dirty0124
@dirtycoder0124
A positive, never give up person. Founder of https://blindf.com Telegram group https://t.me/+xa7Q6GcEudFkYzA1
Was dir gefallen könnte
Prompt injection is becoming a real-world attack surface. The Arcanum Prompt Injection Taxonomy v1.5 looks solid—especially for anyone working with LLM security. Worth checking out. @Jhaddix @xssdoctor
We’re so hyped on the below release. So hyped we’re doing some giveaways! We are giving away 8 free seats to our Advanced Client Side course. All you have to do is retweet and like the below post! Winners chosen next week 🫶
THC Release 💥: The world’s largest IP<>Domain database: ip.thc.org All forward and reverse IPs, all CNAMES and all subdomains of every domain. For free. Updated monthly. Try: curl ip.thc.org/1.1.1.1 Raw data (187GB): ip.thc.org/docs/bulk-data… (The fine work…
🚨 3 critical/high FreePBX vulnerabilities disclosed CVE-2025-66039: Authentication bypass CVE-2025-61675: SQL injection CVE-2025-61678: File upload leading to RCE I've created detection scripts for these vulns: github.com/rxerium/FreePB… @Horizon3ai - horizon3.ai/attack-researc…
Executive Offense - (Release) The Arcanum Prompt Injection Taxonomy v1.5 executiveoffense.beehiiv.com/p/executive-of…
Another good payload <script ysx<>Reflect.apply(alert,null,[1])</script xy<> #xsspayload #bugbountytips
A very good xss payload. <sCriPt x>(((confirm)))``</scRipt x> #bugbountytips #xss #bugbounty
Want to learn complex xss attacks with practical for free? Then this post is for you! Hi everyone! I've added a new video in my xss playlist showing how i was able to find an interesting xss attack in NASA with full practical demonstration Check it out here:…
I've developed a professional and technical tool for Next.js (CVE-2025-55182) 🥳 I'm offering this tool, which allows you to perform both bulk and individual scans, as well as testing on live subdomains. github; github.com/ynsmroztas/Nex… #DevTools #python #bugbountytip…
Reminder: React2Shell detection is live across Burp Suite. If you’re assessing exposure in Next.js apps, here’s how to run reliable checks with Burp Suite Professional or Burp Suite DAST: bit.ly/4rFhtij
🚨 POC for CVE-2025-55182 that works on Next.js 16.0.6 Here are the exact, battle-tested queries you need — Censys, Shodan, FOFA, ZoomEye, Quake, BinaryEdge, Hunter.how, and Nuclei matchers — all tuned specifically to find Next.js RSC / React Server Components…
Paste the data, and it will extract the domains. Not perfect, but useful for me. #bugbountytips #BugBounty dirtycoder0124.github.io/domain-extract…
Just got a reward for a high vulnerability submitted on @yeswehack -- (XSS) - Stored (CWE-79). yeswehack.com/hunters/dirty0… #YesWeRHackers Steps: 1. Found misconfigured Algolia key 2. Escalate it into Stored XSS 3. Payload executed when searching for a specific keyword #bugbountytips
Bug Bounty Search Engine Google advanced search queries generator for target domain: File & Directory Discovery Vulnerabilities & Exploits Subdomain & Asset Discovery And lot more github.com/gatiella/Bug-B… #InfoSec #BugBounty #bugbountytips #CyberSecurity
Stop missing cache poisoning vulnerabilities. Most hunters only test X-Forwarded-Host and miss 90% of the attack surface. I wrote a complete guide to finding what others miss: medium.com/@Aacle/the-cac… #bugbounty #infosec
United States Trends
- 1. Colts 46.6K posts
- 2. Rivers 57.1K posts
- 3. Brock Purdy 15.6K posts
- 4. Niners 8,458 posts
- 5. #FTTB 6,519 posts
- 6. Kittle 8,608 posts
- 7. Ballard 2,913 posts
- 8. Dee Winters 2,143 posts
- 9. #WWERaw 21.9K posts
- 10. Adam the Woo 2,431 posts
- 11. Tonges 1,286 posts
- 12. #SFvsIND 2,201 posts
- 13. #ForTheShoe 2,424 posts
- 14. gaten 3,526 posts
- 15. Jennings 15.7K posts
- 16. Alec Pierce 3,598 posts
- 17. Jonathan Taylor 3,331 posts
- 18. Tyler Warren 2,365 posts
- 19. #LADS2ndAnniversary 5,957 posts
- 20. Pelicans 4,917 posts
Was dir gefallen könnte
-
mohammed eldeeb
@malcolmx0x -
Geekboy
@emgeekboy -
Prateek Tiwari
@prateek_0490 -
KNOXSS
@KN0X55 -
Japz (h4nt3rx) 🕷️🏴☠️
@japzdivino -
Wh11teW0lf
@Wh11teW0lf -
Pratik Yadav
@pratikyadav7_ -
Rahul Maini
@iamnoooob -
streaak
@streaak -
pwnmachine 👾
@princechaddha -
Jenish Sojitra
@_jensec -
Khizer Javed
@KHIZER_JAVED47 -
Rodolfo Assis
@RodoAssis -
Saad Ahmed
@XSaadAhmedX -
Mahmoud Gamal
@Zombiehelp54
Something went wrong.
Something went wrong.