hatich_hacker @hatich_hacker

security researcher israel Joined January 2023

Tweets

32
Followers

14
Following

140
Likes

27

hatich_hacker @hatich_hacker

9 months ago

האם מתאים לכם ללמוד איך לפרוץ? youtu.be/OKAVHN-rtnk

0 0 0 23 0

hatich_hacker @hatich_hacker

10 months ago

youtu.be/YxHrPQ-zwFs

0 0 0 28 0

d4d @zakfedotkin

11 months ago

You can bypass path-based WAF restrictions by appending raw/unencoded non-printable and extended-ASCII characters like \x09 (Spring), \xA0 (Express), and \x1C-1F (Flask):

2 146 711 44K 594

Download Image

hatich_hacker @hatich_hacker

a year ago

למה ואיך לערוך תשובה מהשרת youtu.be/ljIFQf3uqRk

0 0 0 12 0

hatich_hacker @hatich_hacker

a year ago

פלליליסט לקורס ההאקינג youtube.com/playlist?list=…

0 0 1 14 0

bugcrowd @Bugcrowd

a year ago

19 questions @JR0ch17 asks himself when looking through requests in order to identify and document potential vulnerabilities: 1. What methods of authentication are supported?

1 26 98 12K 118

hatich_hacker @hatich_hacker

a year ago

my first write up medium.com/@avig2009/adve…

0 0 2 25 0

hatich_hacker @hatich_hacker

2 years ago

book.hacktricks.xyz/pentesting-web…

0 0 1 30 0

Corben Leo @hacker_

2 years ago

I've made $500k+ from SSRF vulnerabilities. Here are my tricks:

84 1K 4K 431K 5K

Download Image

To verify the single-packet attack is working for you: - Load examples/benchmark-h2-race.py - Hit attack, then verify ‘Best/Median’ are 0/1 via Extensions>Turbo Intruder>Output - This shows a typical execution spread of 1ms when sending groups of 20 requests to Ireland

6 38 236 25K 65

Download Image

Justin Gardner @Rhynorater

2 years ago

I've made over 100k on SSRF vulnerabilities. They aren't always as simple as pointing it at localhost or AWS Metadata service. Here are some tricks I've picked up over the past 5 years of web app testing: