id%3D>alert(/d3rk😈/)<%2FsCriPt> credit: @iamunixtz #BugBounty

0 23 154 7K 95

Download Image

🛠️ No WAF Pls A @Burp_Suite plugin by @infosec_au that bypasses WAFs by inserting junk data into HTTP requests See also his NahamCon (H/T @NahamSec) talk: 📺 Modern WAF Bypass Techniques on Large Attack Surfaces youtube.com/watch?v=0OMmWt… github.com/assetnote/nowa…

1 64 202 14K 138

Harshleen Chawla @harshleenchawl2

a year ago

Heads up guys!! The custom @nuclei templates repository is finally public!!! github.com/Saitle/Yamilic…

0 2 21 1K 14

Vedavyasan S @ved4vyasan

2 years ago

40K Nuclei-Templates github.com/linuxadi/40k-n… :Aditya Singh (linux adi) #BugBounty #BugBountytips #BugBountytip #bughunter #CyberSecurity #CyberSecuritytips #CyberSec #hackers #infosec #offensive #Hacking #vulnerabilities #bugs #writeup #gitHub #git #nuclei

2 24 73 6K 53

Vasu @VasuMudiraj18

a year ago

#NullHyd #NullHydHumla #GoBig @ServiceNow #servicenow @pavanw3b

0 0 3 37 0

Download Image

Anirudh Anand @a0xnirudh

2 years ago

Subdomain Fuzzing worth $35,000 in bounties! An interesting writeup from @XHackerx007 & @GodfatherOrwa 🔥 medium.com/@HX007/subdoma… #BugBounty

2 49 276 15K 152

Download Image

Vasu @VasuMudiraj18

2 years ago

#nullhyd

0 0 4 97 0

Download Image

bugcrowd @Bugcrowd

2 years ago

Find ASNs and CIDRs of an organisation using Amass and then use them to enumerate subdomains 🔍 ASNs and CIDRS: ⌨️ amass intel -org "<target>" Enumerate subdomains: ⌨️ amass enum -d <target> -active -cidr <cidr-block> -asn <asn>

1 62 216 17K 137

Download Image

Vasu @VasuMudiraj18

2 years ago

#nullhyd

0 1 5 75 0

Download Image

NULL Hyderabad @nullhyd

2 years ago

Hello, #NullHyd Nov meet has been published. Please note that the meet is on **Sunday**. The registrations are open until Friday. When: Sunday, Nov 26, 2023 Where: EPAM Systems, Knowledge City Pls RT and spread the word. null.community/events/948-hyd… @null0x00

0 11 16 3K 1

Ptrace Security GmbH @ptracesecurity

2 years ago

Discovering Login Panels and Detecting SQL Injection with Logsensor medium.com/@qaafqasim/dis… #Pentesting #SQLinjection #CyberSecurity #Infosec

0 38 89 8K 28

Download Image

Paul Seekamp @nullenc0de

2 years ago

JSRecon echo "http://x/y.js" | jsluice urls <(curl -sk "$url") | jq -r '.url, .queryParams[], .bodyParams[], .method' | sed 's/null//g' | awk '{ORS=NR%6?",":"\n"}1' | awk 'BEGIN{FS=","} {printf "%s%s%s%s%s\r\n\r\n", $1, ($2?"?"$2:""), ($3?"&"$3:""), ($4?"?"$4:""), ($5?"&"$5:"")}'

6 60 255 38K 190

🐞Sara Badran @SaraBadran18

2 years ago

Analyzing JavaScript Files To Find Bugs -- Bonus tip : You can use waybackurls additionally with katana to obtain more js files 😉🔥🔥 -- link.medium.com/yQLZtxLZiAb -- By @micro0x00 -- #javascript #hackeronereport #BugBounty #BugBountytips #BugBountywriteupspublished #writeups

2 24 78 5K 40

Download Image

Tushar Verma 🇮🇳 @e11i0t_4lders0n

2 years ago

AWS attack vectors 1-Leaked credentials 2-The APIs for managing S3 ACLs 3-3rd Party software & custom application 4-EC2 instance misconfig 5-IAM permissions on other users 6-Elastic IP transfer 7-Access control misconf 8-Network security misconfig

1 21 47 4K 21

Download Image

Luke Stephens (hakluke) @hakluke

2 years ago

A guide to SSRF vulnerabilities and where to find them! 🪲🔍 🐞 What is SSRF? 🐛 Where can they be found? 🪳 How can you bypass SSRF protections? 🔫 Find out the answers to these questions here 👇 #hacking #bugbounty #SSRF labs.detectify.com/2022/09/23/ssr…

9 98 297 32K 151

Burcu YARAR @brcyrr

2 years ago

I have a great resource suggestion where you can find lots of useful notes for penetration tests, bug bounty, or CTFs❗️☺️ You should definitely add it to your bookmarks.🤞🏻🌸 Credit: @hideckies 🌟🙌🏻 Link: exploit-notes.hdks.org #cybersecurity #pentest #BugBounty #ctf

9 79 175 14K 120

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

2 years ago

if a site uses AngularJS,⚙️ test {{7*7}} to see whether 49 is rendered anywhere. If the application is built with ASP.NET with XSS protection enabled, you might want to focus on testing other vulnerability types first and check for XSS as a last resort.