Co-Founder & CSO at @GrayXploit | Offensive Security Researcher | Appsec Pentester
India
Joined July 2020
- Tweets348
- Following404
- Followers454
- Likes925
Amit Kumar ๐ฎ๐ณ retweeted
Know every way to break a JWT.
38 pages, 47 techniques.
brutelogic.net/ebooks/brokenโฆ
With original research and tested payloads.
I just wrote a beginner-friendly guide to Remote Code Execution (RCE), including Burp Suite testing, SSTI, command injection & RCE chains.
๐ amitlt2.medium.com/remote-coโฆ
#CyberSecurity #RCE #AppSec #BugBounty #BurpSuite #Infosec
Amit Kumar ๐ฎ๐ณ retweeted
[$4,500] Remote Code Execution Vulnerability in Meta's Manus AI #bugbounty
zaizen.me/blog/manus-ai-deepโฆ
Exploiting SQL injection vulnerabilities ๐พ๐ฅ
๐จโ๐ป Ayoub // Intigriti
๐ intigriti.com/researchers/blโฆ
Amit Kumar ๐ฎ๐ณ retweeted
๐ฅapi restriction bypass using fake parameterโ ๏ธ
/api/public => unauthorized
/api/public/latest?anything=/api/public => 200ok
you can FUZZ like:
?admin=true,
?bypass=1,
debug=true,
OR add header โX-Custom-IP-Authorization: 127.0.0.1โ
Join my telegram t.me/ShellSec
๐ WP Security Pentesting Guide.
From basic recon to advanced exploits.
For testers & devs.
Guide: github.com/amitlttwo/Hackingโฆ
@HarshDRanjan1
#WordPressSecurity #Pentesting #BugBounty #bugbountytips #hacking #CyberSecurity #InfoSec #IT #xss #rce #sqli #ssrf #idor
Amit Kumar ๐ฎ๐ณ retweeted
๐RCE in mailโ ๏ธ
In Login/register page:
1. Insert a normal mail and intercept on burp
2. Replace the mail to OS command payload
3. Don't use space in the payload
4. Replace space to ${IFS}
5. Try blind OS injection using burp collab URL
Join my telegram t.me/ShellSec
The bug bounty rollercoaster I reported :
๐ Critical data leak (15,000+ records) โ No reply
๐ฏ 5 Reflected XSS findings โ All marked duplicate
๐ SSRF with internal access โ No reply
Hunt continues! Consistency > instant wins.
#xss #bugbountytips #InfoSec #ssrf #Hacking
DAY 1:
Found R XSS via iconURL parameter ๐ต๏ธ๐ฐ
https://Redacted/o/marketplace-app-manager-web/icon.jsp?iconURL=https:///%22%3E%3Cimg%20src=x%20onerror=alert(document.domain)%3E
Portal: Marketplace manager
Bug: Reflected XSS
#XSS #BugBounty #WebSecurity
#Hacking #InfoSec
x 1/6
Back with 5 hard-earned #bugbounty lessons after vanishing for a while:
Pivot, donโt quit.
Bored of the main web app? Switch to API โ Docs โ Mobile app of the same target. Depth beats breadth.
#infosec #bugbountyhunting #cybersecurity
x 6/6
Summary:
Recon is multi-layered (JS โ JSON โ API โ Roles).
Stay in one program longer.
Test every path, every role.
Forgotten dev files & legacy endpoints still pay big.
Consistency beats talent. Day 1 is today.
#bugbounty #infosec #cybersecurity #bugbountytips #hackers
After vanishing from the scene, I'm officially back on the bug bounty grind. ๐
Day 1 starts NOW.
โ 10 AM - 7 PM:
10-2 PM: Deep Learning
2-3 PM: Break
3-7 PM: Active Hunting
Consistency is the key. The journey begins again.
#BugBounty #CyberSecurity #HackTheBox #infosec #Day1
