😎😎bug bounty hunter/security researcher /Devsecops/learn something/ Try To Break something 🙃😎
Pakistan
Joined December 2018
- Tweets 1,344
- Following 3,063
- Followers 654
- Likes 3,284
Ashhad Ali retweeted
This week's roadmap suggestion: "DevSecOps Roadmap"❗️☺️ Don't forget to bookmark this roadmap of great resources.🤞🏻🌸
Credit;
✨ github.com/TaptuIT/awesome-d…
✨ github.com/sottlmarek/DevSec…
✨ github.com/We5ter/Awesome-De…
#CyberSecurity #infosec #devsecops #roadmap
25$ 😀😀😀😀 new tip/tricks to earn money in bug bounty. #BugBounty #bugbountytips #cybersecuritytips @Rohan_Lew thank you for teaching us this technique.
Sorry for the delayed😅
Now you can access all the videos by filling this google form :forms.gle/qNq2quWVWBQ1Vp5JA
You will get a proper guide for finding privilege escalation and hopefully able to report privilege this month $$$💰😉
#bugbounty #cybersecurity #bugbountytips
Ashhad Ali retweeted
#OSINT / Recon:
List of tools for screen-shoting in case if you have a large set of (sub)domains
EyeWitness github.com/ChrisTruncer/EyeW…
webscreenshot github.com/maaaaz/webscreens…
SiteShoter nirsoft.net/utils/web_site_s…
LazyShot github.com/mdhama/lazyshot
Aquatone github.com/michenriksen/aqua…
Ashhad Ali retweeted
🔎🔒Discover Web Vulnerabilities with Burp_Bug_Finder Extension In Burp🐛🌐
Burp_Bug_Finder is a powerful custom Burp Suite plugin written in Python.This tool simplifies the process of discovering web vulnerabilities, with a focus on XSS and error-based SQLi.
Ashhad Ali retweeted
Use SQLI google dorks list to find hidden parameters
👇🔥
site:*.com inurl:”main.php?id=
site:*.com inurl:zoom.php?id=site:.il
site:*.com inurl:”details.php?id=
site:*.com inurl:”?came=
site:*.com inurl:”index.php?page=
Ashhad Ali retweeted
If you like this type of content:
RT the first tweet
Follow me for more informative like this @eyishazyer
Ashhad Ali retweeted
For everyone here asking about possible attack vectors:
Think like the developer behind the app - what data might be stored / used in a SQL query? This can also be applied to other vulns, e.g. auth bypass. Source picture: "Testing for bypassing authorization schema"
Ashhad Ali retweeted
Its a perfect example for use Burp Bounty extension for @Burp_Suite :
piped.video/watch?v=ymF0fL4R…
Ashhad Ali retweeted
ChatGPT is used by only 2% of people who have access to the internet.
During this time some people use the right prompts and save a lot of time.
Copy-paste these advanced ChatGPT prompts to get on top of the game:
Ashhad Ali retweeted
SubGPT is available for free now :)
Good luck with your recon✨
github.com/s0md3v/SubGPT
Ashhad Ali retweeted
That's a wrap!
If you enjoyed this thread:
1. Follow me @hasantoxr for more of these
2. If you enjoyed this thread, don't forget to like, comment, and retweet the first tweet.
Ashhad Ali retweeted
This extension is mandatory for every bug hunter, pentester .. , it works in the background and scans every JS file for every website you visit and alert you if there are any found credentials-- checkout more info at their website github.com/trufflesecurity/t… ...
Ashhad Ali retweeted
Full list of dorks: github.com/TakSec/google-dor…
Ashhad Ali retweeted
💉SQLMap is a powerful tool that helps you find SQL injection vulnerabilities but do you know how to use them?
Worry not as our medium writer Frost got you covered!
Read "How to Use SQLMap to Find SQL Injection Vulnerabilities" here: infosecwriteups.com/how-to-u…
#bugbounty #sqli
Ashhad Ali retweeted
How to find SQL injection on the Registration page?
Try SQL Injection in Email Address (username)
#bugbountytips #bugbounty #bugbountytips #sqli
Ashhad Ali retweeted
Integration of Open AI into a leading penetration testing tool...
Be wary:
Sensitive info visible to service provider (vulns, credentials, etc.).
Queries stored online may be hacked or leaked.
Review terms of use & privacy policy.
github.com/hisxo/ReconAIzer
Ashhad Ali retweeted
Please get united and boycott fruits, you will notice how prices will go down within a week....
#بائیکاٹ_فروٹ
Ashhad Ali retweeted
گزشتہ عرصوں میں فروٹ بائیکاٹ مہم چلانے والے اس سال کہاں چلے گئے ہیں ؟؟
#بائیکاٹ_فروٹ