Sabitlenmiş Tweet
P5
2.1K posts
P5 retweetledi
Collecting ADCS data with NetExec🔥
Thanks to the addition of CertiHound, developed and implemented by 0x0Trace, we can now collect ADCS data using the --bloodhound collector of NetExec.
As before, the data is exported as JSON files that can be imported directly into BloodHound.
English
P5 retweetledi
Web-Fuzzing-Box - A curated collection of fuzzing dictionaries & payloads for web security testing. Brute force, directory enumeration, vulnerability exploitation — all in one place.
Passwords, usernames, paths, API endpoints, XSS/SQLi payloads, file upload bypasses, 403 bypasses, and more.
Many dictionaries are battle-tested — extracted from real-world engagements via the CaA project (Collector and Analyzer), not randomly generated wordlists.
Ready for Burp Intruder, ffuf, dirsearch, or any tool you throw at it.
Free. Open source.
github.com/gh0stkey/Web-F…
#bugbounty #infosec #pentesting #fuzzing #wordlists
English
P5 retweetledi
Nice
Kimi.ai@Kimi_Moonshot
Introducing 𝑨𝒕𝒕𝒆𝒏𝒕𝒊𝒐𝒏 𝑹𝒆𝒔𝒊𝒅𝒖𝒂𝒍𝒔: Rethinking depth-wise aggregation. Residual connections have long relied on fixed, uniform accumulation. Inspired by the duality of time and depth, we introduce Attention Residuals, replacing standard depth-wise recurrence with learned, input-dependent attention over preceding layers. 🔹 Enables networks to selectively retrieve past representations, naturally mitigating dilution and hidden-state growth. 🔹 Introduces Block AttnRes, partitioning layers into compressed blocks to make cross-layer attention practical at scale. 🔹 Serves as an efficient drop-in replacement, demonstrating a 1.25x compute advantage with negligible (<2%) inference latency overhead. 🔹 Validated on the Kimi Linear architecture (48B total, 3B activated parameters), delivering consistent downstream performance gains. 🔗Full report: github.com/MoonshotAI/Att…
English
P5 retweetledi
Keep your eyes peeled on these endpoints. 👀
/login ➡️ authentication bugs
/reset-password ➡️ATO
/upload ➡️ RCE
/api/v1/user/1001 ➡️ BOLA
/search?q=query ➡️ Injection bugs
/view?file= ➡️ SSRF
/admin ➡️ internal access
Which endpoint have you found the most bugs on? 👇
English
Yay, I was awarded a $200 bounty from Amazon VRP on @Hacker0x01! hackerone.com/xlsize0bruh #TogetherWeHitHarder
English
@khushiirl I mostly ignore this type of tweets coming from regards people like you living in my country but Instead of shit posting here have you tried helping her? How she gonna survive in the industry 🤡 I bet she will do better than you and follow for what? Lmao what Is wrong with you.
English
P5 retweetledi
I've got a slightly sketchy technique for switching from the research mindset to CFP-writing for conferences. To get into the zone, I start by writing the most overhyped flowery overcooked prose imaginable. Then gradually edit it back into something less embarrassing.
English
P5 retweetledi
It's easy to feel imposter syndrome as a hacker when you don't find bugs, but remember this.
You're looking for something that shouldn't even exist in the first place, and might not exist! It's a tough game!
English
Seeing someone post a $50k bounty while you’re in a 3-week dry spell is the fastest way to burn out. Bug Bounty Twitter is a highlight reel, not reality. Don't let someone else’s "lucky" timeline make you trash a system that actually works.
#bugbounty #mentalhealth
English