Shield India

#ittakesacrowd #bugbountytips #bugcrowd @Ninad_Mathpati

#cybersecurity #infosec #ctf @shreyasrx @OffensiveHunter @tirtha_mandal @d3tonator @fatrat_v2 @u1tran00b @snake_hackers

Recently I have found an RCE via file upload thorough path traversal in tomcat server. Found that tomcat automatically deploys war when uploaded in webapps folder. blog.defmax.io/rce-via-war-up…

#infosec #bugbounty

Try It Yourself leaked DB search. github.com/davidtavarez/p…

Mobile App Pentesting collection:- CC @0Init github.com/kyawthiha7/Mob… github.com/tsug0d/Android… github.com/997509/pentest… github.com/OWASP/owasp-ms… github.com/SnollyG0st3r/a… github.com/SnollyG0st3r/a… github.com/jdonsec/AllThi…

Do check out the API Pentesting course, its really worth it 🔥🔥😄😄

Hard work always pays off! Many Congratulations to our very own @Ninad_Mathpati for joining in the @cobalt_io core. Best Wishes :)

@tirtha_mandal @d3tonator @_smile_hacker_ @shreyasrx @u1tran00b @snake_hackers @fatrat_v2 😄😄

I've just added an API routes wordlist containing 953011 possible API paths from the HTTPArchive dataset. Download it at wordlists.assetnote.io - all paths which start with "/api/", "/v1/", "/v2", or "/rest/". Good luck hacking! Thanks for requesting this, hope it helps.

#bugbounty #bugbountytips #appsec #infosec #pentest

One of our team member's birthday today @tirtha_mandal help us celebrating his bday.😁😁😁 @d3tonator @Ninad_Mathpati @u1tran00b @shreyasrx @_smile_hacker_ @gauravnarwani97 @snake_hackers

[Shortcut to #BugBounty] [Become #Haxor fast] Watch: 1. @stokfredrik & @hakluke to get motivated and START 2. @theXSSrat & @impratikdabhi to learn what stuff is 3. @farah_hawa01 to go a bit deep into those 4. @InsiderPhD to deep dive even more! - Now that you know stuff:

Learn how I've streamlined my bug bounty reporting in this video, using a recent release from my toolkit, BBR. Video: youtube.com/watch?v=uUMtzN… Tool: github.com/codingo/bbr #bugbountytips

@d3tonator @SynackRedTeam

Leveled up to 0x02! via @SynackRedTeam

Sat down with @iamnoooob and worked on the recent Mobileiron MDM RCE by @orange_8361 and what a great find, Here's an RCE PoC using JNDI Injection via local classloading reference triggered using Hessian deserialization as stated in the blog. github.com/iamnoooob/CVE-…

Incredible mindmap about hacking iOS applications by @hd_421 Pay attention, we have prepared two versions: 1. Full Security Assessments 2. Shorter BugBounty version XMind source: github.com/hackerscrolls/… #CyberSecurity #BugBountyTip #BugBounty #iOS

Simple but impactful tip for content discovery. Always use the subdomain as a path. Often it is the root of the application #bugbountytips #bugbountytip : kvothe.target.com try: kvothe.target.com/kvothe/ and then do content discovery kvothe.target.com/kvothe/FUZZHERE

Team Shield India will be speaking today at Fergusson College about Bug Bounty in Cyber Security. #bugbounty #infosec #Cybersecurity @u1tran00b @shreyasrx @fatrat_v2 @_smile_hacker_