Logo
Picture

namdinh @hd7exploit

Bug Hunter, Software Architecture, AWS Solution Architect. VietNam Joined July 2010
  • Tweets
    205
  • Followers
    48
  • Following
    627
  • Likes
    125
namdinh retweeted
GodfatherOrwa Profile Picture

Godfather Orwa 🇯🇴 @GodfatherOrwa

4 years ago

for that i collect a huge number of bounty programs here github.com/orwagodfather/x you can download all of that as git clone ... cd x cat * > 1-file.txt and now you have everything in 1 file about 165K target cat 1-file.txt | nuclei -t your-privte-template.yaml #bugbountytips

GodfatherOrwa Profile Picture

Godfather Orwa 🇯🇴 @GodfatherOrwa

4 years ago

If you found any bug by your testing create a nuclei template for that and start testing that template on everything You can test that on everything XSS,SQL,Info Dis, Etc.. also any #bugbountytip about some endpoint you can create a template by tat and test it #bugbounty

hd7exploit Profile Picture

namdinh @hd7exploit

4 years ago

@Savitar0x01 @Hacker0x01 Me too, It's been over 2 months

namdinh retweeted
TakSec Profile Picture

Mike Takahashi @TakSec

4 years ago

🍪💣 Cookie Bomb 💣🍪 URL that causes the cookie length to exceed request header limits for all requests until the cookie expires. 1. Find a Cookie set by a parameter 2. Inject as many commas as you can into the parameter until you DoS that user #bugbountytips #infosec

namdinh retweeted
fattselimi Profile Picture

Fat @fattselimi

4 years ago

sqlmap is best tool ever🔥

hack_git Profile Picture

HackGit @hack_git

4 years ago

sqlmap Automatic SQL injection and database takeover tool sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detec… t.me/hackgit/7487

namdinh retweeted
pdiscoveryio Profile Picture

ProjectDiscovery @pdiscoveryio

4 years ago

Today, we are proud to announce the private beta of Nuclei Cloud – expanding the power of nuclei with enterprise-grade SaaS capabilities built on top of the open-source project. Sign up today nuclei.sh

namdinh retweeted
theXSSrat Profile Picture

The XSS Rat - Proud XSS N00b :-) @theXSSrat

4 years ago

Test for #xss and #SQLi --'`"><img src=x>kdskf${{7*7}} Enter in EVERY parameter - '"` Javascript injection test - '`"> html tag attribute test - <img src=x> HTML injection - ${{7*7}} CSTI + SSTI - --'`" SQLi

namdinh retweeted
zapstiko Profile Picture

𝐑𝐀𝐢𝐡𝐚𝐧 @zapstiko

4 years ago

Subdomain Takeover: Proof Creation for Bug Bounties @0xpatrik #SubdomainTakeover #bugbounty #bugbountytips 0xpatrik.com/takeover-proof…

namdinh retweeted
AGNIHACKERS1 Profile Picture

MAHIN VM @AGNIHACKERS1

4 years ago

# Local File Inclusion (LFI)⚔️ echo example.gov | waybackurls | grep /images/ # Double Encode Payload: ".%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd" #bugbountytips #bugbountytip #Bountytip

namdinh retweeted
ReconOne_bk Profile Picture

ReconOne @ReconOne_bk

4 years ago

New Players that can help Bug Hunters: Workflow: @trick3st AI ChatBot: @OpenAI Podcast: @ctbbpodcast Recon tips: @ReconOne_bk Web App Analysis: @CaidoIO XSShunter alternative: @trufflesec What would you add? #BugBounty #recon #cybersecurity

namdinh retweeted
akaclandestine Profile Picture

Clandestine @akaclandestine

4 years ago

GitHub - CMEPW/BypassAV: This map lists the essential techniques to bypass anti-virus and EDR github.com/CMEPW/BypassAV

namdinh retweeted
samm0uda Profile Picture

Youssef Sammouda (sam0) @samm0uda

4 years ago

ATO of FB/OC accounts after stealing access_tokens ($44,250) ysamm.com/?p=777 DOM-XSS in Instant Games due to improper verifications ($62,500?) ysamm.com/?p=779 ATO in Canvas Games due to weak cross window message Origin validations ($62,500) ysamm.com/?p=783

