Pinned Tweet
Just launched VULNEX – my new website!A clean library with ready payloads, vulnerability testing techniques, useful commands, Google Dorks, and resources for Bug Bounty & Cybersecurity.Everything neatly organized for easy use.Check it out:
vulnex.vercel.app/Hope
#BugBounty
Arsenal OSINT is a free field guide with 756+ open-source intelligence tools, organized by discipline.
It also includes methodology guides and a case-mapping tool that runs entirely in your browser.
arsenalosint.vercel.app/
🔐 Authz-ExeC
Burp Suite extension for access-control testing — BAC, IDOR, BOLA & Privilege Escalation
⚙️ Auto matrix compares every identity's response
🐤 Canary markers catch cross-tenant leaks
🔗 github.com/execiq/Authz-ExeC
#bugbounty #infosec #burpsuite
🎯 Launched the new Bug Bounty section on VULNEX
From first recon to first payout:
Recon Flow
Vulnerability Chaining (XSS+CSRF=ATO)
Automation (Nuclei, Dalfox, Katana)
Reporting Templates
Platform Guides (H1, Bugcrowd...)
🔗 vulnex.vercel.app/bug-bounty
#bugbounty #infosec
➡️ Repeater Auto Tab Renamer (Burp Suite)
For download:
github.com/execiq/Burp-Repea…
مچهول الهويه retweeted
Just launched VULNEX – my new website!A clean library with ready payloads, vulnerability testing techniques, useful commands, Google Dorks, and resources for Bug Bounty & Cybersecurity.Everything neatly organized for easy use.Check it out:
vulnex.vercel.app/Hope
#BugBounty
A vulnerability in the U.S. Department of Health and Human Services (HHS) disclosure program has been patched.
This vulnerability allowed attackers to extract the entire source code of a website, potentially exposing the source keys.
VULNEX is my experimental project and it’s still under development. Any feedback or suggestions would really help improve the platform and its content. (●'◡'●)
vulnex.vercel.app/
My Journey in Bug Bounty: Explaining IDOR Vulnerabilities to Delete User Private Lists
youtube.com/watch?v=XO7TU9gx…
I just published Guide 001 | Getting Started in Bug Bounty Hunting.. medium.com/p/guide-001-getti…
🚨 Discovered a GraphQL User Enumeration Vulnerability within AS45102 – Alibaba (US) Technology Co., Ltd.
✅ Reported responsibly to the security team.
#CyberSecurity #BugBounty #ResponsibleDisclosure
Katana to Kill‑Switch: Mastering ProjectDiscovery’s Crawler From Zero to Pro (with Real‑World Scenarios)
adce626.medium.com/katana-to…
#katana #BugBounty #Hacked
🔍 Try Deep Google Search - your ultimate tool for discovering advanced Google Dorks!
400+ Dorks, sorted by vulnerability type
Sleek and responsive UI (in both light and dark modes)
Save targets + Import/export your workspace
Try it now:
deep-shadow-wings-x.vercel.a…
#BugBounty
"Strength is not in proving yourself, but in humility of heart and continuous learning."
— adce626
@coffinxp7
🔎 BugHunt Toolkit — built by #adce626
🎯 A complete Bug Bounty Recon command generator
⚙️ 100+ tools & commands— automated, categorized, and customizable
🌐 Just enter the domain and start the hunt
🔗 adce626.vercel.app/
#BugBounty Thank you @coffinxp7
SQLi Pentest Toolkit
Learn & test SQLi hands-on!
🔹 Multi-DB support
🔹 Auto commands + Dorks
🔹 LOXS (time-based)
🔹 Tutorials & method
👨💻 By @adce626 & @coffinxp7
⚠️ Legal & educational use only
🌐 adce626.github.io/SQLi-Pente…
Discover XSS Vulnerabilities Yourself in Just 3 Minutes! 🔥 [Quick Guide] youtu.be/w8hHWHRcLms?si=8FN7… via @YouTube
source
@coffinxp7
Discovered a 403 bypass vulnerability via URL injection, granting access to the admin dashboard. 200 OK instead of 403. Big thanks to my amazing brother's article for the insights! #CyberSecurity #Vulnerabilities
@coffinxp7
