TheModernHacker's profile picture. Cybersecurity and Artificial Intelligence Student at University of sheffield.

AV

@TheModernHacker

Cybersecurity and Artificial Intelligence Student at University of sheffield.

AV reposted

Faucet Trade & Drip Tools 💻Website: faucet.trade 🤖Telegram bot: t.me/faucet_trade_b… Need more test tokens❓ 💧Buy from drip.tools #faucet #sepolia #monad #sahara #somnia #bnb #polygon #solana #testnet #drip #bera #sybil #airdrop


Best website


AV reposted

Still learning things in the bug bounty space. Here are a few. 1 - Your health is more important than work. Mental and physical. 2 - Sticking to one high ROI target all year works best. 3 - Keep your body in a normal rhythm and have faith in the one who created us.

stealthybugs's tweet image. Still learning things in the bug bounty space. Here are a few.

1 - Your health is more important than work. Mental and physical.
2 - Sticking to one high ROI target all year works best.
3 - Keep your body in a normal rhythm and have faith in the one who created us.

AV reposted

✅ CCSP Complete course for free To get the link - 🙌 Follow 🙌 Like & Retweet 🙌 Reply "GET" 🚀 I will DM the link to everyone

bountywriteups's tweet image. ✅ CCSP Complete course for free 

To get the link - 
🙌 Follow 
🙌 Like & Retweet 
🙌 Reply "GET" 

🚀 I will DM the link to everyone

AV reposted

A list of ethical hacking tools, let me know which ones I forgot! Information Gathering: Nmap, Shodan, Maltego, Recon-ng, theHarvester, Netcat, DNSRecon, Sublist3r Vulnerability Analysis: Nessus, Nexpose, OpenVAS, Nikto, Burp Suite Scanner Exploitation Tools: Metasploit…


AV reposted

List of GitHub Dorks for bug bounties . like Finding target Files, Languages , API Keys, Tokens,Usernames,Passwords,Information using Dates,Extension 📓 #infosec #cybersec #bugbountytips

0x0SojalSec's tweet image. List of GitHub Dorks for bug bounties . like Finding 
target Files, Languages , API Keys, 
Tokens,Usernames,Passwords,Information using 
Dates,Extension 📓

#infosec #cybersec #bugbountytips
0x0SojalSec's tweet image. List of GitHub Dorks for bug bounties . like Finding 
target Files, Languages , API Keys, 
Tokens,Usernames,Passwords,Information using 
Dates,Extension 📓

#infosec #cybersec #bugbountytips
0x0SojalSec's tweet image. List of GitHub Dorks for bug bounties . like Finding 
target Files, Languages , API Keys, 
Tokens,Usernames,Passwords,Information using 
Dates,Extension 📓

#infosec #cybersec #bugbountytips
0x0SojalSec's tweet image. List of GitHub Dorks for bug bounties . like Finding 
target Files, Languages , API Keys, 
Tokens,Usernames,Passwords,Information using 
Dates,Extension 📓

#infosec #cybersec #bugbountytips

AV reposted

CVE-2023-24488 - Citrix Gateway XSS Scan the internet and wait for dup :3 nuclei -l target.txt -t CVE-2023-24488.yaml -o ready_for_dup.txt nuclei template:- gist.github.com/0xmahi/c4aaa10… #BugBounty #bugbountytips #xss #CVE #Citrix

badhacker0x1's tweet image. CVE-2023-24488 - Citrix Gateway XSS
 
Scan the internet  and wait for dup :3 

nuclei -l target.txt -t CVE-2023-24488.yaml -o ready_for_dup.txt

nuclei template:- gist.github.com/0xmahi/c4aaa10…

#BugBounty  #bugbountytips #xss #CVE #Citrix

AV reposted

I re-watched @GodfatherOrwa 's talk at @InfoSecComm 's IWCON 2.0 and must say it's super informative. The talk is ~45 minutes long but I have condensed the talk for you to read in 2 minutes.

thebinarybot's tweet image. I re-watched @GodfatherOrwa 's talk at @InfoSecComm 's IWCON 2.0 and must say it's super informative.

The talk is ~45 minutes long but I have condensed the talk for you to read in 2 minutes.

