Tweet

Maybe Scrolly?

Abhishek Meena

Follow @Aacle_

Dec 12 • 9 tweets • 9 min read

Bug Bounty automation script v2

#bugbounty #bugbountytip #infosec

See 🧵: 👇

Find JavaScript Files

—————————
I've opened My Bug Bounty tips Group => Join Link : t.me/bugbountyresou…
—————————

#bugbounty #Infosec #CyberSec

Get Subdomains from BufferOver. run

—————————
I've opened My Bug Bounty tips Group => Join Link : t.me/bugbountyresou…
—————————

#bugbounty #Infosec #CyberSec

Extracts Juicy Informations

—————————
I've opened My Bug Bounty tips Group => Join Link : t.me/bugbountyresou…
—————————

#bugbounty #Infosec #CyberSec

Get Subdomains from Riddler. io

—————————
I've opened My Bug Bounty tips Group => Join Link : t.me/bugbountyresou…
—————————

#bugbounty #Infosec #CyberSec

Get Subdomains from Archive

—————————
I've opened My Bug Bounty tips Group => Join Link : t.me/bugbountyresou…
—————————

#bugbounty #Infosec #CyberSec

Get Subdomains from crt. sh

—————————
I've opened My Bug Bounty tips Group => Join Link : t.me/bugbountyresou…
—————————

#bugbounty #Infosec #CyberSec

Dump In-scope Assets from chaos-bugbounty-list

—————————
I've opened My Bug Bounty tips Group => Join Link : t.me/bugbountyresou…
—————————

#bugbounty #Infosec #CyberSec

I love you all of you guys to support me

I Provide Useful and juicy info and Resources that help infosec community to grow

Hope You'll Like My Work 👍

Hit A like If you want More Like These

• • •

Missing some Tweet in this thread? You can try to force a refresh

This Thread may be Removed Anytime!

Twitter may remove this content at anytime! Save it as PDF for later use!

More from @Aacle_

Abhishek Meena

@Aacle_

Dec 13

Important tools solving CTF challenges.

#bugbounty #infosec

++Networking
- Wireshark, tshark
- tcpdump
- netcat, telnet
- nmap

++Forensics
- dd
- strings
- scalpel
- TrID
- binwalk

My Bugbounty Tips Group Link :
t.me/bugbountyresou…
=====================

Thread More 🧵:👇

Remaining ++Forensics
- foremost
- ExifTool
- Any hex editor
- DFF
- CAINE
- The Sleuth kit
- Volatility

++Cryptography
- Cryptool
- hashpump
- Sage
- John the Ripper
- hashcat
- Online tools(web)
- Modules for python

#bugbounty #Infosec

More : 👇

++Steganography
- OpenStego
- OutGuess
- Steghide
- StegFS
- pngcheck
- Gimp
- Audacity
- Mp3Stego
- ffmpeg
- Own tools

++Reverse Engeering
- GDB
- IDA Pro
- Immunity Debugger
- OllyDbg
- Radare2
- nm
- objdump

#bugbounty #infosec

More : 👇

Read 4 tweets

Abhishek Meena

@Aacle_

Dec 12

6 Tips To follow to Review Code for Security Bugs

You Must Read : 👇

⭐ Start by reading the code carefully to get a good understanding of how it works and what it does.

⭐ Look for any potential vulnerabilities, such as input validation, authentication, and access control.

➡️ Pay special attention to any areas of the code that handle sensitive information, such as user passwords or financial data.

Read 8 tweets

Abhishek Meena

@Aacle_

Dec 12

How APi_key leakage could be harmful

Check this thread 🧵

Let take a intro : What Api_key is ?

API keys are unique identifiers that are used to authenticate and authorize access to certain resources or services.

In general, API keys are intended to be used as a way to grant secure and controlled access to the resources or services provided by a particular application or platform.

Read 10 tweets

Abhishek Meena

@Aacle_

Dec 11

List of 20 Different Vulnerabilities Other than OWASP Top 10 Explain

Check this out : 👇

➡️ Man-in-the-middle (MITM) attacks, in which an attacker intercepts and alters communications between two parties.

➡️ Password cracking, in which an attacker uses various techniques to guess or obtain a user's password.

➡️ Malware infections, in which an attacker installs malicious software on a computer or network in order to gain access or control over it.

➡️ Remote code execution vulnerabilities, which allow attackers to execute arbitrary code on a remote system.

Read 13 tweets

Abhishek Meena

@Aacle_

Dec 11

Authentication Vs Authorization
#bugbounty #infosec

🔰 Authentication and authorization are two separate but related concepts in the field of computer security.

Authentication is the process of verifying the identity of a person or entity who is trying to access a system or network.

➡️ It's typically involves providing a username and password, but also include authentication such as biometric data or security tokens.

The goal of authentication is to ensure that only authorized users are able to access the system.

Read 7 tweets

Abhishek Meena

@Aacle_

Dec 10

This is how CTF's Help Bug bounty hunters
#bugbounty #Infosec #hacking

Do Check This Out :👇

Thread 🧵:👇

🔰 Capture-the-flag (CTF) competitions can help bug bounty hunters in a few ways:

➡️ CTFs provide a safe and legal environment to practice and improve your hacking skills.

This can help you become more proficient at finding and exploiting vulnerabilities

➡️ CTFs often include challenges that are similar to the types of problems you might encounter in a real-world bug bounty program.

This can give you a sense of what to expect, and help you develop strategies and techniques for tackling these challenges.

Read 6 tweets

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Share this page!

Abhishek Meena

People who liked this thread also liked...

Try unrolling a thread yourself!

More from @Aacle_

Abhishek Meena

Abhishek Meena

Abhishek Meena

Abhishek Meena

Abhishek Meena

Abhishek Meena

Did Thread Reader help you today?

Don't want to be a Premium member but still want to support us?

Send Email!