India
Joined March 2011
- Tweets732
- Following1.3K
- Followers539
- Likes2.8K
Pinned Tweet
Wrote a blog post on What happens if your AWS credentials are leaked on GitHub? tutorgeeks.blogspot.com/2020… #awssecurity #bugbounty
Vinothkumar Paulravi retweeted
Anthropic engineers just dropped the best 1-hour course on building agents with Opus 5.5:
"Opus 5.5 is the best model for building agentic systems."
00:00 - intro to Managed Agents
07:45 - Opus 5.5 brain + architecture
23:40 - skills, loops, memory graphs
54:00 - agent dreaming and orchestration
Prompts → Agents → Loops → Graphs
most people will stop after the architecture chapter and call it an agent
the final twenty minutes are where the agents start running each other
same model, same tokens, completely different week
watch it today
the full article is below, save it while it is still early ↓
Excited to share that I’ve officially earned the ISC2 -CISSP certification!
Valuable learning experience across domains including SOC, Appsec, CloudSec, Risk management, Governance, Security leadership & security architecture.
#CISSP #SecurityLeadership #ISC2 #Infosec
Wrote a blog post on how home directory path information can be effectively leveraged during Open-Source Intelligence (OSINT) investigations.
tutorgeeks.blogspot.com/2026…
Freshworks has added new assets in their scope. Read the program policy for more information: hackerone.com/freshworks
#hackerone #freshworks #bugbounty
Wrote a blog post after a very long time - "Public Exposures in Postman Collections": tutorgeeks.blogspot.com/2023…
#BugBounty #bugbountytips #postman
Vinothkumar Paulravi retweeted
"Defenders think in lists. Attackers think in graphs. As long as this is true, attackers win."
Short 🔗: git.io/fpfZ5
Full 🔗: github.com/JohnLaTwC/Shared/…
Freshworks is now public on HackerOne.
hackerone.com/freshworks
#freshworks #hackerone #bugbounty #hof #halloffame
Vinothkumar Paulravi retweeted
Did you know that @FreshworksInc grew their ARPU by 25% last year; which is the fastest rate achieved by any publicly traded #SaaS company in the world?
Full marks to @mrgirish and his team! More power to them.
Vinothkumar Paulravi retweeted
Freshworks started using @Hacker0x01 today: hackerone.com/freshworks , pays: 50$ min. #hackerone #bugbounty
Vinothkumar Paulravi retweeted
My favorite XSS payloads:
'"><img/src/onerror=prompt()>
java%26Tab%3bscript:ale%26Tab%3brt()
<iframe src=javascript:alert()//
<s<script>cript>alert()</s<script>cript>
#xss #bypass #bugbountytips #bugbounty #hacking #infosec #cybersecuritytips
Vinothkumar Paulravi retweeted
Yay, I was awarded a $4,500 bounty on @Hacker0x01!
Tip:
Target had a /?back= parameter, but payloads like javascript://alert(1) did not work.
Exploited using the following with URL-encoded ASCII tab characters:
%09Jav%09ascript:alert(document.domain)
#bugbountytips #bugbounty
Vinothkumar Paulravi retweeted
If an unsafe logger is used, an attacker can inject code and execute arbitrary commands, even if the page being accessed is a 404 page.
Always test HTTP request headers to make sure the application is handling the headers correctly.
#Security #bugbountytips #Hacking #OOB_RCE
Vinothkumar Paulravi retweeted
I'm a Head of Finance at Google.
I've interviewed 100s of candidates in my career and I know my decision within the first 7 minutes.
Do these 5 things to prepare for the interview and I guarantee you'll impress recruiters and hiring managers at your dream company:
Vinothkumar Paulravi retweeted
Here's 23 free ways to learn about API security testing:
1. Video: Traceable AI, API Hacking 101.
2. Video: Katie Paxton-Fear, API Hacking.
3. Video: Bugcrowd, Bad API, hAPI Hackers.
4. Video: OWASP API Security Top 10 Webinar.
5. Blog: Detectify, How To Hack API's in 2021.
@flipkartsupport I placed an order for a treadmill during the sale. Payment failed from Flipkart. It showed "Pending". So, I placed another order for the treadmill. After sometime, the first order got accepted and money deducted. So, I cancelled the first order.@Flipkart
I cancelled the product immediately. It says "cancelled". Now when I checked, it's in " Shipment ". Both the orders are in shipment status. Now it says I can't cancel. Really disappointed @flipkartsupport @Flipkart Please cancel the order. Payment failed from your end.
Way to go Freshservice <3
#freshservice #databricks
We're thrilled to announce that big-data analytics firm @databricks has expanded its use of #Freshservice to help support the tripling of its IT workforce which serves Databricks' 4000+ employees.
Read how they deliver an enhanced #employeeexperience.➡️ bit.ly/3R7R6OP
Vinothkumar Paulravi retweeted
Quick tips :
How i found 10+ information disclosure in hackerone public program
1/n
1st: collect all ip's from shodan
shodan search Ssl.cert.subject.CN:"target.com*" 200 --fields ip_str | httpx | tee ips.txt
2nd: fuzz all ips using dirsearch