break ; @R3M0v3Sec Twitter Profile

break ;

@R3M0v3Sec

Joined August 2016

14Posts 135Followers 1KFollowing

Similar User

@xxxxyyyy99

@FlatleyAdam

@niksadecimal

@Goody537

@ckj1232

@PflashPunk

@St0rmNT85

break ; Reposted

X

@TheMsterDoctor1

12 Dec

Reverse Engineering and exploit development Download 100% Free For First 1000 User's.. Simply: 1. Follow (So I Will Dm) 📥 2. Like and Repost 3. Comment “ Send ” to receive your copies!! 📚

break ; Reposted

Proxy Phishing is taking off to the degree that it seems to be becoming the rule and not the exception. Here is a video of how fast you can pull it off and with MFA bypass. For protection and detection this is better than anything I could write: jeffreyappel.nl/aitm-mfa-phish…

break ; Reposted

Grzegorz Tworek

@0gtweet

6 Sep 2023

Playing dirty with AV/EDR/sandbox, part 4: the webserver compiles a new exe file each time you download it. And the exe downloads a new file from the same server and runs it. 😈 Enjoy C: github.com/gtworek/PSBits… EXE: hxxp://20230906t192146.ltiapmyzmjxrvrts.info/v4/whatever.exe

break ; Reposted

j00sean

@j00sean

6 Jun 2022

microsoft-edge + ms-search + MSDT path traversal 0day = fun of 2-clicks (one click additional due to Protected View if docx is coming from remote btw).

break ; Reposted

Ashish Kunwar

@D0rkerDevil

8 May 2020

webarchive > internal.domain.com > dirsearch > found .git/index file used gin to read the index file pip3 install gin gin <index file> found .env file opened > full of credentials access to their mysql database connect using #bugbounty

break ; Reposted

Sapra

@0xsapra

8 May 2020

Bypassing most FILE Uploads filters for $$$$ * .htaccess <- upload htaccess * file.svg <- uploading svg = xss * file.SVg <- must try case mismatch * file.png.svg * file.php%00.png * file.png' or '1'='1 * ../../file.png * file.'svg <- invalid ext. #bugbountytips #BugBounty

break ; Reposted

Utkarsh Agrawal

@agrawalsmart7

8 Jul 2019

Some github search keywords. Assuming target(.)com *"target(.)com" password *"target(.)com" "pass" 'email' *"target(.)com" "api" *"target(.)com" FTP *"target(.)com" SMTP *"target(.)com" LDAP *"target(.)com" PEM (For Keys) If found nothing try to change it.

break ; Reposted

Kenya CyberSecurity & Forensics Association: KCSFA

@kcsfa

18 Apr 2020

Web Apps Testing: Focuses on gathering more info about the app and mapping out the network / infrastructure where the app is hosted. Popular tools commonly used during Web Apps Testing include: W3af Burp Suite SQLMap Metasploit Hydra John Ripper Skipfish Ratproxy Wfuzz Watcher