繁體中文
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어
xelcezeri's profile picture.

Samet Yiğit

@xelcezeri

781貼文 286位跟隨者 1千個跟隨中
你可能會喜歡
Samet Yiğit 已轉發
ngosytuanbug's profile picture.
ngosytuan
 @ngosytuanbug
年9月16日

Today i found a RCE in a bug bounty platform 1. found a bypass admin role with cve confluence 2. access and upload a plugin ( webshell) 3. turn on plugin in server and can run any system command HOPY THEY FAIR #BugBounty

ngosytuanbug's tweet image. Today i found a RCE in a bug bounty platform 1. found a bypass admin role with cve confluence 2. access and upload a plugin ( webshell) 3. turn on plugin in server and can run any system command HOPY THEY FAIR #BugBounty
7
14
168
44
10千
Samet Yiğit 已轉發
00xalr's profile picture.
Abdalkreem
 @00xalr
年9月6日

The new writup is here: Account Takeover via Insecure Email Change — Critical Vulnerability medium.com/@3bddagg3/acco… #bugbountytips #bugbounty #hackerone

00xalr's tweet card. Introduction.
🚨 Account Takeover via Insecure Email Change — Critical Vulnerability
來源: medium.com
5
22
208
156
12千
Samet Yiğit 已轉發
Zeno_h2r's profile picture.
Abdulrhman
 @Zeno_h2r
年9月8日

Through a simple path manipulation in the hostName parameter, I was able to escalate the issue into a One-Click Account Takeover medium.com/@Zeno_H2r/expl…

1
8
48
28
3千
Samet Yiğit 已轉發
SalhiMahdi72759's profile picture.
CaptinSHArky(Mahdi🇹🇳)
 @SalhiMahdi72759
年9月9日

Tip: When testing, try injecting a null byte (\u0000) into unexpected parameters. You never know how the backend will handle it — sometimes a small injection can completely break features like the invitation system. #BugBounty #bugbountytips #Hacking #Cybersecurity

SalhiMahdi72759's tweet image. Tip: When testing, try injecting a null byte (\u0000) into unexpected parameters. You never know how the backend will handle it — sometimes a small injection can completely break features like the invitation system. #BugBounty #bugbountytips #Hacking #Cybersecurity
5
37
249
176
12千
Samet Yiğit 已轉發
professor_xa1's profile picture.
Professor_xA1
 @professor_xa1
年9月10日

اللهم بارك بس انا عندي استفسار واتمنى ميتفهمش غلط ليه لما بشوف سيناريوهات زي دي بشوفها ساهلة ومع ان اغلب الحاجات دي بطبقها وانا بهانت بس عمرها ما جات لان استحالة حاجة زي دي تكون متسابة ودا بيخليني احس ان الناس دي البروجرامز بتاعتها غير بتاعتنا حرفيا بحسهم حاجة زي لابات بورتسويجر

00xalr's profile picture. 20 | Cybersecurity | Bug Bounty Hunter | Sharing vulns & tips 💥 | DM = 📥 https://t.co/m5VQqNq6SB , https://t.co/PgopMw9zNY
Abdalkreem
 @00xalr
年9月9日

wirtup new : medium.com/@0xalr/sensiti… #bugbountytips #bugbounty #hackerone

00xalr's tweet image. wirtup new : medium.com/@0xalr/sensiti… #bugbountytips #bugbounty #hackerone
6
14
170
109
10千
9
2
40
15
4千
Samet Yiğit 已轉發
adrielsec's profile picture.
elSec
 @adrielsec
年9月10日

hardcoded credentials in javascript file xxxxxxx/static/js/main.xxxxx.chunk.js 🗣️ dp #bugbounty #bugbountytips #bugbountytip

adrielsec's tweet image. hardcoded credentials in javascript file xxxxxxx/static/js/main.xxxxx.chunk.js 🗣️ dp #bugbounty #bugbountytips #bugbountytip
11
13
209
74
10千
Samet Yiğit 已轉發
jatav_ravi's profile picture.
Archer
 @jatav_ravi
年7月21日

