prsc @_prsc_

Singapore Joined May 2011

Tweets

13
Followers

15
Following

111
Likes

27

Greg Linares (Laughing Mantis) @Laughing_Mantis

5 years ago

Ever want to test systems & see if your password is ever stored/sent in plaintext? Make it: X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* I am on the phone with a vendor right now because my test account is in an inoperable state. 🧐

122 3K 11K 0 4K

Jon Bottarini @jon_bottarini

5 years ago

4 years of bug bounty hunting = ~$600k in bounties. A very transparent look inside @infosec_au's methodology to find bugs blog.assetnote.io/2020/09/15/hac…

2 107 411 0 120

Patrik Fehrenbach @ITSecurityguard

5 years ago

I compiled a mind-map of all the tools I use for my day to day Bug Bounty journey :) Please let me know if you find his helpful 👐 🥰🔐 full resolution of the image here: blog.it-securityguard.com/patriks-bug-bo…

22 371 1K 0 371

Download Image

stephen @_tsuro

5 years ago

Periodic reminder that Steam is still running Chrome 79 and without a sandbox on Linux. 🤷

Rajvardhan Agarwal @rajxnull

5 years ago

Periodic reminder that Steam is still running Chrome 79 and without a sandbox on Linux. 🤷

20 273 853 0 99

Download Image

4 30 109 0 3

👑 OFJAAAH 👑 @ofjaaah

5 years ago

New: curl -s "crt.sh/?q=%25.tesla.c…" | jq -r '.[].name_value' | assetfinder -subs-only | sed 's#$#/.git/HEAD#g' | httpx -silent -content-length -status-code 301,302 -timeout 3 -retries 0 -ports 80,8080,443 -threads 500 -title | anew @b51b5b43 @Jhaddix @stokfredrik @TomNomNom

12 217 565 0 182

Download Image

Martin Kleppe @aemkei

5 years ago

There are four ways to evaluate JavaScript code represented as a string: const CODE = 'alert(1)'; 1⃣ eval(CODE) 2⃣ Function(CODE)()() 3⃣ setTimeout(CODE) 4⃣ document.write('<script>'+CODE+'</script>') And variations such as setInterval, innerHTML, … Did I miss anything here?

15 62 213 0 53

Download Image

Burp Suite @Burp_Suite

5 years ago

Burp Suite essentials #10: How to test WebSockets youtube.com/watch?v=KbaOay…

0 72 155 0 40

Steve Syfuhs @SteveSyfuhs

5 years ago

Have you ever wondered what happens behind the scenes when you type your password into the Windows logon screen and hit enter? I'm waiting for a build to complete, so I'm gonna tell you.

118 2K 8K 0 2K

Download Image

XSS Payloads @XssPayloads

5 years ago

alert() with no parenthesis, back ticks, brackets, quotes, braces, etc. by @stealthybugs a=8,b=confirm,c=window,c.onerror=b;throw-a

10 107 432 0 80

ᴘᴀʀᴛʜɪ @cyber__sloth

6 years ago

Dear employees, please do not post the URL of #Zoom recorded meetings in public. If you have to share, enable a password to access the recording. All it takes just a simple dork "rec/play/". @malwrhunterteam @James_inthe_box @securitydoggo

9 180 352 0 39

Download Image

OffSec @offsectraining

6 years ago

OffSec student @0xklaue wrote this review of Advanced Web Attacks and Exploitation and the OSWE exam. Find out how to prepare and what you need to know. hubs.ly/H0nQd990

3 69 203 0 45

Eduardo Vela @sirdarckcat

6 years ago

Ever wondered what makes a CTF challenge good? I've asked myself that many times. I wrote this to help me answer that question based on discussions with others in the community bit.ly/ctf-design

8 209 538 0 112

terjanq @terjanq

6 years ago

I just got a fancy idea to create strings in #javascript without using dangerous characters 😃 Inspired by @garethheyes challenge from @WebSecAcademy. #bugbountytips #xss