_tas @_tas

CS Student. Aspiring Bug bounty hunter. Aotearoa, NZ. 🇼🇸 🇳🇿 Spacies Joined November 2009

Tweets

2K
Followers

59
Following

454
Likes

972

Justin Gardner @Rhynorater

2 years ago

Becoming a pro in finding client-side bugs is simple. Not easy, but simple. 1. Go through a JS tutorial and understand the basics. 2. Ready everything on this blog 8x until you understand it: ysamm.com 3. Read JS for Hackers by @garethheyes 4x Then go hack stuff

17 351 1K 101K 1K

Ben Sadeghipour @NahamSec

9 months ago

🎯With the holidays coming up, I'm going to host a week of giveaways starting with my Hands-On Web Hacking course which includes: ✅ 100+ lessons ✅ 15+ hours of video content ✅ Dedicated community 👉🏼hhub.io/2024holidays 🎁To enter: retweet and reply with a 🎅🏼

308 281 413 50K 85

Download Image

Hack The Box @hackthebox_eu

9 months ago

Ready to shell-abrate? 🥳 Because this #MSF Console commands cheat sheet is worth cheering for! Check our full step-by-step guide to the #Metasploit Framework on our blog: okt.to/BJ1LdH #HackTheBox #HTB #Cybersecurity #InformationSecurity #Pentesting #Exploit

1 14 169 10K 52

Download Image

🇷🇴 cristi @CristiVlad25

9 months ago

Always free VPS with 24GB RAM by Oracle Cloud. Look it up ;)

25 100 1K 116K 1K

Download Image

Intigriti @intigriti

10 months ago

Do you want to master authentication bypasses? 🤑 Open this thread! 🧵👇

3 146 811 60K 871

Download Image

Intigriti @intigriti

10 months ago

Hidden parameters are where you can often find SQLi, XSS & IDOR vulnerabilities for example! 🤑 Arjun is an open-source tool that can help you bruteforce and uncover hidden parameters on endpoints! It's easy to use and supports multiple body/content types & request methods! 😎…

2 30 174 11K 116

Download Image

Critical Thinking - Bug Bounty Podcast @ctbbpodcast

10 months ago

How to earn $100k in your first year of bug bounty hunting! In a recent tweet, @Rhynorater outlined his roadmap for hitting $100k in his first year of bug bounty hunting (if he had to start from scratch). Here's what he'd do:

6 94 410 30K 550

Download Image

Bug Bounty Reports Explained @gregxsunday

10 months ago

OAuth #5 - OAuth recon #BBRENewsletter85

1 17 118 6K 43

Download Image

Jeffrey Scholz @Jeyffre

10 months ago

A quantum computer, instead of using bits, uses a qbit. A qbit is a two-dimensional vector of real numbers. This means one qbit can hold "infinitely" more information than a single regular bit. A bit can only hold 0 or 1, but a qbit can hold a 2d vector of real numbers, so it…

23 38 1K 654K 195

Gareth Heyes \u2028 @garethheyes

10 months ago

The Shazzer unicode table now contains info about HTML entities including the named, decimal and hex entities a code point supports! Thanks to @myfonj for the suggestion shazzer.co.uk/unicode-table

1 2 18 2K 4

Download Image

H4x0r.DZ 🇰🇵 @h4x0r_dz

10 months ago

I have an endpoint, /api/users/<id>, which retrieves user data . when I use * as ID, like `/api/users/*`, it takes 60 seconds and returns a Timeout . I think this request is trying to retrieve data for all users, but due to the large volume of data, the response is timing out.

36 36 534 46K 256

Download Image

Intigriti @intigriti

10 months ago

Few tips on bypassing 401/403s 👇 What else can you add? 🧐

5 27 228 15K 182

Download Image

bugcrowd @Bugcrowd

10 months ago

Wise words from the man himself, @Jhaddix 🪲👇

2 12 65 4K 6

Download Image

nolen royalty @itseieio

10 months ago

how do you all remember every UUID? I find it really hard. so I wrote them all down on every uuid dot com the list has fast search across all 2^122 values (so you can find your favorites) - hoping to add some social features like "trending UUIDs" soon!

110 341 5K 875K 1K

Download Video

Intigriti @intigriti

10 months ago

2FA is increasingly more and more deployed as an additional layer of security... But what if it is incorrectly implemented? 🤔 In our latest article, we've covered 7 ways to bypass 2FA implementations! 🤑 Check it out! 👇 buff.ly/3BggFv2

0 35 144 6K 74

Download Image

Intigriti @intigriti

10 months ago

Want to find more vulnerabilities using BurpSuite match & replace rules? 🤑 Open this thread! 🧵 👇

6 175 697 51K 882

Download Image

Jack Rhysider 🏴‍☠️ @JackRhysider

10 months ago

I'm rooting for you. You're capable of far more than you realize and I can't wait to see you activate what's inside you.

39 144 986 50K 75

H4x0r.DZ 🇰🇵 @h4x0r_dz

10 months ago

Now you can hide all the annoying headers and stay focused on GET/POST parameters Thank you @Burp_Suite #BugBounty

H4x0r.DZ 🇰🇵 @h4x0r_dz

a year ago

Now you can hide all the annoying headers and stay focused on GET/POST parameters Thank you @Burp_Suite #BugBounty https://t.co/kyT6Tkddw5

1 1 24 20K 2

Download Image

6 33 219 16K 126

Download Video

DreyAnd @dreyand_

10 months ago

cool thing i noticed tonight while reading some docs, if you're stuck on a cache poisoning bug while trying to figure out the cache key for Varnish, sometimes sending a `Fastly-Key: 1` or `Fastly-Debug:1` header will disclose it directly to you