$500 for Punycode email spoofing bug. Used comilav “m” to bypass email uniqueness check: >Register with [email protected] > Use same name as legit user > Invite real user to fake team Real user joins attacker’s team - gets locked out of real one #bugbountytips #BugBounty

jatav_ravi's tweet image. $500 for Punycode email spoofing bug. Used comilav “m” to bypass email uniqueness check: >Register with comilav831@lhory.com > Use same name as legit user > Invite real user to fake team Real user joins attacker’s team - gets locked out of real one #bugbountytips #BugBounty
11
13
174
123
12千
Samet Yiğit 已轉發
DailyDarkWeb's profile picture.
Dark Web Intelligence
@DailyDarkWeb
年9月9日

#CryptoSecurity 🚨 - A massive supply chain attack on the NPM registry has compromised popular packages with over 2 billion weekly downloads, aiming to steal cryptocurrency from users. dailydarkweb.net/major-npm-supp…

DailyDarkWeb's tweet image. #CryptoSecurity 🚨 - A massive supply chain attack on the NPM registry has compromised popular packages with over 2 billion weekly downloads, aiming to steal cryptocurrency from users. dailydarkweb.net/major-npm-supp…
1
6
21
4
4千
Samet Yiğit 已轉發
zoomeye_team's profile picture.
ZoomEye
@zoomeye_team
年9月4日

🔍Discover More Exposed LLM Servers with ZoomEye ZoomEye Dork👉app="Ollama" || app="vLLM UI" || app="LLaMA Board" || app="LLaMA Factory" || app="Chat LangChain" || app="AnythingLLM" || app="Chat LangChain" ZoomEye Link: zoomeye.ai/searchResult?q…

zoomeye_team's tweet image. 🔍Discover More Exposed LLM Servers with ZoomEye ZoomEye Dork👉app="Ollama" || app="vLLM UI" || app="LLaMA Board" || app="LLaMA Factory" || app="Chat LangChain" || app="AnythingLLM" || app="Chat LangChain" ZoomEye Link: zoomeye.ai/searchResult?q…
LukeSwitzer_'s profile picture. Infosec Person of the Purple Ether
Lμke Swi☨zer 🅅
 @LukeSwitzer_
年9月3日

Exposed LLM server queries for @shodanhq port:11434 "Ollama" port:8000 "vLLM" port:8000 "llama.cpp" port:8080 "llama.cpp" port:1234 "LM Studio" port:4891 "GPT4All" port:8000 "LangChain" blogs.cisco.com/security/detec…

LukeSwitzer_'s tweet card. We uncovered 1,100+ exposed Ollama LLM servers—20% with open models—revealing critical security gaps and the need for better LLM threat monitoring.
Detecting Exposed LLM Servers: A Shodan Case Study on Ollama
來源: blogs.cisco.com
4
100
469
386
34千
0
22
72
41
6千
Samet Yiğit 已轉發
viehgroup's profile picture.
VIEH Group
 @viehgroup
年9月1日

Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi

viehgroup's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
viehgroup's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
3
86
508
365
25千
Samet Yiğit 已轉發
zeyad_ashraf_'s profile picture.
Zuksh
 @zeyad_ashraf_
年9月1日

Alhamdulillah I got 3 RXSS duplicates on a public Bugcrowd program. Write-up: zuksh.medium.com/how-i-discover… #BugBounty #RXSS #XSS #InfoSec #Bugcrowd

zeyad_ashraf_'s tweet image. Alhamdulillah I got 3 RXSS duplicates on a public Bugcrowd program. Write-up: zuksh.medium.com/how-i-discover… #BugBounty #RXSS #XSS #InfoSec #Bugcrowd
1
1
79
29
5千
Samet Yiğit 已轉發
m359ah's profile picture.
Hossam A. Mesbah 🇵🇸
@m359ah
年9月1日

1. Register an account using [email protected] 2. Navigate to change email 3. Change it to [email protected] 4. Boom 💥 become the administrator and infrastructure takeover Rewarded $$$$$ #fuckbountytips

16
21
296
188
17千
Samet Yiğit 已轉發
medusa_0xf's profile picture.
Medusa
 @medusa_0xf
年9月1日

New Video Out 🔥 “AWS S3 Bucket Hacking Explained (Bug Bounty Hunters Must Watch)” youtu.be/_UlHLjIQeJM?si…

medusa_0xf's tweet image. New Video Out 🔥 “AWS S3 Bucket Hacking Explained (Bug Bounty Hunters Must Watch)” youtu.be/_UlHLjIQeJM?si…
4
72
590
473
31千

United States 趨勢

你可能會喜歡

Something went wrong.


Something went wrong.