Al_Moustach🇩🇿🇩🇿🇩🇿
@HoucemEddine11
الله يعطي اصعب معاركه لاقوى محاربيه God gives his toughest battles to his strongest worriers
Free Bug Bounty course by Z-wink (@the_IDORminator ) ranked #1 in the US on Bugcrowd! Learn from the best, especially if you're into IDOR & Broken Access Control: t.me/ZwinKU
Cloudflare has started blocking proxy tools like Burp Suite. If you encounter this error, download the “Bypass Bot Detection” extension from the BApp Store in Burp Suite. It should resolve the issue for Burp Suite.
Thread: Hidden Treasures in JavaScript - The Hacker's Guide to Finding Everything
Just released the Ultimate IDOR Testing Checklist 🧩 I combined techniques from many sources to cover IDOR scenarios. Know a technique I missed? Drop it in the comments. Notion: mrdesoky0.notion.site/Ultimate-IDOR-… GitHub: github.com/mrdesoky0/vuln… #bugbountytips #IDOR #AppSec #InfoSec
💥ازاي لقيت Critical على GitHub — الفيديو العملي ! في الفيديو الجديد عملت خطوة بخطوة: فين أدور، إزاي أستخدم GitHub dorks، وإزاي أميّز الـ false positives عشان ما تهدرش وقتك. 📺 رابط الفيديو: youtu.be/fnHO97wbZWE
youtube.com
YouTube
إزاي لقيت بيانات Critical على GitHub!
Part - 2 Web Cache Poisoning Quick tip: test X-Forwarded-Host + extension flips (.css/.js) — if the edge caches your reflected header or JSON as a “static” asset, every visitor can get poisoned JS or tokens. Read 5 practical PoCs & seeding recipes → medium.com/@Aacle/web-cac…
SQL Injection — The Most Practical Guide for Beginners kd-200.medium.com/sql-injection-… #bugbounty #bugbountytips #bugbountytip
"If you’re a student, someone passionate about cybersecurity, or just someone who wants to gain experience while studying and earn some money, this article is for you." – @hbenja_m 🎤 Read how this hacker balances learning and hacking: bugcrowd.com/blog/my-experi…
This one was easy: searched JS files → revealing endpoints → JSON HTTP request → exposed PII. Tip: account for lazy-loading. many hunters miss endpoints. Method: click to trigger lazy-loaded JS, then search again for endpoints. Happy hunting :]
![YShahinzadeh's tweet image. This one was easy: searched JS files → revealing endpoints → JSON HTTP request → exposed PII. Tip: account for lazy-loading. many hunters miss endpoints. Method: click to trigger lazy-loaded JS, then search again for endpoints. Happy hunting :]](https://pbs.twimg.com/media/G4SM64xXQAAhU47.png)
💥🐹 4 new Go Code Review Labs just dropped! 🐹💥 Read the code, peek at the diff, find the bug. Sharpen your skills: pentesterlab.com/badges/golang-…
Hunting IDORs? Target this first 👇 (With ZwinK)
كنت بقرأ مقال جامد جدًا على موقع @DeepStrike_io عن Penetration Testing Methodology، وبصراحة استفدت منه جدًا وساعدني أرتب أفكاري . أنصح أي حد مهتم بالمجال يقرأ المقال ده فعلاً مفيد : deepstrike.io/blog/penetrati… #CyberSecurity #deepstrike #PenTesting
Find hidden Endpoint - by: Sina Yeganeh ✨ -raw.githubusercontent.com/sinaayeganeh/F… #cybersec #infosec #bugbountytips
bugbounty tip: [easy to find critical bugs, follow this method] 1. find a api sensitive endpoint (must be leak sensitive info) 2. look headers "Cache-Control, CF-Cache-Status, Via, X-Cache, ETag, Age" confirm they store cache or not. (if stored try web cache deception) 3.…
![darkshadow2bd's tweet image. bugbounty tip:
[easy to find critical bugs, follow this method]
1. find a api sensitive endpoint (must be leak sensitive info)
2. look headers "Cache-Control, CF-Cache-Status, Via, X-Cache, ETag, Age" confirm they store cache or not. (if stored try web cache deception)
3.…](https://pbs.twimg.com/media/G3hY4znWAAAj6jM.jpg)
this github Repo have nice tips, easy but that easy tips we forget it alot of time, so this a useful resource github.com/tuhin1729/Bug-…
i was reading #bugbounty wrriteups and i found this blog site adnanthekhan.com and its super technical i really like it
I was able to bypass rate limiting using this on mostly websites. #infosec #cybersec #bugbountytips
We earned a $15,000 bounty on @Hacker0x01 with @saur1n! His persistence on the target paid off, uncovering SQLi leads on a major social network. The exploit was straightforward once the query structure leaked due to verbose errors, revealing the injection point by commenting.…
United States Trends
- 1. $BNKK N/A
- 2. Pond 193K posts
- 3. Good Monday 37K posts
- 4. #MondayMotivation 35.9K posts
- 5. Happy 250th 3,851 posts
- 6. Semper Fi 4,823 posts
- 7. Rudy Giuliani 23.5K posts
- 8. Obamacare 215K posts
- 9. Go Birds 3,182 posts
- 10. #Talus_Labs N/A
- 11. Victory Monday 1,377 posts
- 12. #SoloLaUniónNosHaráLibres N/A
- 13. #MondayVibes 2,531 posts
- 14. #LingHerHynessTiktokLive 476K posts
- 15. LINGLING BA HERHYNESS 463K posts
- 16. The BBC 479K posts
- 17. Mark Meadows 21.4K posts
- 18. Edmund Fitzgerald 4,284 posts
- 19. 8 Democrats 13.6K posts
- 20. Devil Dogs 1,435 posts
Something went wrong.
Something went wrong.