Mehdi
@silentgh00st🚀 Cofounder @ Bleetz - Future Digital Payment Solution 🥷Cyber Security Engineer 🔴 Synack Red Team Member 💻 Node.js enthusiast ... --------------- OSCP-CRTO
Similar User
@bxmbn
@GodfatherOrwa
@3nc0d3dGuY
@RahmatQurishi
@0x0_root
@ReconOne_bk
@Hammad7361
@Sin4Yeganeh
@TakSec
@gonzxph
@siratsami71
@bug_vs_me
@lu3ky13
@therceman
@FaIyaZz007
Here is short writeup on how I managed to access 200k+ of PII data by exploiting a simple vulnerability and accessing admin dashboard! 📌Thread📌 1. I created an account with a simple user and one endpoint caught my attention (it was /api/v1/session)
Hey @GoogleVRP @google ❌️🆘️🚨 Someone is exploiting your SMTP servers or maybe some vulnerabilites in the mailing functions, and sending random phishing emails from : mailer-daemon@googlemail.com the Mail Delivery Subsystem.. I have received 3 of them so far with a facebook…
Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confus… Highlights include: ⚡ Escaping from DocumentRoot to System Root ⚡ Bypassing built-in ACL/Auth with just a '?' ⚡ Turning XSS into RCE with legacy code…
I just Published - A Comprehensive Guide to Manually Hunting SQL Injection in MSSQL, MySQL, Oracle, and NoSQL (MongoDB) - nav1n0x.gitbook.io/a-guide-to-man… I tried to explain everything I could. Let me know your opinion and suggestions, if any. I will keep updating the article whenever I…
Had an awesome time on the pod last week talking full-time bug bounties with @joaxcar Johan recently decided to take 3-months unpaid leave to try bug bounty hunting full-time. Here's his 10 step roadmap.
#bugbountytips Tip of the day: The frontend JS codes are not revealing all backend endpoints. Sometimes backend have many other hidden endpoints that were created for internal testings.. and are not even used in the main app. What to do? : FUZZ for endpoints with GET/POST...
Hi everyone! Here it's my write-up for a postMessage vuln I found in a BBP: - why postMessage() and how can lead to a vuln. - when is jQuery really vulnerable and exploitable. - chain this issue with CORS to get a 5X bounty. medium.com/p/ec8f709f6dc4 #bugbountytips #xss #domxss
#bugbountytip If you want to scan for hosted web apps in cloud providers like (Azure, AWS...), You can use @securitytrails subdomains search feature under the main domain of 'Azurewebsites[.]net or amazonaws[.]com or whatever cloud provider .. #Recon - #bugbounty
United States Trends
- 1. Jake Paul 1,04 Mn posts
- 2. #Arcane 233 B posts
- 3. Jayce 52,8 B posts
- 4. Good Saturday 26,7 B posts
- 5. #SaturdayVibes 3.211 posts
- 6. Serrano 249 B posts
- 7. #saturdaymorning 2.148 posts
- 8. #PlutoSeriesEP5 141 B posts
- 9. AioonMay Limerence 117 B posts
- 10. Pence 82,5 B posts
- 11. Vander 17,2 B posts
- 12. #SaturdayMotivation 2.101 posts
- 13. maddie 21,5 B posts
- 14. Caturday 7.599 posts
- 15. WOOP WOOP 1.437 posts
- 16. John Oliver 14,5 B posts
- 17. Fetterman 37,3 B posts
- 18. Father Time 10,9 B posts
- 19. He's 58 1.154 posts
- 20. Rizwan 8.847 posts
Who to follow
-
🇪🇨🍫
@bxmbn -
Godfather Orwa 🇯🇴
@GodfatherOrwa -
encodedguy - jsmon.sh
@3nc0d3dGuY -
Rahmat Qurishi
@RahmatQurishi -
Imamul Mursalin
@0x0_root -
ReconOne
@ReconOne_bk -
Hammad 🇵🇰🇵🇸
@Hammad7361 -
Sina Yeganeh
@Sin4Yeganeh -
Mike Takahashi
@TakSec -
Jefferson Gonzales
@gonzxph -
Sirat Sami (analyz3r)
@siratsami71 -
Deepak bug_vs_me
@bug_vs_me -
Lu3ky13 ⚡️⚡️
@lu3ky13 -
Anton
@therceman -
Faiyaz Ahmad
@FaIyaZz007
Something went wrong.
Something went wrong.