Bl4ck Ac3 retweeted
HowToHunt is updated with some new resources and techniques check out: github.com/KathanP19/HowToHu…
- Reverse Engineer an API by @offensivedroid
- 2FA bypass method by @ome_mishra
- GraphQL Resource
.. and more
Sorry guys for late update lots of new things going in life. 😅
Bl4ck Ac3 retweeted
A lot of you guys were requesting Gitbook for HowToHunt.
It took hell lot of work to arrange them 😓,
hope so you like it, and make some pull request, what's left.🙂
Here you go: 🔥
kathan19.gitbook.io/
#bugbountytips #bugbounty #BugBountyTips
Bl4ck Ac3 retweeted
Just released a brand new and free module on @hackinghub_io on SQL Injection with @BuildHackSecure!
Check out the video walkthrough 👉🏼 youtu.be/EZXvxpbFqvg
Bl4ck Ac3 retweeted
🕵️Top 25 Recon Tools
© Credit- ReconOne
#bugbounty #bugbountytips
Bl4ck Ac3 retweeted
After bug bounty for a while what should be the right direction to take?
40%Get a Pentester Job
15%Become a consultant
45%Nope, bug bounty for life
20 votes • Final results Bl4ck Ac3 retweeted
We're back with another post! #cybersecurity #pentesting
Offensive vs. Defensive Hacking: What's the difference? 💻🛡️
Offensive finds weaknesses before attackers do. Defensive protects systems and mitigates threats.
Dive deeper with the Safer Internet Project! 🚀 #CyberSecurity #Hacking #TechCareers #SIP
Bl4ck Ac3 retweeted
"I'm Black first. My sympathies are Black, my allegiance is Black, my objectives are Black." ~ Malcolm X
Bl4ck Ac3 retweeted
Discover more subdomains during your recon by extracting subdomains from TLS certificates. Integrate Cero into your recon automation for better results.
github.com/glebarez/cero
Bl4ck Ac3 retweeted
I wanted to share this great website with you jc-cybersecurity.co.uk/types…
13
Bl4ck Ac3 retweeted
Both me and @joohoi are big fans of the @BugBountyDEFCON village. Definitely Looking forward to see the growth of this space next year!
Bl4ck Ac3 retweeted
We just realized that OCEANSIDE A is a frikkin huge room! Yall better get to our talk on Thursday when we drop our super sick tool certainly and present some really cool research around domain bitflippin spacelazer credential stealing shenanigans
Pewpew
blackhat.com/us-24/briefings…
Bl4ck Ac3 retweeted
Google Dork - Google Groups ⚙️
site:groups[.]google[.]com "example[.]com"
Find juicy Endpoints for further testing 🎯
First saw this from @h4x0r_dz
Bl4ck Ac3 retweeted
Replying to @harshad_hacker
Effective Subdomain Discovery Tips for Cybersecurity Professionals
1. Automate scans regularly.
2. Combine tools for comprehensive results.
3. Filter results based on risk levels.
4. Monitor for new or removed subdomains.
5. Manually verify critical subdomains.
6. Check for common misconfigurations.
7. Perform vulnerability assessments.
8. Document findings and actions.
9. Conduct periodic audits.
10. Stay updated with the latest threat intelligence.
Bl4ck Ac3 retweeted
🚀🚀 How to find RXSS in 5 minutes 🚀🚀
🧾 Credit - Ahmad Marzouk
1) subfinder -d target.com -all -o targets.txt *use subfinder with API Keys to extract a lot subdomains*
2) paramspider -l targets.txt
3) cat *.txt | kxss
4) Use this Payload to Bypass case sensitive %27"></a></script></title></form></span></meta></style></iframe></noscript></textarea></xmp></pre><ScRiPt>alert(/hacked/)</sCrIpT>
5) Happy Hunting 😍
#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp































