4LPh4 C@ retweeted
How to pick your bug bounty targets by @NahamSec . Though the whole content is great as always, but this part 09:03 is a great advice for beginners. #BugBounty
youtu.be/vbXpRHcKIr0?t=543
4LPh4 C@ retweeted
#Lucid currently holds the quickest 1/4 mile time
#BugattiChiron #Ducati #Tesla
youtu.be/EyDpQpcPpuc
#Lucid currently holds the quickest 1/4 mile time
#BugattiChiron #Ducati #Tesla
youtu.be/EyDpQpcPpuc
4LPh4 C@ retweeted
Here I found my first bug of 2022. "Grafana 8.3.0" #CVE202143798 Grafana Unauthorized arbitrary file reading vulnerability in a private invite. I used jas502n's exploit --> github.com/jas502n/Grafana-C… #bugbountytips #infosec
4LPh4 C@ retweeted
Young Dolph walked into Makeda's Butter Cookies in Memphis on Wednesday when employees said someone drove up and fatally shot him, the shop owner told a local news station. insider.com/young-dolph-kill…
4LPh4 C@ retweeted
God bless Dolph 🕊 Real independent Memphis rapper born in chicago. loved by millions of ppl. Always showed love everytime I seen him this is tragic God bless his family man
4LPh4 C@ retweeted
Too Soon?
#SpiderManNoWayHomeTrailer – at İstanbul, Türkiye
4LPh4 C@ retweeted
Do you know which IP addresses are being used for your orgs different web services? We show you 3 ways to do IP discovery, allowing you to create a full IP map of your org
#IP #infosec
securitytrails.com/blog/ip-d…
4LPh4 C@ retweeted
Bug: Graphql introspection to info disclosure
Program: RDP
Reward : $$$
@remonsec @1ndianl33t @sechunt3r @shubzyernale @theXSSrat @ADITYASHENDE17 @impratikdabhi @PawanRa20262178 @sign3tsh3l1 @sunilyedla2 @Farah_Hawaa
4LPh4 C@ retweeted
OverlayFS Privilege Escalation (CVE-2021-3493)
-
Affected Versions:
Ubuntu 20.10
Ubuntu 20.04 LTS
Ubuntu 18.04 LTS
Ubuntu 16.04 LTS
Ubuntu 14.04 ESM
-
Discovered by @securiteam_ssd
Repo by @briskets11
-
PoC: github.com/briskets/CVE-2021…
-
#CyberSecurity #CVE #InstaRoot
4LPh4 C@ retweeted
I only smoke weed because my D&D character is a High Elf and I don't half-ass ANYTHING.
4LPh4 C@ retweeted
I was proxying traffic from a mobile crypto app called "Pi", I noticed that 3700 of my contacts were being uploaded to their server and are stored/searchable.
-
Any explanation @PiCoreTeam?
-
#cryptocurrency #picoin #cryptocurrencies #altcoin #minepi #cybersecurity #crypto
4LPh4 C@ retweeted
After finding a bug you can use
httpx -tech-detect
This flag will allow you to see other subdomains with similar technology and can look for that same issue there
#bugbountytips
4LPh4 C@ retweeted
Sometimes these ransomware Cobalt Strike gangs really crack me up like WTF? 😂🤦
18.217.142[.]56
Running cracked Cobalt Strike 4.0 on AWS with TS password as maga 😂🤦
@malwrhunterteam
4LPh4 C@ retweeted
New poc
Bug : Reflected Xss
Program : OLx domain
Tip: some time null bytes can make stuff easy
youtu.be/XbWCiPk-frA
@ADITYASHENDE17 @theXSSrat @impratikdabhi @1ndianl33t @sechunt3r @remonsec @dhakal_ananda @sunilyedla2 @PawanRa20262178 @BawseOne






















