interested in finding bugs.
Joined January 2020
- Tweets356
- Following430
- Followers86
- Likes255
Wreckworm retweeted
I'm very happy to finally share the second part of my DOMPurify security research 🔥
This article mostly focuses on DOMPurify misconfigurations, especially hooks, that downgrade the sanitizer's protection (even in the latest version)!
Link 👇
mizu.re/post/exploring-the-d…
1/2
Wreckworm retweeted
If you want to find domains associated to an organization, you can explore DuckDuckGo's tracker-radar.
It's a publicly accesible dataset that stores web tracking information, including domains operated by an organization.
github.com/duckduckgo/tracke…
Wreckworm retweeted
So it seems like everybody hates hacking GraphQL like me, so lets post some resources so we can all get better at it!
Wreckworm retweeted
I interviewed over 70 backend engineers in the last 2 years.
I created a Notion based "Learn Backend Development Pack V3" that contains a learning path to become a backend dev based on ONLY FREE resources.
Retweet and reply with "free" and I'll DM it to you.
(need to follow)
Wreckworm retweeted
$15k+ Worth of IDORs in the past couple of months; it takes a lot of manual verification, but use this regex in BurpSuite in order to filter out potential parameters:
(?i)\b\w*id\b(?!\w)\s*=\s*("[^"]*"|'[^']*'|[^&\s}]*)
#bugbountytips #CyberSecurity
Wreckworm retweeted
OSINT TIP #204🕸️
Web-Check: All-in-one website OSINT tool for analysing any website
The dashboard will show - IP info, SSL chain, DNS records, cookies, headers, domain info, page map, server location, open ports, traceroute
web-check.as93.net/
@Lissy_Sykes👏
#OSINT #WEBINT
Wreckworm retweeted
Learn for free
HTML — w3schools.com
CSS — CSS-tricks.com
JavaScript — LearnJavaScript.online
Git, GitHub — LearnGitBranching.js.org
React — React-tutorial.app
API — RapidAPI.com/comics
SQL — SQLbolt.com
Blockchain — cryptozombies.io
Wreckworm retweeted
all my tips and other bug hunters tips here
#bugbountytip #bugbountytips
doepichack.com/category/tips…
Wreckworm retweeted
Anyone can follow this, if not finding bugs.
Next 3 months plan for you #bugbounty
Thread
1/n
Wreckworm retweeted
Some easy bugbounty tips for beginners
#bugbountytips #bugbounty
Wreckworm retweeted
Labs for Web application Pentesting Practice
SQLi-github.com/Audi-1/sqli-labs
Oauth 2.0-github.com/koenbuyens/Vulner…
GraphQL-github.com/david3107/graphql…
JWT Authentication-github.com/Sjord/jwtdemo
SAML Authentication-github.com/yogisec/Vulnerabl…
XSS-portswigger.net/web-security…
#bugbounty
Wreckworm retweeted
So yes my phone was continuously ringing from today evening the voice of students was so painful & the anxiety level among them were so high that i have decided to take up the issue @nsui from day one is committed to students fraternity & we will fight for students #enoughVIT
#enoughVIT
People are in stress right now , with their loved ones being the victims of Corona , how does VIT expect students to learn in this and write an exam that's career changing . Please cancel it .Cancel FAT
Wreckworm retweeted
gau hacked-site.com | waybackurls | grep ".xlsx"
Using this simple one liner I discovered an excel file contains tons of PII leaked
Thanks to @TomNomNom and @hacker_
#bugbounty #bugbountytips
#Rugpull #SAFEUNIVERSE #SafeUniverse #SAFU $SAFU
This is a Scam . Do not enter your private keys . There are a lot of ways to shift tokens but they chose the way to get your seed phrases . Don't think they are going to give you the airdrop cash that is worth almost 500$ .