Tweet

This Thread may be Removed Anytime!

Twitter may remove this content at anytime! Save it as PDF for later use!

More from @Aacle_

Abhishek Meena

@Aacle_

Dec 21

Topic - DNS -> Zone Transfer

A zone transfer is a process of transferring DNS zone data from one DNS server to another.

Zone transfers are typically used to replicate DNS data across multiple servers, and are an important part of the DNS infrastructure.

To perform a zone transfer, you will need to have access to a DNS server that is authorized to perform zone transfers.

This typically requires access to the DNS server's configuration settings, which may require authentication.

Once you have access to a DNS server that is authorized to perform zone transfers, you can use a tool such as a dig command to initiate a zone transfer.

For example, the following command can be used to initiate a zone transfer for the domain example.com :

Read 4 tweets

Abhishek Meena

@Aacle_

Dec 16

Effectively use Shodan to search for and identify specific types of devices and systems on the internet.

#bugbounty #infosec

Some tips on how to use Shodan like a pro :👇

➡️ Use filters to narrow your search: Shodan has a wide range of filters that you can use to narrow your search and find specific types of devices or systems.

• For example, you can use the "os" filter to search for devices running a specific operating system, or the "port" filter to search for devices running a specific service on a particular port.

Read 9 tweets

Abhishek Meena

@Aacle_

Dec 16

Techniques to bypass WAF :👇

✨ Here are some potential ways to bypass a WAF:

➡️ Encoding: Some WAFs are not able to properly decode encoded data, so encoding your payloads or requests may allow them to bypass the WAF.

➡️ Obfuscation: Obfuscating your payloads or requests may make them less recognizable to the WAF, potentially allowing them to bypass detection.

➡️ Evasion techniques: There are a number of evasion techniques that can be used to bypass WAFs

Read 10 tweets

Abhishek Meena

@Aacle_

Dec 13

🔰 How to Find XSS Like a Pro

Thread 🧵:👇

✨ To find XSS (Cross-Site Scripting) bugs, you can use combination of manual testing and automated tools.

Some steps you can follow to find XSS:

➡️ identify potential entry points for XSS attacks, such as input fields in web forms, query parameters in URLs, or file uploads.

➡️ Use a web application scanner to test these entry points for XSS vulnerabilities.

These scanners can automatically scan your web application and identify potential vulnerabilities, including XSS.

Read 7 tweets

Abhishek Meena

@Aacle_

Dec 13

Important tools solving CTF challenges.

#bugbounty #infosec

++Networking
- Wireshark, tshark
- tcpdump
- netcat, telnet
- nmap

++Forensics
- dd
- strings
- scalpel
- TrID
- binwalk

My Bugbounty Tips Group Link :
t.me/bugbountyresou…
=====================

Thread More 🧵:👇

Remaining ++Forensics
- foremost
- ExifTool
- Any hex editor
- DFF
- CAINE
- The Sleuth kit
- Volatility

++Cryptography
- Cryptool
- hashpump
- Sage
- John the Ripper
- hashcat
- Online tools(web)
- Modules for python

#bugbounty #Infosec

More : 👇

++Steganography
- OpenStego
- OutGuess
- Steghide
- StegFS
- pngcheck
- Gimp
- Audacity
- Mp3Stego
- ffmpeg
- Own tools

++Reverse Engeering
- GDB
- IDA Pro
- Immunity Debugger
- OllyDbg
- Radare2
- nm
- objdump

#bugbounty #infosec

More : 👇

Read 4 tweets

Abhishek Meena

@Aacle_

Dec 12

6 Tips To follow to Review Code for Security Bugs

You Must Read : 👇

⭐ Start by reading the code carefully to get a good understanding of how it works and what it does.

⭐ Look for any potential vulnerabilities, such as input validation, authentication, and access control.

➡️ Pay special attention to any areas of the code that handle sensitive information, such as user passwords or financial data.

Read 8 tweets

Share this page!

Abhishek Meena

People who liked this thread also liked...

Try unrolling a thread yourself!

More from @Aacle_

Abhishek Meena

Abhishek Meena

Abhishek Meena

Abhishek Meena

Abhishek Meena

Abhishek Meena

Did Thread Reader help you today?

Don't want to be a Premium member but still want to support us?

Send Email!