Haneef @haneefmuhammad3

Bengaluru South, India Joined April 2012

Tweets

353
Followers

73
Following

2K
Likes

250

Security Trybe @SecurityTrybe

2 years ago

*TCP - Transmission Control Protocol *SNMP - Simple Network Management Protocol *L2TP - Layer 2 Tunneling Protocol *SOC - Security Operations Center *EDR - Endpoint Detection and Response *MDR - Managed Detection and Response *KMS - Key Management Service 6/9

1 3 9 1K 1

7h3h4ckv157 @7h3h4ckv157

2 years ago

Hey, Infosec mates! Here's the thread containing interesting #Hacking and #bugbounty write-ups 📢 Follow along to learn about the latest vulnerabilities, exploits, and techniques. Let's stay ahead of the game! #100DaysOfHacking #100DaysOfCyberSecurity Day 9 🧵⬇

1 14 25 2K 13

7h3h4ckv157 @7h3h4ckv157

2 years ago

OffSec, eLearn, ZeroPoint Certification Exam Notes 🔊 #hacking #redteam #cybersecurity #offensivesecurity #elearnsecurity #zeropointsecurity #pwn #infosec #informationsecurity #pentest #oscp #osep #osed #oswe #oswa #osda #osmr #crto #crtl #ejpt #emapt #ewpt #ewptx Thread 🧵⬇

13 47 100 18K 109

ReconOne @ReconOne_bk

2 years ago

How to Master Advanced Subdomain Recon - Key insights from Detectify A comprensive guide 👇🧵 #recon #AttackSurface #bugbounty #recontools #cybersecurity #recontips

8 60 175 24K 141

Download Image

Mahshooq Zubair  @mq_xz_

2 years ago

One Bug at a Time: My First Paid Bug ($1,000 IDOR) by: atomiczsec cutt.ly/r6vNMhc #bugbounty #WriteUps

7 32 130 9K 36

Luke Stephens (hakluke) @hakluke

2 years ago

A step by step guide on how to hack your ex-girlfriend's Facebook account in 2023 👇😱 🔗 hakluke.com/how-to-hack-yo…

27 45 238 50K 58

Mahshooq Zubair  @mq_xz_

2 years ago

No Rate Limiting on Forget Password Page Leads to OTP Bypass and Account Takeover. by: allenlopes23 cutt.ly/A5rfkDx #bugbounty #WriteUps

1 19 43 3K 9

Mahshooq Zubair  @mq_xz_

2 years ago

How exploitable sensitive information in API is able to destruct business in disruption era — Part3 by: mmaulanaabdullah cutt.ly/i7XRUyr #bugbounty #WriteUps

0 12 48 5K 15

Ninad Mishra @NinadMishra5

2 years ago

Web API Pentesting If you can send XML data, check for XXE injections. If you send regular POST data, try to send arrays and dictionaries: username[]=John username[$neq]=lalala #BugBountytips #BugBounty

2 28 101 5K 29

Mahshooq Zubair  @mq_xz_

2 years ago

How ChatGPT helped me find a bug by: abhishekgk cutt.ly/n7Oh57V #bugbounty #WriteUps

0 17 81 4K 15

ProjectDiscovery @pdiscoveryio

3 years ago

Did you know you can use subfinder to list the IP address of each subdomain? 🌀 Here's how you can do it 👇 ⌨️ subfinder -d <target> -oI -active #hackwithautomation #bugbounty #security

9 56 176 24K 71

Download Gif

shay @shaybt12

3 years ago

some bugbounty users :) http://134.209.113.185:8000/ employeeinneed.com http://206.189.151.223:8000/

20 53 329 46K 128

Download Image

Ninad Mishra @NinadMishra5

3 years ago

Reverse proxy misconfiguration leads to 1-click account takeover hackerone.com/reports/1632973 #BugBounty #BugBountytips

0 16 62 3K 20

Ninad Mishra @NinadMishra5

3 years ago

#BugBountytips #BugBounty Testing for rate limit bypass (a 🧵) Some usefull headers X-Originating-IP: 127.0.0.1 X-Forwarded-For: 127.0.0.1 X-Remote-IP: 127.0.0.1

14 91 265 19K 103

Ninad Mishra @NinadMishra5

3 years ago

Finding XSS vulnerabilities in flash files. olivierbeg.com/finding-xss-vu… #BugBounty #BugBountytips #BugBountytip #CyberSecurity #infosec #Hacked

1 9 55 6K 14

Nithin 🦹‍♂️ @thebinarybot

3 years ago

Hey! If you are looking to clear OSCP this year then make sure to grab a copy of the OSCP Notion Template that I launched. Practice, check items of list, pass OSCP! Find your copy here: thebinarybot.gumroad.com/l/oscplist

0 3 11 760 3

Nithin 🦹‍♂️ @thebinarybot

3 years ago

Open this thread below if you want to master the art of reconnaissance (aka recon) 🧵👇

10 47 98 15K 103

Trickest @trick3st

3 years ago

Fresh wordlists alert 🚨 The trickest/wordlists repo got updated with ~80 new lists for a bunch of technologies. Fingerprint your targets, pick the right wordlist, and find hidden content and vulnerabilities 🚀 github.com/trickest/wordl… #bugbounty #pentesting #wordlists

0 27 99 12K 36

Download Image

Luke Stephens (hakluke) @hakluke

3 years ago

Become an Nmap pro in 30s 👇🕥 Nmap is a port scanner, but it does much more including service/OS detection and even vuln scanning. By default nmap does a standard TCP SYN scan on the top 1000 ports of host. $ nmap host For more verbosity use -v or -vv. $ nmap -vv host 👇

40 206 701 91K 605

Anton @therceman

3 years ago

i love playing with custom XSS WAF solutions! Blocked: - alert(1337) - window['alert'](1337) - window['a'+'lert'](1337) Bypass URL Encoded: - window[[%27a%27][0]%252b%27lert%27](1337) Bypass in JS code: - window[['a'][0] + 'lert'](1337) Result: alert(1337) 🚀