Diogo Coelho

Tools that can level up your recon. Credit: @_cyberkhalid #CyberSecurity #cybersecuritytips #bugbountytip #BugBounty #penetrationtesting #Secure #infosec #CTF #PenTest #Hackingtime #Hacked #Pentesting #CyberSec #cyberawarness #informationsecurity #ethicalhacking

If you want to understand how the internet works You need to study the 7 Layers of the OSI Model. #infosec #cybersecurity #pentesting #informationsecurity #hacking #redteam #technology #DataSecurity #CyberSec #Hackers #tools #Linux #websecurity #Network #NetworkSecurity

Python Cheat Sheet Credit: hackuniversity.io/image/18893381… #infosec #cybersecurity #pentesting #oscp #informationsecurity #hacking #cissp #technology #DataSecurity #CyberSec #Hackers #tools #bugbountytips #Linux #websecurity #Network #NetworkSecurity #CyberSecurityAwareness

@theXSSrat Beach is boring. Hacking is more fun and you can gain money is you are good at it. At the beach you will only spend your time and money. However, I can’t refuse some time with my buddies in the beach.

Why hack? Why not just go sit at the beach and enjoy the sun?

@hakluke Without a thought. You can always get more money. The only time you can buy is from other people, not yours. Then, Make sure you're using your time correctly.

time > money

@hakluke @Jhaddix is my favorite one. The content he post about hacker methodology is just insanely good. If you are starting in bug bounty a good start would be is YouTube channel.

Who is your favourite hacker content creator?

@dhakal_ananda I couldn't agree more. I also like to practice: In environments that offer a vulnerable API. and Read reports of these types of vulnerabilities. Then, I go for the bug bounty programs.

Wanna get better at API hacking and some basics source code review right away? Go build a RESTful API using node js. The best way to learn to break a thing is to build it first, for real. 1/2 section.io/engineering-ed… youtu.be/vjf774RKrLc #bugbounty #codereview

@dhakal_ananda For me, I treat bug bounty programs like work. I set the number of hours I want to dedicate a week to a program and stick to it. If there's something there, I know sooner or later I will find it.

A whole day of bug hunting, lots of interesting leads, lots of rabbit holes, but no bugs! I was about to tweet the above. But before that, I decided to give it one more try and actually found a bug. Moral of the story: Maybe give it one more try before giving up? #bugbounty

Personally, I prefer the red side. I think that's where the fun is. However, The other sides are just as important as the red side. If you want to secure your business, You need to make sure that everything on this wheel has been implemented.

Common API Security Issues #CyberSecurity #cybersecuritytips #bugbountytip #BugBounty #penetrationtesting #Secure #infosec #CTF #PenTest #Hackingtime #Hacked #Pentesting #CyberSec #cyberawarness #informationsecurity #ethicalhacking

In my opinion, Recon is the skill every Hacker needs to master. Proper recon can lead you to a site that has never been discovered or is less secure. That's where you'll find the best vulnerabilities.

@hakluke In most cases, The best hackers don't own their own company. They spend all their time learning and breaking new things. I understand your point, But I think all industries work this way. The most qualified will always work for someone less qualified.

Most cybersecurity orgs are terrible at marketing. Not only is this bad for the business, it’s also holding back our whole industry.

@hakluke I learned to code by myself. However, The hard part is mastering this skill. To master any skill, You will need to put in a lot of effort and hours. About money, If you know how to code correctly, there are many companies that will hire you.

Learning to code is not as difficult as people think.

Types of VPN Protocols #CyberSecurity #cybersecuritytips #bugbountytip #BugBounty #penetrationtesting #Secure #infosec #CTF #PenTest #Hackingtime #Hacked #Pentesting #CyberSec #cyberawarness #informationsecurity #ethicalhacking

How to secure your website against SQL Injection? -> sanitize user input; To sanitize user input you can use: -> an allow list; -> stripping input; If you want to learn more about this: security.berkeley.edu/education-awar… #cybersecuritytips #infosec #CyberSecurityAwareness

@madzadev My first (and current) text editor is Sublimetext. In my opinion, The simpler the better.

What was your first code editor? 👨‍💻👩‍💻

@tabaahi_ Recently, I start using Feroxbuster. It was recommended by @Jhaddix in this video: youtube.com/watch?v=HmDY7w… It is a very fast tool and has some useful features.

any other tools you use to find subdomains except Amass, subfinder, assetfinder, findomain?

@tabaahi_ That's right, In the past, I found several difficult moments to go through. If you don't have a strong mindset and the ability to stay laser focused on your goal, The skill you have will be useless. I found that, Persistence is always the key.

Mindset is 80% Skills is 20%

📢📢 Giveaway alert‼️ 🎉 Retweet Like and Follow get a chance to 🎊 win the 🎁 @offsectraining PEN-200 course + 90 days of lab access + one OSCP exam attempt. The #Giveaway will only be up until the 📅15th of AUGUST so hurry up‼️ #cybersecurity #infosec #THREATCON2022

"Remote Code Execution via Prototype Pollution in Blitz.js" by Paul Gerste #CyberSecurity #cybersecuritytips #bugbountytip #BugBounty #penetrationtesting #Secure #infosec #CTF #PenTest #Hackingtime #Hacked #Pentesting #CyberSec #ethicalhacking blog.sonarsource.com/blitzjs-protot…

@joserosado Couldn’t agree more. In the past, I have waited until the perfect moment to start. Fortunately, I give up that believe. Otherwise, I would not have started yet.

At first, you'll suck. After a while, you'll get good. A couple of moments later, you'll get where you want to be. Forget about perfection when you’re starting out something new. Focus on repetition and consistency.