Pinned Tweet
My secret bugbounty notes🤫:
All about IDOR's! Exploitation, bypasses and chains!💥
#bugbountytips #bugbounty #bugbountytip
notion.so/IDOR-Attack-vector…
swaysthinking retweeted
Red Teamers - why not use #Cyberpunk2077's signed launcher to execute your code? Simply edit launcher-configuration.json and copy your payload anywhere within the root directory 😉
swaysthinking retweeted
After a while on HackerOne, you might start piling up private programs that are not active anymore. Leaving them will give you invites for new programs! I published a script on gitlab.com/dee-see/hackerone… that pulls the list of all those disabled and paused programs.
swaysthinking retweeted
Thanks Zaid from @_zSecurity_ for having us ! Amazing opportunity with amazing people :)
Multi 0-Day Exploits Expose Millions Of Routers!
youtu.be/GLrmxwwkAJc
Thanks to @0xLupin @jtcsec and @Lexcor1
#hacking #EthicalHacking #CyberSecurity #WiFi
The amazing @0xLupin has done it again! Check out this impressive bug he and his friends found!
cybernews.com/security/walma…
swaysthinking retweeted
Doing things a bit different this Sunday. A ton of my viewers have been telling me to answer the same questions I ask my Live Recon guests. So what better way to do it, other than bringing my buddy @stokfredrik to interview me and to have some fun on the stream together!
Amazing!
Hey! I have disclosed all of my bugs to Automattic program at HackerOne. You can see the disclosed reports in my @Hacker0x01 profile. I hope you like them! :) hackerone.com/bugra #bugbounty #bugbountytips
Fax
If people spent less time whining about #bugbountytips and “I made $5,000” posts and spent more time hacking or learning, they’d be a lot better for it.
swaysthinking retweeted
Learn about attacks that compromise SSO (Single Sign-On) systems and how you can protect against them. youtube.com/watch?v=BKrtAePO…
LOL
Looking for a PS5 for the holiday season but keep getting stuck waiting in the "virtual queue" when attempting to purchase one?
direct.playstation.com/ Queue Bypass
1.) Set the DNS for "sonyied.queue-it.net" to 127.0.0.1
2.) ???
3.) PROFIT!
(Tested using Burp Suite)
swaysthinking retweeted
Productivity is best achieved by balancing work and breaks, deep vs shallow work and getting plenty of rest, water and sleep. Not working each moment of the day!
swaysthinking retweeted
⚠️Open staging environments can lead to production account takeover
✔️If they use a separate DB, but same JWT secret
✔️If the username or e-mail address is used as identifier
This is an excellent #BugBountyTip, thanks @kapytein!
