SINA DEV @sinadevcore

Joined May 2022

Tweets

51
Followers

0
Following

93
Likes

77

publiclyDisclosed @disclosedh1

2 years ago

Basecamp disclosed a bug submitted by @emil_lerner: hackerone.com/reports/2107680 - Bounty: $8,868 #hackerone #bugbounty

6 40 218 37K 79

Download Image

Today Cyber News @TodayCyberNews

2 years ago

🔥Bug Bounty Tips Collection - ( 1/4 ) 1.) Finding unique subdomain @ArmanSameer95 2.) Host Header SSRF @rez0__ 3.) Blind XSS Tips @abdlah_md 4.) Internal Page Registration Bypass @eslam3kll 👀 Check Out Old Tweets Of @TodayCyberNews #CyberSecurity #BugBounty #infosec

5 69 206 27K 207

Download Image

Today Cyber News @TodayCyberNews

2 years ago

💻 What to look for on a site with IIS? 1. Use shortscan to search for short (and possibly full) filenames and extensions. - shortscan : - github.com/bitquark/short… 2. Check for reverse proxy and try directory traversal: /backend/ -> 10.0.0.1/api/ /backend/..%2Ftest ->…

4 107 311 39K 285

Download Image

HAHWUL @hahwul

2 years ago

The results of ZAP, Burp, and Caido in TE+CL requests are all different, and I'm embarrassed 🤔

7 19 203 36K 68

Download Image

Rakesh Jain @devops_tech

2 years ago

TCPdump: A Powerful Network Packet Analyzer A Thread with examples 👇

35 438 2K 309K 2K

Download Image

🇪🇨🍫 @bxmbn

2 years ago

Total Earnings by Year 2020 - $850.00 2021 - $19,750.00 2022 - $86,744.50 2023 So Far - $168,034.00 17 y/o me never thought about it, started with 0 Knowledge, curious trying to make money while being at home due to the pandemic, with patience it became my main source of income

85 111 1K 169K 311

Download Image

The Bug Bounty Hunter @tbbhunter

2 years ago

How To Bypass Cloudflare in 2023 scrapeops.io/web-scraping-p…

1 44 114 11K 50

👑 OFJAAAH 👑 @ofjaaah

2 years ago

I recently started using @Netlas_io , I'm really enjoying the tool, it's fast, and it brings fascinating things! #bugbounty #bugbountytips

2 19 95 12K 35

Download Image

Eno Leriand @0x3n0

3 years ago

LFI to RCE via PHP sessions Check if the website use PHP Session (PHPSESSID)

28 172 544 0 223

Download Image

Nenad Zaric @ZaricNenad_

3 years ago

Trying to create a random SSRF Finder, which will generate dynamic GET and POST nuclei templates from the SSRF parameter wordlist. Are there any path wordlists that could be appended to {{BaseURL}}? 😏 e.g. hackerone.com/reports/1540906 -{{BaseURL}}/cors_proxy/{{interactsh-url}}

2 24 79 0 31

Download Image

ReconOne @ReconOne_bk

3 years ago

🧵 Here we are! Katana, a new web Crawler by @pdiscoveryio Let's see how it works. A thread 👇🧵 #recontips #recon #projectdiscovery #hackwithautomation #bugbounty

19 123 401 0 189

Download Image

👑 OFJAAAH 👑 @ofjaaah

3 years ago

Extract .js .jsp .json to files using Katana / subfinder / httpx @KingOfBugbounty , @pdiscoveryio #bugbounty #recon #bugbountytips #ofjaaah

11 134 356 0 120

Download Image

Предраг Цујановић � Ｐ𝗿𝐞ⅆｒ𝚊ⓖ Ⅽ𝗎𝐉ａｎ𝚘𝕧ⓘć @cujanovic

3 years ago

From open redirect to RCE in one week medium.com/@byq/from-open…

2 51 153 0 41

张惠倩 @momika233

3 years ago

cat domain | subfinder -d | httpx -nc -t 300 -p 80,443,8080,8443,8090,9090 -silent | katana >> sqli; sqlmap -m sqli --batch --random-agent --level 4 #bugbounty #bugbountytips github.com/projectdiscove…

21 202 668 0 239

Dot @kx1z0

3 years ago

Bueno gente, hago pública la herramienta que presente en @bitupalicante sobre Bash Obfuscation. Si queréis ver como funciona por debajo, aquí os dejo el el video de la charla: youtube.com/watch?v=X5QKHX… Tool: github.com/Kx1z0/Bash_Obf…

1 6 13 0 2

InfoSec Community @InfoSecComm

3 years ago

New Write-up on InfoSec Write-ups publication : "Cyber Security Control Validation Platform" #bugbounty #bugbountywriteup #bugbountytips ift.tt/z3w9Ta2

0 5 13 0 2

Bug bounty notes @bugbounty0

3 years ago

How I found an IDOR Worth $1500 #bugbounty #bugbountytip #infosec #bugbountytips adilnbabras.medium.com/how-i-found-an…

1 32 81 0 23

Paul Seekamp @nullenc0de

3 years ago

I made HUNT into a nuclei template... Let's see how this goes If it works, I'll clean it up and release it.

3 8 72 0 22

Download Image

Nishith K @busk3r

3 years ago

Android Hacking-Exploiting Content Providers payatu.com/blog/amit/expl… #Security #Pentesting #SecurityEveryday #BugBounty #Pentest #AppSec

3 61 143 0 53

shay @shaybt12

3 years ago

CVE-2022-36804 1. find open repo cat hosts | httpx -follow-redirects -title -path /repos?visibility=public -match-string "repository-container" -threads 9500 2. check if it vulnerable in response ''is not a valid ref and may not be" 3. hack it :) credit @notdls #bugbountytips