Senderwallet retweeted
ZK(Zero Knowledge) Proofs Learning Resources πͺπ«‘
1β£ Getting started with Zk 1β£
βΆοΈ Introduction to Zero-Knowledge Proofs:
π youtu.be/_6Bm5kmov3A?si=NXAwβ¦
βΆοΈ How To Create a ZK Smart Contract:
π medium.com/cyfrin/how-to-creβ¦
βΆοΈ Zk Playground examples:
π github.com/alexroan/zk-playgβ¦
βΆοΈ Hiccup's ZK Journey with Resources:
πsunrise-clerk-234.notion.sitβ¦
βΆοΈ Zk clearly explained with architecture:
πdrive.google.com/file/d/12-eβ¦
2β£Zk Workshops & MOOCs2β£
βΆοΈ Zero Knowledge Proof (ZKP) Basics & dApp:
πyoutu.be/4wvwQ1RZcBw?si=KgWJβ¦
βΆοΈ ZKP and Dapp workshop by CryptoNaukri:
πyoutube.com/live/1tw2wB5i9z8β¦
βΆοΈ ZK Hack- Introducing circom 2.0:
πyoutu.be/6XxVeBFmIFs?si=eSGgβ¦
βΆοΈ ZK MOOCs:
πyoutu.be/uchjTIlPzFo?si=PFclβ¦
βΆοΈ Solidity dev to ZK dev workshop:
πyoutu.be/wyBNZzLEgkA?si=SNxxβ¦
3β£Zk Cohorts3β£
βΆοΈ Zk auditing cohort open sourced:
πyacademy.dev/fellowships/zBlβ¦
βΆοΈ Zk Camp's Aztec/Noir Cohort:
πzkcamp.xyz/aztec
βΆοΈ Zk learning with 0xparc (including Halo):
πlearn.0xparc.org
4β£Zk Game resources4β£
βΆοΈ BattleZips Game using circom and snarkJS:
π youtu.be/CgtNEALhJ3s?si=L74hβ¦
βΆοΈ BattleZips Game using Noir:
π youtube.com/playlist?list=PLβ¦
βΆοΈ Dark Forest: Lessons from 3 Years of On-Chain Gaming:
πyoutu.be/z7V830zndoA?si=IbzMβ¦
5β£ZK Security5β£
βΆοΈ Intro to Zkp security:
πyoutu.be/8wsR7o0rOxU?si=zhKzβ¦
βΆοΈ Common ZK vulnerabilities:
πyoutu.be/1RQSwj8h8rM?si=uUevβ¦
βΆοΈ Trail of Bits' Zk Docs:
πgithub.com/trailofbits/zkdocβ¦
βΆοΈ Zk bugs tracker:
πgithub.com/0xPARC/zk-bug-traβ¦
βΆοΈ Zk hash collision vulnerability:
πyoutube.com/watch?v=W4zAbEnJβ¦
Senderwallet retweeted
Master Solidity in 2025 ππ₯
The Learning Tree π³β‘οΈ
|ββ Step 1: Solidity Fundamentals
| βββ Data types & variables
| βββ Functions & visibility
| βββ Events & modifiers
| βββ Structs & enums
| βββ Mappings & arrays
| βββ Solidity memory vs storage
|
|ββ Step 2: Smart Contract Architecture
| βββ Contract deployment & interactions
| βββ Inheritance & abstract contracts
| βββ Interfaces & libraries
| βββ Custom errors & revert optimization
| βββ Fallback functions
| βββ Upgradeable contracts (Proxy patterns)
| βββ Gas optimization techniques
|
|ββ Step 3: Advanced Solidity Concepts
| βββ Ethereum Virtual Machine (EVM) internals
| βββ Low-level calls (call, delegatecall, staticcall)
| βββ Assembly & Yul for Solidity
| βββ Storage layout & slot manipulation
| βββ Function selectors & signature collisions
| βββ Cross-contract interactions
| βββ Randomness in Solidity
| βββ Precompiles & cryptographic functions
| βββ Metatransactions & account abstraction
|
|ββ Step 4: Security & Smart Contract Auditing
| ββ Common Vulnerabilities
| βββ Reentrancy attacks
| βββ Integer overflows/underflows
| βββ Delegatecall vulnerabilities
| βββ Storage collisions in upgradeable contracts
| βββ Front-running & MEV attacks
| βββ Unchecked return values
| βββ Oracle manipulation attacks
| βββ Flash loan exploits
| βββ Access control misconfigurations
| βββ Block timestamp manipulation
| βββ Denial-of-service (gas griefing, transaction spam)
|
|ββ Step 5: Solidity Development Tools
| βββ Remix, Hardhat, Foundry & Brownie
| βββ Debugging with Tenderly
| βββ Security tools (Slither, Mythril, Echidna)
| βββ Static & dynamic analysis
| βββ Fuzz testing smart contracts
| βββ Gas optimization & profiling
|
|ββ Step 6: Mastering DeFi Protocols & dApps
| βββ ERC standards (ERC-20, ERC-721, ERC-1155)
| βββ DeFi protocols (AMMs, lending, staking, perpetual)
| βββ Cross-chain smart contracts & bridges
| βββ Layer 2 scaling (Rollups, Optimism, zkSync)
| βββ Solidity governance & DAOs
| βββ Multisig wallets & treasury management
| βββ NFT marketplaces & royalties
| βββ Gasless transactions & meta-transactions
|
|ββ Step 7: Build & Get Recognized
| βββ Contribute to open-source Solidity projects
| βββ Write security research & Solidity blog posts
| βββ Participate in Solidity hackathons
| βββ Submit bug bounty reports on real-world protocols
| βββ Network with Solidity developers & security experts
Senderwallet retweeted
η» Claude Code θ£
δΈε₯ζΌζ΄θ΅ιεηΊ’ιζΈιζθ½ε
οΌ51 δΈͺζθ½γ574+ ζ₯ε樑εΌγ24 δΈͺζΌζ΄η±»οΌδΈθ£
ε°±εθΊ«θη»η η©Άεγ
github.com/elementalsouls/Clβ¦
Senderwallet retweeted
π₯I am ready to start writing "DeFiHackLabs Solidity Security Testing Guide".
