/*_*/

Giveaway time!! I'll be giving away 1 @AppSecEngineer Annual Subscription to one lucky winner! All you'll need to do is: 1. Follow me 2. Follow @AppSecEngineer 3. RT/Share this message

@thebinarybot want

The OSCP machines list notion template up for grabs! To get your FREE copy: 1️⃣ Follow @thebinarybot and subscribe to my free NL at blog.thebotsite.me 2️⃣ Comment "want" 3️⃣ RT this tweet #bugbounty #oscp #hacking #cybersecurity #notiontemplate #infosec

Enjoyed reading this again quite unique SSRF scenario web.archive.org/web/2019031912…

Prototype Pollution!!!!!, a less talked about bug with a greater impact. Read my new blog "Prototype Pollution 101". payatu.com/blog/akshat.si…

You ever compromise an AWS account and want to run commands on the EC2 instances inside but forget the syntax? Yeah me too. Don't worry though, I've got you covered! Latest article on Hacking the Cloud is a cheat sheet on how to do this and Session Manager hackingthe.cloud/aws/post_explo…

1/10 - I've been doing offensive security source code review for a long time now, and along the way I've learnt a lot of lessons that can make you more effective. Some of them include:

1️⃣ Search for secret API keys publicly exposed on websites : ex : Searching for slack API token on all the scanned websites http.html:"xoxb-"

@AnubhavSingh_ - My OAuth Notes => responsible-otter-082.notion.site/Basics-102489b… responsible-otter-082.notion.site/Grant-Permissi… responsible-otter-082.notion.site/Methodologies-… responsible-otter-082.notion.site/Writeups-ff4de… responsible-otter-082.notion.site/Important-KeyP… responsible-otter-082.notion.site/Cheat-Sheets-8… responsible-otter-082.notion.site/Common-Vulnera… responsible-otter-082.notion.site/Attacks-on-OAu…

6 Burp Extensions to Check for Access Control & Privilege Escalation Issues. 🧵

4 Subdomain Enumeration Tools you must have in your Arsenal 💻 🧵

SSRFire - An Automated SSRF Finder. Just Give The Domain Name And Your Server And Chill! Also Has Options To Find XSS And Open Redirects ift.tt/Oka25JU #security #opensource #cybersecurity #malware #cyber #pentesting #redteam #malwarehunting #infosec #hacking #infosec…

Find good RCE with this tool github.com/plenumlab/rce-… Ps: it code execution in reverse

Want to learn Cloud Security? Here are some of awesome Cloud Security related resources! #aws-1" target="_blank" rel="nofollow noopener">github.com/4ndersonLin/aw…

🚀 github.com/qazbnm456/awes…

Open Source Intelligence (OSINT): Finding Email Passwords in Dumps with h8mail #osint #h8mail #infosec #cybersecurity #cyberwarrior hackers-arise.com/post/osint-fin…

📒 Good collection of solidity smart contract attack vectors and anti-patterns, along with mitigations and examples of real world vulnerabilities 🔗 github.com/sigp/solidity-… #infosec #cybersecurity #web3 #ETH

A thread all about Common Vulnerabilities in WordPress Websites. Retweet this and let others to know about this (•‿•)

Kubernetes pentest:) Credit doesn't go to me, I have seen this somewhere on internet. It was in my notes so shared:) #pentesting #Kubernetes

Just Updated my Subdomain Enumeration Guide with new techniques, fixes, etc. Have a look 😊 Boost your Recon game !!🚀🚀 sidxparab.gitbook.io/subdomain-enum… #bugbounty #infosec

To find infosec job roles (@Jhaddix) - Reddit infosec hiring thread - Shmoocon hiring list - Slack/discord infosec hiring channels - Conferences Sub channels - Twitter hashtags #infosec #hiring #jobs Correct me.. Comment your methods for finding #infosec jobs opening.