Deepak Pawar @_dspawar

Security Engineer | OSCP github.com/DeepakPawar95 Joined August 2012

Tweets

26
Followers

53
Following

85
Likes

65

Shiv Sahni @shiv__sahni

5 years ago

Wrote this python utility to perform passive enumeration on Android binaries. Hope this would be useful in #bugbounty #pentest and #redteam ops. medium.com/@shivsahni2/ap… #infosec #appsec #mobilesecurity #androidsecurity #securityengineer #securityautomation

0 3 8 0 1

ProjectDiscovery @pdiscoveryio

6 years ago

A great addition to the templates by NkxxkN, Find all the GraphQL endpoint for your target to test further. github.com/projectdiscove… #bugbounty #infosec #security

0 46 143 0 27

Download Image

Shiv Sahni @shiv__sahni

6 years ago

Thought of being little productive this weekend, wrote a story on (in)securities related to the mingling of Deep Link and Webview in Android application. link.medium.com/KlclxAxGO5 #applicationSecurity #mobileSecurity #androidSecurity #androidWebview #infosec #bugbounty #appsec

0 7 7 0 1

Abhisek Datta @abh1sek

6 years ago

We @appseccouk are releasing our training material and labs on Attacking and Auditing #Docker #Containers and #Kubernetes Clusters. Try out. Learn. Hack. Have fun 😊 github.com/appsecco/attac…

7 129 237 0 34

[Write-up] Abusing Slack’s TURN server for relaying TCP connections and UDP packets to internal Slack network and meta-data services on AWS. An excellent write-up! Writeup: rtcsec.com/2020/04/01-sla… PoC Demo: youtu.be/Oc8aprXLKLU #infosec #bugbounty #bugbountytips

3 118 312 0 61

Download Image

Riyaz Walikar @riyazwalikar

6 years ago

#applicationsecurity testing on #awscloud requires additional scrutiny as vulnerabilities can be escalated to a full AWS account compromise. @_riddhishree converted Stored XSS/HTML Injectn vuln to #SSRF that led to IAM token cred theft. blog.appsecco.com/finding-ssrf-v… cc: @appseccouk

2 61 164 0 21

Null Singapore @nullSingapore

6 years ago

Join @shiv__sahni & @tonythomasv conducting a #nullsg workshop on "The Reds and Blues of an #Android Application" on the 22nd of February. RSVP now: meetup.com/Null-Singapore… #MobileSecurity #infosec #security

1 4 10 0 0

Deepak Pawar @_dspawar

6 years ago

I have been working on a command-line tool named "CSWSH". It test and connect to both standard and socket.io based WebSockets which are vulnerable to Cross-Site WebSocket Hijacking (CSWSH). Check it out on Github: github.com/DeepakPawar95/…

0 6 5 0 1

Óscar Alfonso Díaz @OscarAkaElvis

6 years ago

New Evil-WinRM release v2.0, now with docker support based on prebuilt images at Dockerhub. Useful if your system has not ruby installed. Follow the instructions on readme to launch it using docker. github.com/Hackplayers/ev… #evil-winrm #docker #hacking #pentesting #winrm

0 24 43 0 3

Mike Takahashi @TakSec

6 years ago

XSS filter bypass using stripped </div> tags to obfuscate. Multiple P2 Stored XSS on a private bug bounty program. XSS Payload: <</div>script</div>>alert()<</div>/script</div>> #bugbountyTips #bugbounty #xss @BRuteLogic

5 242 585 0 102

Download Image

Deepak Pawar @_dspawar

7 years ago

Message Encryptor-Decryptor using AES Cipher in Python github.com/DeepakPawar95/…

0 0 1 0 0

John T. Chambers @JohnTChambers

7 years ago

A warm welcome to the @JC2Ventures family @Lucideustech! CEO @SaketModi_ and his team just introduced their cutting-edge SAFE technology that could transform the entire cybersecurity industry. Cheers to many years of partnership ahead! fortuneindia.com/technology/bre…

1 22 43 0 0

Shane Parrish @ShaneAParrish

7 years ago

Things you control: Your effort. Your beliefs. Your identity. Your actions. Your attitude. Your integrity. Your thoughts. The food you eat. How kind you are. The media you read. How reflective you are. How thoughtful you are. The people you listen to. The type of friend you are.

76 2K 7K 0 527

Alexandria Ocasio-Cortez @AOC

7 years ago

People who seek substantive change are almost always told some version of: - “you’re crazy” - “you don’t know anything” - “you’re too [old/young/quiet/loud/whatever]” To detractors, you will never be good enough. To friends, you are always enough. So just do your thing! 💪🏽💜

2K 9K 44K 0 86

Jeff Atwood @codinghorror

7 years ago

Being "smart" isn't a reliable path to success. But you know what is? Becoming borderline obsessive about one thing and spending a ridiculous amount of time learning about and practicing that thing, such that you get super good at it.