Havij @_havij
Cybersecurity Enthusiast - Sharing insights through some writeups bashoverflow.com Joined September 2022-
Tweets197
-
Followers18
-
Following129
-
Likes56
URL Normalization Turns a Harmless Request into a Cache-Poisoned XSS Attack Link: bashoverflow.com/url-normalizat… #webcachepoisoning #urlnormalizationattack #urlnormalization #cachepoisoningattack #cachebasedXSS #bugbounty
Web Cache Poisoning via Fat GET Requests: Exploiting Cache Key Flaws Link: bashoverflow.com/web-cache-pois… #webcachepoisoning #cachepoisoningattack #xssviacachepoisoning #bugbounty
Parameter Cloaking in Web Cache Poisoning Using Rails Parameter Cloaking Scanner Link: bashoverflow.com/parameter-cloa… #parametercloaking #webcachepoisoning #cachepoisonattack #bugbounty
Web Cache Poisoning via an Unkeyed Query Parameter Link: bashoverflow.com/web-cache-pois… #webcachepoisoning #unkeyedqueryparameter #cachepoisoningxss #bugbounty
Server-side Template Injection with a Custom Exploit in PHP Twig Link: bashoverflow.com/server-side-te… #sstiexploitation #phptwig #templateinjection #phptwigcustomexploit #ssti #bugbounty
Server-Side Template Injection in a Sandboxed Environment - Escaping Freemarker Template Restrictions Link: bashoverflow.com/server-side-te… #sstifreemarker #freemarkertemplate #sstiexploitation #bypassfreemarkersandbox #sstibypass #bugbounty
Server-side Template Injection with Information Disclosure via User-Supplied Objects in Django Framework (Python) Link: bashoverflow.com/server-side-te… #sstipython #sstidjangotemplate #sstivulnerability #djangoframework #bugbounty
Server-side Template Injection in an Unknown Language with a Documented Exploit Link: bashoverflow.com/server-side-te… #ssti #handlebarstemplateinjection #sstiexploit #bugbounty
New Android host validation bypass technique! [1/4] All parsed URIs in Android are android.net.Uri.StringUri objects. However, the scheme parser only looks for the ":" delimiter
Server-side Template Injection Using Documentation: Uncover The Hidden Dangers of SSTI Link: bashoverflow.com/server-side-te… #ssti #templateinjection #freemarkerssti #sstiexploitation #javatemplateinjection #bugbounty
Basic Server-Side Template Injection (SSTI) in ERB (Ruby) Link: bashoverflow.com/basic-server-s… #sstivulnerability #serversidetemplateinjection #erbtemplatevulnerability #rubytemplateinjection #bugbounty
HTTP Request Smuggling Basic CL.TE Vulnerability Link: bashoverflow.com/http-request-s… #httprequestsmuggling #CLTEsmuggling #requestsmuggling #bugbounty
Password Reset Poisoning via Middleware The Hidden Flaw That Can Lead to Account Takeover Link: bashoverflow.com/password-reset… #passwordresetpoisoning #accounttakeover #passwordresetattack #hostheaderinjection #bugbounty
Exploiting XSS to Bypass CSRF Defenses: Change Victim’s Email Link: bashoverflow.com/exploiting-xss… #storedxss #bypasscsrfdefense #stealcsrftoken #exploitingxss #crosssitescripting #bugbounty
Exploiting Cross-Site Scripting (XSS) to Capture Passwords Link: bashoverflow.com/exploiting-cro… #storedxss #crosssitescripting #exploitingxss #xssexfiltratepassword #bugbounty
The whitepaper is live! Learn how to win the HTTP desync endgame... and why HTTP/1.1 needs to die: http1mustdie.com
Exploiting Cross-Site Scripting (XSS) to Steal Cookies Takeover Using Cookie-Editor Link: bashoverflow.com/exploiting-cro… #storedxss #xss #crosssitescripting #xssaccounttakeover #bugbounty