Currently, it supports 47 types of vulnerabilities.
My todo:
1.Add missed vulnerability descriptions to the test cases written before.
2.Create a Notion version.
3.Create a PDF version.
Senderwallet retweeted
Beginner smart contract devs, auditors - donβt skip this.
This new paper dives deep into real exploitable patterns in Solidity contracts. Reentrancy, overflows, access bugs, all broken down.
Read it, or get rekt later:
arxiv.org/pdf/2504.21480
Senderwallet retweeted
Just published a new Solidity security audit report for @etherspot π€
This is our second audit for them, but this time for Credible Account Module (ERC-7579, EIP-712). Thank you for trust again! π«‘
Read the report belowπ
github.com/shieldify-securitβ¦
Senderwallet retweeted
A structured course built from personal study notes of the book Linux Basics for Hackers by OccupyTheWeb. github.com/ahegazy0/linux-baβ¦
Senderwallet retweeted
When it comes to in-depth technical write-ups, one of my favorite authors is @abhi9u. And this time, he has crafted a beautiful article, "Virtual Memory: A Deep Dive into Page Tables, TLBs, and Linux Internals."
Go, give it a read.
blog.codingconfessions.com/pβ¦
Senderwallet retweeted
An LLM-ready index of 460 Solidity vulnerabilities across 31 protocol types. Scraped from 10,000+ Solodit findings π€
github.com/kadenzipfel/protoβ¦
Senderwallet retweeted
JS & Client-Side Security Resources
github.com/zomasec/client-siβ¦
Senderwallet retweeted
π¨Junior/Advanced secruity researchers - this is for you!!!
A new Training Hub that teaches you web3 vulnerability patterns and thinking as an attacker. Thanks to @ValvesSec, great jobπ
URL: training.valvessecurity.com/β¦
Senderwallet retweeted
new tool: grafana scanner with 10 CVE checks from 2018-2025
made it cause existing ones give too many false positives.
github.com/Zierax/Grafana-Fiβ¦
#Pentesting #InfoSec #BugBounty #bugbountytips #Hacking #EthicalHacking
Senderwallet retweeted
github.com/Zierax/My-Recon-Mβ¦
Twice, my account Got restricted again, So this is the methodology for third time I hope my account still alive
@github
Senderwallet retweeted
One of the finest explanations of the CPU pipeline by this MIT course!
ocw.mit.edu/courses/6-004-coβ¦
Senderwallet retweeted
If you're serious about mastering client-side bugs, this repo is a goldmine.
A curated roadmap covering:
β’ XSS (DOM-based & advanced)
β’ postMessage exploitation
β’ CSP bypass techniques
β’ Prototype Pollution
β’ Real-world writeups & labs
Stop jumping randomly between topics, follow a structured path.
π github.com/zomasec/client-siβ¦
#BugBounty #WebSecurity #XSS #AppSec #InfoSec
Senderwallet retweeted
Level up your bug bounty workflow π
π One-Liners by 0xPugal = a goldmine of powerful recon & exploitation commands β all in a single line.
π₯ What you get:
β’ β‘ Fast recon pipelines
β’ π― Ready-to-use XSS / SSRF / LFI chains
β’ π§ Real-world automation workflows
β’ π οΈ Tool chaining like a pro
π Source: github.com/0xPugal/One-Linerβ¦
β Donβt just copy-paste
β
Understand the chain β hunt smarter
#BugBounty #CyberSecurity #Infosec #Hacking #Recon #
Senderwallet retweeted
"Sensitive Information Leak & Missing Authorization via API Endpoint"
Join my BugBounty Chennal: t.me/ShellSec
- to find info leak bugs in wordpress use my this quick wordlist:
/api/v1/export/data
/api/v1/config
/api/debug/env
/api/v2/auth/sessions
/api/v1/admin/users
/wp-json/wordfence/v1/config
/api/v1/billing/details
/api/v1/db/stats
/api/v1/logs
/api/v1/health
/api/v1/status
/api/v1/internal/settings
/api/v1/cloud/credentials
/api/v1/user/profile
/api/v1/system/info
/api/v1/backup/list
/wp-json/wp/v2/users
/wp-json/wp/v2/settings
/wp-json/wp/v2/media
/wp-json/wp/v2/posts?status=any
/wp-json/wp/v2/pages?status=private
/wp-json/elementor/v1/system-info
