Ved Parkash @v3d_bug

Curious to Learn हरियाणा, भारत 🇮🇳 Joined November 2019

Tweets

5K
Followers

939
Following

836
Likes

17K

Rahul Sirvi @rahul0x01

a day ago

Many bug hunters ignore blank 401 Unauthorized pages. If you ever land on a 401 Unauthorized page (like in the image), always check the response, you might find something big. #BugBounty #BugBountytips #appsec #latepost

10 45 325 14K 203

Download Image

Intigriti @intigriti

2 days ago

Testing for file upload vulnerabilities? 🧐 Check out Malicious PDF Generator, an open-source toolkit to help you generate tens of malicious PDF files designed to exploit various vulnerabilities and insecure features found in PDF readers! 🤠 🔗 github.com/jonaslejon/mal…

3 159 780 36K 878

Download Image

ryuku @malekmesdour

2 weeks ago

Just published my first blog post "Hunting for postMessage Vulnerabilities" blog.ryukudz.com/posts/postmess… It covers 11 postMessage vulnerabilities I discovered on bug bounty targets. enjoy ☕️ #BugBounty #BugBountytips #websecurity

9 67 327 17K 278

Justin Gardner @Rhynorater

2 years ago

XSS Context Escape Brain dump: * Ofc ' " </script> * URL encoded version %22 %27 etc * Unicode normalization (full width <) * Backslash in JS injection can un-escape characters * Words getting replaced in string - ie <<script>script> * Unicode codepoints \u0022 * Break regex…

14 61 248 38K 237

Justin Gardner @Rhynorater

2 years ago

Tricks to find XSS injection points: * Check for JS variables with empty string assignments in the HTML response If you see ' var redirUrl = "";' in the HTML response, there is a decent chance that "redirURL" might be a query parameter * HTML input field names Check the "name"…

9 129 501 55K 473

Justin Gardner @Rhynorater

2 years ago

I am always surprised when people don't know this trick to make writing XSS exploits suuuuper simple: You can reach through iframes in same-origin contexts and do things like click buttons and fill in input forms via JS:

1 18 130 9K 102

James Kettle @albinowax

3 days ago

HTTP Request Smuggler v3.0.1 is now live! This fixes a false positive in the CL.0 scan caused by pipelining - thanks to @sw33tLie for the report. Note that the new parser discrepancy scan still has superior accuracy. For more info on pipelining check out portswigger.net/research/how-t…

4 59 258 11K 129

Behi @Behi_Sec

5 days ago

In 4 years of hacking, dorks only worked for me once. But that single hit earned me $6,700. Here's exactly how it happened 🧵👇

3 22 135 23K 99

Mohsin Khan @tabaahi_

6 days ago

HTMLi (<10 char limit, no JS) Rest API ➡️ FUZZ GraphQL /xyz/abx/GraphQl ➡️ introspection ON ➡️ Edit field (no CHAR limit) ➡️ XSS fires ➡️ field takes user_id ➡️ edit other users ➡️ Stored XSS on any account Via IDOR 🚨

7 16 140 8K 81

Intigriti @intigriti

a week ago

Google dorks for finding cloud storage buckets (AWS S3, Azure, Firebase, Cloudflare R2) 🤠 👇

5 51 315 22K 274

Download Image

DarkShadow @darkshadow2bd

a week ago

🔎Most critical iDOR paths: /api/user/123 /api/v1/user?id=123 /api/v1/file?id=123 /api/files/123/download /api/issues/123 /api/v2/statement/123 /download?file=123.pdf 🔎Parameters: id, uid, profile, file, doc_id, order, ticket, case Read the full method t.me/ShellSec/177

1 125 700 28K 588

Download Image

DarkShadow @darkshadow2bd

a week ago

X-Forwarded-For: 127.0.0.1 X-Real-IP: 127.0.0.1 X-Client-IP: 127.0.0.1 X-Remote-IP: 127.0.0.1 X-Remote-Addr: 127.0.0.1 True-Client-IP: 127.0.0.1 CF-Connecting-IP: 127.0.0.1 Fastly-Client-IP: 127.0.0.1 Proxy-Client-IP: 127.0.0.1 Read all auth bypass header t.me/ShellSec/66

3 50 289 15K 270

xssdoctor @xssdoctor

a week ago

Found a great waf bypass for client side path traversal (a thread)

6 31 201 14K 175

Sayaan Alam @ehsayaan

a week ago

Google urged 2.5B Gmail users to reset passwords after a Salesforce-linked breach. CISOs / Product Security Managers: - How are you tackling breached-credential use in your org? cybersecuritynews.com/gmail-users-pa…

0 2 4 607 0

Intigriti @intigriti

a week ago

Hacking Firebase targets! 🤑 A thread! 🧵👇

4 62 423 42K 430

Download Image

Debangshu 🇮🇳🥷 @ThisIsDK999

a week ago

drive.google.com/file/d/1T1bcgc… Can't find research like these nowadays, everyone too busy to chase AI hype, no one really diving into libraries for cool bugs :/ AI-will-find-all-bugs is such a boring take.

7 68 352 20K 377

Sayaan Alam @ehsayaan

a week ago

I recently encountered an IDOR : DELETE /api/notes/:id → tried deleting someone else’s note → 403 Forbidden (expected) PUT /api/notes/:id → tried editing the same note → success ✅, no authorization check After editing, DELETE /api/notes/:id → succeeded, could now delete…

6 69 560 24K 272

Download Image

‌Renwa @RenwaX23

a week ago

Since Apple doesn’t care, I don’t care either. Here are the details of an address bar spoof vulnerability in Safari on Mac using custom cursor overlap - Apple said it’s *not* a vulnerability. github.com/RenwaX23/X/blo…

59 308 4K 402K 1K

Download Video

Ananda Dhakal @dhakal_ananda

2 weeks ago

I just published a new blog post on a payment bypass I found on the Prestashop integration of Stripe. It was a super interesting edge case. Make sure to check it out. #bugbounty dhakal-ananda.com.np/blogs/stripe-p…