Tweetovi
- Tweetovi, trenutna stranica.
- Tweetovi i odgovori
- Medijski sadržaj
Blokirali ste korisnika/cu @ashu_barot
Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @ashu_barot
-
Prikvačeni tweet
When a company doesn't have a responsible disclosure Email/page....I have to choose an unexpected communication channel... :/ Please use security.txt
@securitytxt#BugHunting#ResponsibleDisclosurepic.twitter.com/0hCujSNfLz
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je TweetHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Ashutosh Barot proslijedio/la je Tweet
Quickly get the ASN of an IP address, along with the associated company name and location: curl http://ipinfo.io/ <ip> This is a great way to confirm ownership of an IP/domain. It also is a great way to services that might be in use (AWS/Azure/Cloudfront/Akamai, etc.)pic.twitter.com/0Ng0qEQIbt
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
Unrestricted file upload https://link.medium.com/sILCWr8xB3 https://link.medium.com/V8SdaJ8xB3 https://noobe.io/articles/2019-09/exploiting-cookie-based-xss-by-finding-rce … https://link.medium.com/6qTQZwayB3 https://anotherhackerblog.com/exploiting-file-uploads-pt-2 … https://link.medium.com/1wFiIWayB3 https://link.medium.com/5rv5CbbyB3 https://mustafakemalcan.com/asus-rce-vulnerability-on-rma-asus-europe-eu … https://link.medium.com/jFGhtvbyB3 https://link.medium.com/fRfag0byB3
#bougbountyHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
This blind XXE technique for out-of-band exfiltration was one of the core use cases we had in mind when developing Burp Collaborator:https://portswigger.net/web-security/xxe/blind/lab-xxe-with-out-of-band-exfiltration …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
Cross-Site Websocket Hijacking bug in Facebook that leads to account takeover By
@Samm0uda https://ysamm.com/?p=363 Bounty: $12500#bugbountyHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
I wrote a little bit about a pentest that I did, and I got domain admin https://incogbyte.github.io/domain-admin/
#BugBounty#PenTestHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
Releasing an automated pipeline for bugbounty target reconnaissance today. Along with it are 6 blog posts detailing the build process / design. The github repo is tagged to correspond to blog posts. Enjoy!
#BugBounty repo: https://github.com/epi052/recon-pipeline …https://epi052.gitlab.io/notes-to-self/blog/2019-09-01-how-to-build-an-automated-recon-pipeline-with-python-and-luigi/ …Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
New blog post: A Less Known Attack Vector, Second Order IDOR Attackshttps://link.medium.com/okQ4s0yss3
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Ashutosh Barot proslijedio/la je Tweet
Authentication bypass https://link.medium.com/6POLXbk7j3 https://link.medium.com/fjRpVHTkg3 https://link.medium.com/FBilq4m7j3 https://link.medium.com/5Etuo0n7j3 https://link.medium.com/Zq5cjGn7j3 https://xpoc.pro/oauth-authentication-bypass-on-airbnb-acquisition-using-weird-1-char-open-redirect … https://link.medium.com/TC85brt7j3 https://www.randorisec.fr/client-side-validation … https://link.medium.com/IYzPwWK7j3 https://link.medium.com/SZDewmL7j3
#bugbountyHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
Very interesting video about goals, motivation and learning
#bugbounty#security#pentesterlandhttps://www.youtube.com/watch?v=5BTvTE3gEq8 …Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
This also works for other embedded services (vimeo, dailymotion, twitter, facebook...)! Thanks for the
#BugBountyTip, @̶L̶i̶v̶e̶O̶v̶e̶r̶f̶l̶o̶w̶@EdOverflow!pic.twitter.com/bAE0snqYcZ
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
reCAPTCHA Exploits https://www.hackerfactor.com/blog/index.php?/archives/862-reCAPTCHA-Exploits.html … 2 FA Bypass via CSRF Attack https://link.medium.com/FgTdiAXiF2 Bypassing Captcha ! https://link.medium.com/IXSKecVMP2 Weird and Simple 2FA Bypass without any Test https://link.medium.com/R7K9ugmQS2
#bugbounty,#bugbountytipsHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
Writeup on how I made $40,000 breaking the new Chromium Edge using essentially two XSS flaws.https://leucosite.com/Edge-Chromium-EoP-RCE/ …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
2019 is (almost) a wrap.
Time to look back!
We've selected our top
write-ups from the past year.
What were your favorite blogposts?
https://go.intigriti.com/top-10-2019 Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
New writeup, one of my favorite bugs
-
Filling in the Blanks: Exploiting Null Byte Buffer Overflow for a $40,000 Bounty
https://samcurry.net/filling-in-the-blanks-exploiting-null-byte-buffer-overflow-for-a-40000-bounty/ …
Featuring...
@d0nutptr@0xacb@Regala_@JLLiS@Yassineaboukir@plmaltaispic.twitter.com/RomLgdCcSC
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
i have finished building my github repository which talk about
#OSINT.a very important repository for ethical hackers and and#BugBounty hunters and of course#OSINT lovers the repository for now contain 100 tips and it will get daily updates https://github.com/blaCCkHatHacEEkr/OSINT_TIPS …#bugbountytipHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
- Execute bash commands without spaces with two methods: 1- {ping,-c,1,127.0.0.1} 2- ping${IFS}-c${IFS}1${IFS}127.0.0.1 - terminal will translate ${IFS} into a space Thanks
@ippsecHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
Bugcrowd’s Domain & Subdomain Takeover! https://bugbountypoc.com/bugcrowds-domain-takeover/ … IDOR via Websockets https://footstep.ninja/posts/idor-via-websockets/ … The AccountTakeOver Killing Chain https://medium.com/@xhzeem/the-accounttakeover-killing-chain-6ba23f4c9d4 … Exploiting padding oracles with fixed IVs https://blog.teddykatz.com/2019/11/23/json-padding-oracles.html …
#bugbounty,#bugbountytipsHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Ashutosh Barot proslijedio/la je Tweet
As promised, here is the improved version of Subfinder v2.0, stay tuned for more

https://github.com/projectdiscovery/subfinder …Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.


) – however the path is improperly encoded (/vpn/js/%%2e./.%%2e/%%76pns/cfg/smb.conf) and will fail to check if the vulnerability exists.