AV reposted

Broken Access Control (BAC): Testing for unprotected resources: Attempt to access resources without proper authentication, using simple URL manipulation or browsing to restricted areas. Forced browsing: Attempt to access restricted resources directly by modifying the URL, even…


AV reposted

Become an Nmap pro in 30s 👇🕥 Nmap is a port scanner, but it does much more including service/OS detection and even vuln scanning. By default nmap does a standard TCP SYN scan on the top 1000 ports of host. $ nmap host For more verbosity use -v or -vv. $ nmap -vv host 👇


AV reposted

SQL Injection on JSON body POST request. It took me some time, but finally found the right technique and injection point. ``sqlmap -r request.txt --level=5 --risk=3 --force-ssl --ignore-code=500 --dbs`` #SQLInjection #BugBounty

nav1n0x's tweet image. SQL Injection on JSON body POST request. It took me some time, but finally found the right technique and injection point. ``sqlmap -r request.txt --level=5 --risk=3 --force-ssl --ignore-code=500 --dbs`` #SQLInjection #BugBounty
nav1n0x's tweet image. SQL Injection on JSON body POST request. It took me some time, but finally found the right technique and injection point. ``sqlmap -r request.txt --level=5 --risk=3 --force-ssl --ignore-code=500 --dbs`` #SQLInjection #BugBounty
nav1n0x's tweet image. SQL Injection on JSON body POST request. It took me some time, but finally found the right technique and injection point. ``sqlmap -r request.txt --level=5 --risk=3 --force-ssl --ignore-code=500 --dbs`` #SQLInjection #BugBounty
nav1n0x's tweet image. SQL Injection on JSON body POST request. It took me some time, but finally found the right technique and injection point. ``sqlmap -r request.txt --level=5 --risk=3 --force-ssl --ignore-code=500 --dbs`` #SQLInjection #BugBounty

AV reposted

Found another SQLi on @Bugcrowd 's private program #ItTakesACrowd #BugBounty #bugbountytips #bugbountytip Tip: Use this payload 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z In the value of every parameter and check if response delays according to the provided time in payload

Hammad7361's tweet image. Found another SQLi on @Bugcrowd 's private program
#ItTakesACrowd #BugBounty #bugbountytips #bugbountytip 
Tip: Use this payload 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
In the value of every parameter and check if response delays according to the provided time in payload
Hammad7361's tweet image. Found another SQLi on @Bugcrowd 's private program
#ItTakesACrowd #BugBounty #bugbountytips #bugbountytip 
Tip: Use this payload 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
In the value of every parameter and check if response delays according to the provided time in payload

AV reposted

Search for all leaked keys/secrets using one regex! regex: gist.github.com/h4x0r-dz/be69c… credits: @h4x0r_dz #BugBounty #bugbountytips

NinadMishra5's tweet image. Search for all leaked keys/secrets using one regex! 

regex: gist.github.com/h4x0r-dz/be69c…

credits: @h4x0r_dz

#BugBounty #bugbountytips

AV reposted

Few dorks which I use to find common bugs while testing. Add your so it’ll help others 1. ssl.cert.subject.CN:"*.target. com" http.title:"index of/" 2. :"*.target. com" http.title:"gitlab" 3. :"*.wur.nl" http.title:"gitlab"


AV reposted

I just found a Critical Authentication Bypass on one of my target's Apache Tomcat Instance. example.target.com -> redirect admin.target.com (NXDOMAIN) example.target.com/debug -> 401 Basic Auth example.target.com/debug/ -> 200 OK #bugbountytips

galnagli's tweet image. I just found a Critical Authentication Bypass on one of my target's Apache Tomcat Instance.

example.target.com -> redirect admin.target.com (NXDOMAIN)

example.target.com/debug -> 401 Basic Auth

example.target.com/debug/ -> 200 OK

#bugbountytips
galnagli's tweet image. I just found a Critical Authentication Bypass on one of my target's Apache Tomcat Instance.

example.target.com -> redirect admin.target.com (NXDOMAIN)

example.target.com/debug -> 401 Basic Auth

example.target.com/debug/ -> 200 OK

#bugbountytips

AV reposted

HackingTool All in One Hacking tool For Hackers github.com/Z4nzu/hackingt… #redteam t.me/hackgit/7843


Loading...

Something went wrong.


Something went wrong.