Reflected XSS Into a Template Literal With Angle Brackets, Single, Double Quotes, Backslash and Backticks Unicode-Escaped Link: bashoverflow.com/reflected-xss-… #reflectedxss #templateliteralXSS #unicodeescapebypass, #XSSintemplatestrings #bugbounty
Reflected XSS with Some SVG Markup Allowed Link: bashoverflow.com/reflected-xss-… #reflectedxss #svginjection #crosssitescripting #bypassingxssfilters #bugbounty
Ahmed Zerroud @AhmedZerroud
4 Followers 276 Following
Navid @mohammad786__
36 Followers 322 Following خانواده همه چیزه! cyber_security_researcher Interested_in_nature
4EG @4eg
389 Followers 346 Following
B0n4f1d3 @_Bonafide_01
26 Followers 98 Following $ Cybersecurity || Blue Teamer || SOC Analyst || CPD || ICIP || Network Analyst || Certified Blue Team Junior Analyst || Web3 || Cyber Defender || Let's Defend
Kuttu Özil @Mhd_Safwan7
7 Followers 64 Following
Jerry @Jerry1334H4x0r
12 Followers 105 Following CyberSecurity researcher and L33tHax0r views are my own
Sayem Khan Siam @Sayem_Khan_Siam
1 Followers 75 Following
CARBANAK🦹📳 @elonmasai7
999 Followers 1K Following Software engineer and Certified Ethical Hacker. Member of Green Hat and passionate advocate for e-waste recycling across Africa.
Elena @nooor112kawash
336 Followers 903 Following
Sergey Toshin @_bagipro
7K Followers 186 Following Ranked as the #1 security researcher for Google Play Security Rewards Program. The founder of @OversecuredInc Android and iOS vulnerability scanners
ZoomEye @zoomeye_team
9K Followers 508 Following A cyberspace search engine built for security researcher Daily Tricks || Latest Vulnerability Updates Email: [email protected] https://t.co/AUq5jNpKkl
Hossam A. Mesbah 🇵... @m359ah
4K Followers 229 Following Sr. Security consultant | Bug bounty hunter https://t.co/tuKTyrFrWo | https://t.co/PGSwsav7HG | https://t.co/Z6BCawM3XF
Dark Web Informer @DarkWebInformer
130K Followers 53 Following Providing Cyber Threat Intelligence from the Dark Web & Clearnet: Breaches, Ransomware, Darknet Markets, Threat Alerts & more. https://t.co/Fi7VW9lg94
slonser @slonser_
4K Followers 163 Following Co-Founder @neploxaudit. CTF team @C4TBuTS4D Security Researcher at Solidlab.
RedTeam Pentesting @RedTeamPT
8K Followers 174 Following Official RedTeam Pentesting GmbH account -- Impressum: https://t.co/pS9oK62Lsu
OSINT Team @OsintTeamBlog
3K Followers 0 Following We teach OSINT from multiple perspectives. Cybersecurity experts, investigators, law enforcement, and intelligence specialists read us to grow skills faster.
Web Security Academy @WebSecAcademy
130K Followers 36 Following Free web security training from @PortSwigger
Douglas Day @ArchAngelDDay
11K Followers 297 Following Truth Seeker. Catholic. Hacker. Prompter. Techno-Ethicist. Chasing my Apotheosis. Views are correct. Truth is at the intersection of Athens & Jerusalem
B0n4f1d3 @_Bonafide_01
26 Followers 98 Following $ Cybersecurity || Blue Teamer || SOC Analyst || CPD || ICIP || Network Analyst || Certified Blue Team Junior Analyst || Web3 || Cyber Defender || Let's Defend
Piyush @piyush_supiy
629 Followers 259 Following Hacker x BugBounty hunter x Sr. Product Security Engineer @harnessio #bugbounty #bugbountytip
Microsoft Security Re... @msftsecresponse
145K Followers 215 Following We are the Microsoft Security Response Center. To report security vulnerabilities or abuse in Microsoft products, visit https://t.co/kxEbdfMny1.
