Siddhesh Parab

Just Updated my Subdomain Enumeration Guide with new techniques, fixes, etc. Have a look 😊 Boost your Recon game !!🚀🚀 sidxparab.gitbook.io/subdomain-enum… #bugbounty #infosec

Checkout my CRTO Review which i recently published on my blog. an0nud4y.com/writeups/crto-… #crto #redteam #infosec #blog

I've finished my first Medium blog! Decided to start a series of blogs looking at the #infrastructure of hosting providers. First up: #ChangWayTechLtd 🧐 Going in cold or from a trigger such as an incident and seeing what else I can find: @joshuapenny88/hostinghunter-series-chang-way-technologies-co-limited-a9ba4fce0f65" target="_blank" rel="nofollow noopener">medium.com/@joshuapenny88… Findings 👇

Get ready for reconFTW version 3.0! I'm converting and rewriting all functions into self-contained scripts that can be accessed as separate programs directly from the system PATH. Coming soon! #reconFTW #recon #bugbouny #hacking #pentest

To celebrate 10.000 followers on #Twitter and as a sign of appreciation to all of you, I partnered with @GreyNoiseIO. Together, we are giving away 3x 3 months access to #Greynoise #VIP. Additionally, all 3 winners will get a free Greynoise T-Shirt ! Rules below: 1/2

Have you ever wondered how one can overwrite the code runtime to bypass certain restrictions? I’ve published a blog on writing a Frida script to do the same on Android. If you are enthusiastic about Android Security/Pentesting , you can check this out. bit.ly/3Dme00i

Just posted a massive blog on my experience job hunting in these strange times that ended in me getting hired on Google's red team. It's basically a long list of "lessons learned" from my 5ish month long job search. Enjoy! grahamhelton.com/blog/jobs/

Free Malware Analysis Course, covers malware concepts, malware analysis, and black-box reverse engineering techniques class.malware.re #cybersecurity #malware

My two reports are disclosed publicly in GoogleVRP :) You can check them here bughunters.google.com/report/reports #bugbountytips #BugBounty #Google #googlevrp #ssrf #bugbountytip

Monitoring the internet for new .zip domains github.com/trickest/zip

Here's my video showcasing email and phone phishing scenarios with the new .zip domains. Making .zip domains look like real .zip download files and using file explorer to open .zip urls. youtu.be/PMcVYHQIoF8

It has been 11 days since Google made its 8 new TLDs available on May 3, 2023. I decided to fetch several domains that have spawned up with the .zip and .mov TLD ever since and do a quick analysis. A thread 🧵

🚨SPOILER ALERT🚨 Evilginx 3.0 changelog sneak peek for the upcoming May 10th release. 🪝🐟

Web UI you said? Nothing more to say #micdrop #reconftw new release, highlights over here ⬇️ Just a big shoutout to the devs of new additions like @n0kovo @hakluke @lc @r0oth3x49 and the web UI creator master @lur1el1 #bugbounty #hacking #recon

Check out my Talk on "Hacking Cloud For Fun and Profit" at IWCON22 (2nd Edition) by @InfoSecComm Demonstration of using @pdiscoveryio  CloudList Tool youtube.com/watch?v=7hn1Qs… #cloudlist #bugbounty #infosec #iwcon

Ever wondered what the fascinating world of #Marvel characters can teach us about #cybersecurity? PDF - linkedin.com/feed/update/ur… #Superheroes #Infosec #CyberDefense #DigitalForensics #RiskManagement #informationsecurity #security #bugbounty #appsec #inspiration #share #cyber

reconFTW has recently reached 4K stars on @github 😱 Thanks for the support, soon there will be interesting news in the main branch, stay tuned! github.com/six2dez/reconf… #reconftw #recon #BugBounty #hacking

🔥 Puredns v2.1.0 has been released! This update comes with quality of life features: ☑ Bruteforce many domains at once ☑ Specify bruteforce location in domain ☑ Flag to use trusted resolvers only ☑ ...more! 🚨 Please RT and like for reach! ♥🤗 github.com/d3mondev/pured…

So apparently I don't like to sleep and I did this: - Diff between my 4 most used tools for perms/alts - Includes output total lines, number of resolved and the % of resolved (~accuracy?) - The uniqueness section is the number of unique resolved results compared between them

1/ 🚀 Happy to release the Burp VPS Proxy extension! Inspired by @honoki, it creates cloud proxies in Burp Suite to dodge WAF IP bans⚡️ It supports AWS, DigitalOcean & Linode initially. 🔥 Please help spread the word if you'd like! 🫶🤗 Check it out 👇🏻 github.com/d3mondev/burp-…

I'm pleased to publish a blog post about the "Introduction to Beacon Object Files" in detail, targeting CobaltStrike. 👉Blog: blog.shashwatshah.me/2023/03/26/Bof… #cybersecurity #redteam #infosec #cobaltstrike