errorsec_ retweeted
As the embargo is now lifted, find all the information needed on php2shell.com/ - the critical RCE vulnerability our research team identified affecting PHP core wiz.io/blog/php2shell-php-rc…
皆様に、今夜に対応して頂きたい大至急のお願いです。
多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な２件の脆弱性に関する注意喚起を行っています。
公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時（日本時間）に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。
修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。
国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。
国家サイバー統括室(注意・警戒情報)（@cyber_forecast） / X
errorsec_ retweeted
🚨 GIVEAWAY ALERT !! 🚨
Giving away hacker swags from the shop 👀
How to enter:
Like & Retweet the original post ❤️
Follow @bughuntershop
2 Winners gets customized hacker goodies from the shop
cc: @bug_vs_me @errorsec_ @tabaahi_ @hetmehtaa @3ncryptSaan @krishnsec
#bugbounty
🚨 ALERT !! 🚨
The all new @bughuntershop is now live 😀
A small store for hackers and creators bughunter.shop/
Custom 3D printed hacker wall arts, lightboxes & keychains - all made for your setup⚡️
Built by a hacker, for hackers
#bugbounty
errorsec_ retweeted
🔒 Bug vs Me is now open! Offering affordable manual penetration testing with 500+ bugs found across Facebook, Epic Games & T-Mobile. Expert security without the premium price tag.
🔗 bugvsme.app
#CyberSecurity #PenTest
errorsec_ retweeted
Here are a few tips that helped me (and others) when starting out on platforms like @Hacker0x01 and @Bugcrowd :
Start with public programs that offer clear scopes and don’t have a lot of duplicates. Read their policy thoroughly.
Focus on low-hanging bugs like IDORs, authentication issues, or misconfigurations they’re common and great for learning.
Take time to understand recon finding hidden endpoints or subdomains is gold.
Read disclosed reports; they’re a goldmine for learning real-world attack patterns.
Document everything you do it helps with reporting and learning.
Be patient! It takes time to get your first valid report, but every step teaches you something valuable.
#bugbountytips #security #bugcrowd
errorsec_ retweeted
My first-ever SSRF report to Internal Data Access. Feel free to share any feedback!
bishal0x01.medium.com/ssrf-t…
Thanks to @dhungana_bibek7 @tnirmalz for proofreading!
#bugbounty #ssrf
errorsec_ retweeted
🚨I'm giving back to the community that shaped me🚨
I’ll be mentoring 3 students for FREE on their bug bounty journey.
If you're ready, DM me why YOU should be chosen.
Let’s make cybersecurity accessible to everyone!
#BugBounty #EthicalHacking #CommunityWork #cybersecurity
errorsec_ retweeted
“Plan Ristriction Bypass for Slack Integration: 500$ Improper Validation Check Bug” by Abhi Sharma medium.com/@a13h1/plan-ristr…
errorsec_ retweeted
none of these cheatsheets or free hacking resources will make you a good hacker. Just accumulating these resources ain't enough. Clear your mind and focus hard.
errorsec_ retweeted
Interesting Story of an Account Takeover Vulnerability .
Hey all , This is my first blog about account takeover vulnerability.
Give it a check . Hope you all like it .
#bugbounty #cybersecurity medium.com/@deepanshudev369/…
errorsec_ retweeted
I just published Authentication Bypass -MFA , Account Takeover… link.medium.com/Jon2s1eF3Lb
errorsec_ retweeted
"Unveiled a critical admin panel vulnerability, securing a $3,500 bounty! 🛡️ Explore the full breakdown in my latest blog :
medium.com/@noob.assassin/br…
CC: @_rajesh_ranjan_
#CyberSecurity #BugBounty #EthicalHacking #WebSecurity #Infosec #VulnerabilityResearch
errorsec_ retweeted
Hi Everyone,
Start publishing your articles on bytebloggerbase.com/
Create an account on bytebloggerbase.com/ to stay updated.
Next article research is on "Mastering URLs : Gen AI Based Automation and Prompting" will be posted on @BloggersCon_V soon
#GenAI #ai #cybersecurity #research #article #openai
errorsec_ retweeted
It's okay to present your thoughts
But all the BB people bullying one man for being on the top of the rankings just hunting on VDP programs 🤷
Yeahh it's foolish to do this much of VDP , but stop traumatising that man , you are only allowed to suggest not to bully.
errorsec_ retweeted
We will have a Space today @9 PM. Join us for some fun time lol.
@krishnsec @udit_thakkur @ReebootToInit5 should be there mostly
errorsec_ retweeted
Haha nope! Located internal IP on JS file, put it as the Host header and fuzzed and located a .env file which gave me admin creds 🫡
errorsec_ retweeted
First tool added in @recon_sage by @RootxRavi
Join the waitlist to get access to the new generation reconnaissance platform
reconsage.com/tools/scan-gma…
#bugbounty #bugbountytips #bugbountytip
