interested in finding bugs.
Joined January 2020
- Tweets356
- Following430
- Followers86
- Likes255
Wreckworm retweeted
I'm very happy to finally share the second part of my DOMPurify security research 🔥
This article mostly focuses on DOMPurify misconfigurations, especially hooks, that downgrade the sanitizer's protection (even in the latest version)!
Link 👇
mizu.re/post/exploring-the-d…
1/2
Wreckworm retweeted
If you want to find domains associated to an organization, you can explore DuckDuckGo's tracker-radar.
It's a publicly accesible dataset that stores web tracking information, including domains operated by an organization.
github.com/duckduckgo/tracke…
Wreckworm retweeted
So it seems like everybody hates hacking GraphQL like me, so lets post some resources so we can all get better at it!
Wreckworm retweeted
I interviewed over 70 backend engineers in the last 2 years.
I created a Notion based "Learn Backend Development Pack V3" that contains a learning path to become a backend dev based on ONLY FREE resources.
Retweet and reply with "free" and I'll DM it to you.
(need to follow)
Wreckworm retweeted
$15k+ Worth of IDORs in the past couple of months; it takes a lot of manual verification, but use this regex in BurpSuite in order to filter out potential parameters:
(?i)\b\w*id\b(?!\w)\s*=\s*("[^"]*"|'[^']*'|[^&\s}]*)
#bugbountytips #CyberSecurity
Wreckworm retweeted
OSINT TIP #204🕸️
Web-Check: All-in-one website OSINT tool for analysing any website
The dashboard will show - IP info, SSL chain, DNS records, cookies, headers, domain info, page map, server location, open ports, traceroute
web-check.as93.net/
@Lissy_Sykes👏
#OSINT #WEBINT
Wreckworm retweeted
Learn for free
HTML — w3schools.com
CSS — CSS-tricks.com
JavaScript — LearnJavaScript.online
Git, GitHub — LearnGitBranching.js.org
React — React-tutorial.app
API — RapidAPI.com/comics
SQL — SQLbolt.com
Blockchain — cryptozombies.io
Wreckworm retweeted
all my tips and other bug hunters tips here
#bugbountytip #bugbountytips
doepichack.com/category/tips…
Wreckworm retweeted
Anyone can follow this, if not finding bugs.
Next 3 months plan for you #bugbounty
Thread
1/n
Wreckworm retweeted
Some easy bugbounty tips for beginners
#bugbountytips #bugbounty
Wreckworm retweeted
Labs for Web application Pentesting Practice
SQLi-github.com/Audi-1/sqli-labs
Oauth 2.0-github.com/koenbuyens/Vulner…
GraphQL-github.com/david3107/graphql…
JWT Authentication-github.com/Sjord/jwtdemo
SAML Authentication-github.com/yogisec/Vulnerabl…
XSS-portswigger.net/web-security…
#bugbounty
Wreckworm retweeted
So yes my phone was continuously ringing from today evening the voice of students was so painful & the anxiety level among them were so high that i have decided to take up the issue @nsui from day one is committed to students fraternity & we will fight for students #enoughVIT
Wreckworm retweeted
gau hacked-site.com | waybackurls | grep ".xlsx"
Using this simple one liner I discovered an excel file contains tons of PII leaked
Thanks to @TomNomNom and @hacker_
#bugbounty #bugbountytips
Wreckworm retweeted
New Giveaway: Blocsport
Total Reward: $200 in BUSD
Rate: ⭐️⭐️⭐️⭐️
🔸Top 5 Most referrals will receive 20 BUSD each
🔸10 Random winners will receive 10 BUSD each
Giveaway Link: t.me/airdropinspector/2742
#Giveaway #Giveaways #Airdrop #Airdrops #GiveawaysInspector #Bittcoin #Crypto
Wreckworm retweeted
🔍 New #Airdrop: Liquifi
💲 Total reward: Up to 12 #LQF [~$6] + 4 LQF [~$2] per referral
🔴 Start the airdrop bot: t.me/LiquifiAirdropBot
🔘 Do the tasks on the airdrop bot and submit your data
🔘 For details: t.me/AirdropDetective/750
#Airdrops #crypto #bounty #AirdropDetective
Wreckworm retweeted
UAVCOIN Token Info
Total Supply : 10,000,000 UAV
Smart Contract : bscscan.com/token/0xdcd7c0be…