namdinh retweeted
LexfoSecurite Profile Picture

Lexfo @LexfoSecurite

4 years ago

A few months ago, we reported a pre-auth Remote Code Execution #RCE vulnerability to @vBulletin. The exploitation of this unserialize() bug was tricky, as vBulletin classes are not deserialisable. Discover the exploitation in our latest blogpost: ambionics.io/blog/vbulletin…

namdinh retweeted
yappare Profile Picture

yappare @yappare

4 years ago

🔥🔥🔥

samm0uda Profile Picture

Youssef Sammouda (sam0) @samm0uda

4 years ago

ATO of FB/OC accounts after stealing access_tokens ($44,250) ysamm.com/?p=777 DOM-XSS in Instant Games due to improper verifications ($62,500?) ysamm.com/?p=779 ATO in Canvas Games due to weak cross window message Origin validations ($62,500) ysamm.com/?p=783

namdinh retweeted
_l0gg Profile Picture

Khoa Dinh @_l0gg

4 years ago

This is what happened to ManageEngine. In this blog: - Some XSLT transform location. - CVE-2014-0107 is as critical as CVE-2022-34169. - Not only ManageEngine products affected. Finally, what I can do when vendors are delaying advisory for a fixed bug? blog.viettelcybersecurity.com/saml-show-stop…

namdinh retweeted
CriminalIP_US Profile Picture

Criminal IP @CriminalIP_US

4 years ago

Criminal IP has been added to the list of API on 'uncover' OSINT wrapper. github.com/projectdiscove… #OSINT #OpenSource #CTI #github #cybersecurity

namdinh retweeted
3nc0d3dGuY Profile Picture

encodedguy - jsmon.sh @3nc0d3dGuY

4 years ago

This post by Utkarsh Maurya contains a cheatsheet of 15 ways to bypass 2FA mechanism. rashahacks.com/bypass-2fa-mec… Like, Bookmark and Retweet this to push in the community. #bugbounty #bugbountytips #CyberSecuritytips #CyberSec #ethicalhacking #websecurity #bugbountytip

namdinh retweeted
Dinosn Profile Picture

Nicolas Krassas @Dinosn

4 years ago

Exploiting API with AuthToken infosecwriteups.com/exploiting-api…

namdinh retweeted
CVEtrends Profile Picture

CVE Trends @CVEtrends

4 years ago

Top 3 trending CVEs on Twitter Past 24 hrs: CVE-2022-46169: 1M (audience size) CVE-2022-42475: 114.2K CVE-2020-0688: 110.1K Past 7 days: CVE-2022-23529: 5.6M CVE-2022-42475: 3.8M CVE-2022-46169: 2.7M cvetrends.com

namdinh retweeted
trick3st Profile Picture

Trickest @trick3st

4 years ago

How to create the most exhaustive list of reliable DNS resolvers? eu1.hubs.ly/H02zWZv0

namdinh retweeted
TakSec Profile Picture

Mike Takahashi @TakSec

4 years ago

New blog post: Tips for BAC and IDOR Vulnerabilities Step-by-step guide including multiple types of IDORs and automation taksec.medium.com/tips-for-bac-a… #bugbountytips #bugbounty #BAC #IDOR #hacking #infosec

Trends for United States

Steelers
Browns
Colts
JJ McCarthy
Giants
Titans
Kyler Gordon
Falcons
Saints
AJ Brown
Jameis
#HereWeGo
Jets
Bucs
Daniel Jones
Huntley
Panthers
Jalen Ramsey
Ballard
#TitanUp

You might like

Akai 🇻🇳
@KMA_Akai
452 Followers
SWE & sometimes security researcher, NYU MSCS, member of https://t.co/R4a4yethba and @acebearteam. PL theorist wannabe. He/him/*. Views are my own, not my employers’
Thanh Do @nyaacate@in...
@nyanctl
824 Followers
Freelance security research Threat intelligence
Bou
@Foca_NAT
215 Followers
Hit and Miss, Seek and Hide. You and I, remember that: “Not all treasure’s silver and gold, mate.” I’m a man of my word, and my words are my own!
Pham Tai Tue
@tuedenn
95 Followers
✍️ @ https://t.co/k2WZq27zQH
Hạnh
@hanhvietphan
93 Followers
someone on the Earth
zunc
@dungcoi
105 Followers