Baraka Brian @BrianBarhack3r
19 Followers 137 Following Infosec Guy | CEH | Information Security Analyst | General IT practitioner | Human
0xVulnTracer @0xVulnTracer
13 Followers 16 Following Security Researcher | 𝗛𝗔𝗖𝗞𝗘𝗥 𝗙𝗢𝗥 𝗙𝗨𝗡 𝗔𝗡𝗗 𝗣𝗥𝗢𝗙𝗜𝗧
UMAR AHMAD @umar_ahmad125
39 Followers 1K Following Ethical Hacker | Penetration Tester | Bug Bounty Hunter | Researcher
Sayem Khan Siam @Sayem_Khan_Siam
1 Followers 75 Following
Santiago Pontiroli @spontiroli
4K Followers 813 Following I break down #malware so you don’t have to 👾 Lead Security Researcher @Acronis TRU-Labs doing #ThreatIntel #CTI GReAT past, and even greater challenges ahead
Mitch @m3hac
10 Followers 98 Following
Md Ruhul amin @md_amin25018
2 Followers 147 Following
🎩8L46K_H47👨�... @43d93v1l
8 Followers 131 Following
Jerry @Jerry1334H4x0r
12 Followers 105 Following CyberSecurity researcher and L33tHax0r views are my own
CARBANAK🦹📳 @elonmasai7
999 Followers 1K Following Software engineer and Certified Ethical Hacker. Member of Green Hat and passionate advocate for e-waste recycling across Africa.
0xdz213 @sehil669
3 Followers 7 Following
ocean @misredemption
3 Followers 179 Following
Kuttu Özil @Mhd_Safwan7
7 Followers 64 Following
Radhakanta Roy @radhakantaroy22
6 Followers 150 Following
Carlos Mayorga @Sud0Chul0
595 Followers 6K Following System Administrator | Fortinet | Azure | Entra | #cybersecurity
Bhuvaneswaran R @Bhuvanes_Ramar
1 Followers 19 Following
zseano @zseano
79K Followers 701 Following #1 Amazon Security Researcher. full time hacking team with @jonathanbouman @fransrosen @avlidienbrunn
Cyber Advising @cyber_advising
14K Followers 32 Following Cyber Security Consulting | Ethical Hacking & Exploit Research 🕵️♂️ https://t.co/brWqIrIqA9
Aditya Shende @ADITYASHENDE17
60K Followers 420 Following MS Cyber 🇬🇧 | Work @BforeAI | @Bugcrowd Top 100 | Bug Bounty Trainer | Keynote Speaker | Professional Biker | @kong_sec 🇮🇳 | Own Views ≠ Employment
Julien | MrTuxracer �... @MrTuxracer
37K Followers 441 Following Freelancer | #BugBounty | @Hacker0x01 H1-Elite | $1,500,000 Overall Bounties | ❤️ Reversing | Mobile Hacker | https://t.co/pcWduPOt0n
InfoSec Community @InfoSecComm
52K Followers 635 Following Largest InfoSec publication with 62,000+ followers and 1M+ monthly views.
Assetnote @assetnote
10K Followers 0 Following Assetnote combines advanced reconnaissance and high-signal continuous security analysis to help enterprises gain insight and control of their evolving exposure.
The Hacker News @TheHackersNews
932K Followers 2K Following The #1 trusted source for cybersecurity news, insights, and analysis — built for defenders and trusted by decision-makers.
Bishop Fox @bishopfox
26K Followers 4K Following A leading provider of #offensivesecurity solutions & contributor to the #infosec community. #pentesting #hacking VC @forgepointcap @carrickcapital @WestCap8
FOFA @fofabot
12K Followers 191 Following Cybersecurity Search Engine Contact Email: [email protected] Telegram: https://t.co/E5EcKr5KylTrends for United States
You might like
