Ishfaq Fariq @ishfaq_fariq

10 months ago

I’m excited to announce that I’ll be attending one of the largest and most technical cybersecurity events, Black Hat Middle East & Africa 2024! #BlackHatMEA #BlackHat_At_Malham #CyberSecurity #Networking #InformationSecurity

0 0 2 146 0

Download Image

Ben Sadeghipour @NahamSec

10 months ago

🎯 Black Friday Special+ Giveaway: Get the full course for just $29 (reg. $119) at with code 'FRIDAY2024'! hhub.io/BlackFriday Includes: 15+ Hours of content + 100+ labs! 🎁 BONUS: reply & retweet - one lucky winner gets 2 FREE course coupons (keep one, gift one)!

235 265 527 55K 184

Download Image

VAIDIK PANDYA @h4x0r_fr34k

11 months ago

Mass Account Takeover Here are 10 BLogs to learn about them ! 1. zonduu.medium.com/idor-in-sessio… 2. 1-day.medium.com/an-idor-and-au… 3. medium.com/@bugbounty_lea… 4. 0d-samii.medium.com/0-click-mass-a… 5. medium.com/@sniss_thomas/… 6. tushara2517.medium.com/breaking-2fa-l… 7. medium.com/@ahmed.raza.ar… 8.…

0 41 126 4K 108

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

11 months ago

🚀 Google Dorks for Bug Bounty taksec.github.io/google-dorks-b… #bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

0 43 154 7K 84

Download Image

Zeeshan M. @by6153

11 months ago

On 10th April I had reported 6 admin panel access on different programs. By using @osintleak it was an easy find tbh 🙌 Admin panel tips: 1: leaked creds via osintleak.com 2: auth bypasses. 3: by analyzing js files for creds and secrets. #BugHunting #adminpanel 1/*

9 75 401 24K 401

Download Image

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

11 months ago

An IDOR and Auth Bypass That Led to Mass Account Takeover — KSFE 1-day.medium.com/an-idor-and-au… #bugbounty #bugbountytips #bugbountytip

0 14 89 3K 36

Biscuit @OreoB1scuit

11 months ago

Admin Panel Takeover Using a Leaky JS File osintteam.blog/admin-panel-ta… Join Bug Bounty Community: discord.gg/U2HfKnZuxr #bugbounty #bugbountytips #cybersecurity #hacking

2 8 42 2K 25

张惠倩 @momika233

11 months ago

Finding Postmessage xss Vulnerabilities 1.Follow the prompts to turn on the switch portswigger.net/burp/documenta…

0 10 88 9K 63

Aryan Bhetwal @yamarajislitaf

11 months ago

Breaking In: How RXSS and SQLi Can Lead to Full Account Takeover and Database Access Thanks to all the security researcher for their awesome tools and automation. Credits: @KN0X55 @xnl_h4ck3r @s0md3v @elk0kc blog.bhuwanbhetwal.com.np/breaking-in-ho…

1 25 135 5K 104

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

11 months ago

A Step-by-Step Guide to the Bug Hunting Process: From Reconnaissance to Reporting myselfakash20.medium.com/a-step-by-step… #bugbounty #bugbountytips #bugbountytip

0 26 121 4K 55

Ahmed Tarek @0x_xnum

11 months ago

all you need to know about JWT vulnerabilities: medium.com/@0x_xnum/all-a… #Hacking #JWT #BugBounty #BugBountytips

1 56 208 10K 155

7h3h4ckv157 @7h3h4ckv157

11 months ago

Hacking Tips: Captcha Bypass Author: Mehdi0x90 Credit: github.com/Mehdi0x90/Web_…

2 96 370 16K 293

Bipin Jitiya @win3zz

5 years ago

As I previously promised I would publish a writeup on how I managed to find the SSRF bug on the biggest social media website, Facebook. So I wrote a blog about that finding. I hope you like it. 🍷 #BugBounty #Infosec link.medium.com/smZtjTvTV6

67 654 2K 0 423

Bipin Jitiya @win3zz

2 years ago

PHP extract() & Dynamic Function Lead to RCE. While functions like system(), exec(), and shell_exec() are often sanitized, extract() is different because it can overwrite existing variables. This unique behavior can enable hackers to create undetectable backdoors. #Security #PHP

3 60 242 26K 98

Download Image

Bipin Jitiya @win3zz

a year ago

Found a backup ZIP file on the web app server via a JS comment. Extracted the ZIP, which contained the application's code. Identified RCE during a code review of an unlinked file. Exploited this RCE to gain server access and found crypto mining software running on the server.