chunked @chunked_

leveling Joined July 2021

Tweets

184
Followers

10
Following

340
Likes

2K

Paul Couvert @itsPaulAi

2 years ago

ChatGPT has now a big problem. Google just updated its free competitor, Bard. Here are 8 things impossible on ChatGPT but that Bard can do (for free):

2K 12K 62K 12.8M 43K

🇪🇨🍫 @bxmbn

3 years ago

hackerone.com/reports/1760213 hackerone.com/reports/1698316

8 19 128 14K 42

James Kettle @albinowax

3 years ago

Just submitted my talk proposal to Black Hat USA!🤞 Psyched to share some wild techniques that should burn for a long time after! #BHUSA

6 14 273 22K 3

Here is how I chained two bugs to exploit a UUID based IDOR and gained access to admin panel. 🧵THREAD🧵 1. How I knew that the target uses the same panel for both (normal users and admins)?! This is because of two things, the first one is through subdomain enumeration

31 233 893 113K 489

Download Image

PortSwigger Research @PortSwiggerRes

3 years ago

Apache <2.4.56 is vulnerable to request splitting in mod_rewrite and mod_proxy #CVE-2023-25690 httpd.apache.org/security/vulne… We'd hazard a guess exploitation looks somewhat similar to this writeup: portswigger.net/research/makin…

2 89 282 35K 64

N$ @nav1n0x

3 years ago

So I finally wrote an article on Medium. This article is about my recent SQL Injection found in a maga retail outlet. How I got Owned A Multi-Billion Dollar Retailer’s MySQL Databases Using Simple SQL Injection - nav1n.medium.com/how-i-got-owne… #BugBounty

37 181 595 38K 215

Bug Bounty Reports Explained @gregxsunday

3 years ago

Getting 1 payout for 1 bug is good. But how about getting many payouts for 1 0day? Sounds better but how on Earth do you achieve that? To answer this question, I interviewed @mikey96_bh who has developed bug bounty automation to do it regularly. Enjoy! youtu.be/ovvh2bvKZ_E

2 27 151 20K 63

Download Image

DirectoryRanger @DirectoryRanger

3 years ago

Harvesting Active Directory credentials via HTTP Request Smuggling tij.me/blog/harvestin…

2 51 108 11K 27

_rs @rs_loves_bugs

3 years ago

Updated my XSSHunter fork with full Trufflehog support, detect more than 750 credentials in the pages your payload fired. Simple to setup, single/multi user, no blurred screenshots, Slack/Discord notifications. github.com/rs-loves-bugs/… #xss #bugbountytips #bugbounty #infosec

4 38 164 14K 59

_rs @rs_loves_bugs

3 years ago

Wanted to do this for some time and finally managed to do it, I forked XSS Hunter to make it simple to setup and deploy. Added some new features too(Discord/Slack/custom hook notifications, no blurred screenshots, single user/multi user support)! github.com/rs-loves-bugs/…

2 16 68 5K 26

zSecurity @_zSecurity_

3 years ago

Check out this post to learn how to perform 2FA bypassing techniques! zsecurity.org/2fa-bypass-tec… #ethicalhacking #hacking #zsecurity

1 28 73 7K 20

Download Image

Mehdi @silentgh00st

3 years ago

Here is short writeup on how I managed to access 200k+ of PII data by exploiting a simple vulnerability and accessing admin dashboard! 📌Thread📌 1. I created an account with a simple user and one endpoint caught my attention (it was /api/v1/session)

25 277 1K 161K 574

Download Image

Peter M @pmnh_

3 years ago

New blog post looking back on my first 2 years in bug bounty, happy to answer questions or comments about the experience here: h1pmnh.github.io/post/2022-sep-…

13 54 236 0 76

Mastering Burp Suite Pro @MasteringBurp

3 years ago

Using Turbo Intruder to create more resources (here notes) than a free account normally can 🛠️ (by @soyelmago) An highly reusable strategy 💎 medium.com/@soyelmago/byp…

2 23 77 15K 40

Corben Leo @hacker_

3 years ago

I hacked a car company last year. I found a way to steal every customer's • Name • Email address • Phone number • Address Here's how I did it:

100 696 4K 540K 2K

Download Image

Critical Thinking - Bug Bounty Podcast @ctbbpodcast

3 years ago

We've released the first episode! Check it out here and at MOST of your favorite podcast provider locations. Apple and Google are being a bit slow... but should be up by the end of the week at the latest. Hope you all enjoy and shoot us some feedback! rss.com/podcasts/ctbbp…

15 121 421 73K 132

Jonathan Bouman @JonathanBouman

3 years ago

📝Just published a blog about the data leak I found at @LHVhuisartsen and @nhgnieuws; +15k 👨‍⚕️medical doctors usernames and hashed passwords leaked due to an unprotected API endpoint. The bug existed for 3 years, fixed within 48 hours.💡Read and learn more: medium.com/@jonathanbouma…

1 19 86 0 26

Nathaniel @nnwakelam

3 years ago

People are going to tell you exactly where the ceiling is and put onto you the extent of what you can and can't achieve. Don't "lower your expectations". Aim further than you think you are capable of achieving and work back from there.

3 13 56 0 10

Paul Seekamp @nullenc0de

3 years ago

If you see a program use a 'unicode.normalization' method. Don't just assume it's normalizing text. youtube.com/watch?v=hyyVeK…

1 2 11 0 8

Dawid Moczadło @kannthu1

3 years ago

It is almost 2023 - we gotta stop writing Nuclei Templates by hand;) We are working on something that will make creating a template and running it on thousands of hosts a matter of minutes It will empower newcomers and veterans - this is a sneak peek of what we are building