Share this page!

Enter URL or ID to Unroll

You can paste full URL like: https://x.com/threadreaderapp/status/1644127596119195649
or just the ID like: 1644127596119195649

How to get URL link on X (Twitter) App

  1. On the Twitter thread, click on or icon on the bottom
  2. Click again on or Share Via icon
  3. Click on Copy Link to Tweet
  4. Paste it above and click "Unroll Thread"!
  5. More info at Twitter Help
Intigriti Profile picture
Intigriti
@intigriti
Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍
5 subscribers
Jul 4 • 11 tweets • 5 min read
Do you want to find more vulnerabilities with recon? 🤑

Open this thread (step-by-step guide)! 🧵 👇 Image Before we dive in, let's first cover what recon (short for 'reconnaissance') is.

Recon is the first crucial phase of any engagement and it involves mapping out (sub)domains, IP ranges, technologies and services, as well as any other publicly accessible information through several techniques
May 30 • 14 tweets • 5 min read
12 API hacking bug bounty tips you must try on your target! 😎

🧵 👇 Image 1️⃣ Blind XSS via request headers

Applications log your data in various ways, including in insecure ways. Always test for blind XSS vulnerabilities by injecting your payload in common request headers, such as:
• Referrer
• X-Forwarded-For, X-Forwarded-Host, X-Forwarded-Ip, Host (in case of a reverse proxy)
• User-Agent
• Etc.

Dive deeper into blind XSS:
intigriti.com/researchers/bl…Image
Mar 14 • 15 tweets • 4 min read
Master exploiting XXE vulnerabilities! 😎

A thread 🧵 👇 Image XML eXternal Entity (XXE) injection is a vulnerability class that stems from inadequate user input validation during XML parsing, allowing attackers to take advantage of parser misconfigurations!

This often leads to local file read, server-side request forgery, and, in severe cases, even remote code execution!
Feb 15 • 14 tweets • 4 min read
Master hacking WordPress targets in one thread! 🤑

🧵 👇 Image We've all come across a WordPress instance before...

It's a powerful content management system (CMS) that can be deployed for all sorts of use cases, from landing pages to blogs and e-commerce sites!
Dec 27, 2024 • 10 tweets • 3 min read
Want to master 2FA bypassing? 🤑

Let's look at several possible ways to bypass this 2FA screen! 👇 Image 2-Factor authentication (2FA) vulnerabilities arise when the implementation of this security layer is weak or contains logic errors

Bypassing 2FA can give us unauthorized access to applications, user accounts, etc.

For that reason, you should never neglect the impact of 2FA bypasses!
Sep 13, 2024 • 9 tweets • 3 min read
Want to master AWS S3 hacking? 🤑

This thread is for you! 🧵 👇 Image AWS S3 (Simple Storage Service) buckets are a popular storage service often used by software companies to store data.

This is often sensitive data (such as receipts, invoices, etc.) but it can also be used to store public images such as profile pictures for example!
Jul 5, 2024 • 9 tweets • 3 min read
This is the thread I wish someone created for me when I started participating in bug bounty! 😅

Not everyone shares these methods... but

Here are a few tips to help you identify & exploit more IDOR vulnerabilities! 🤑

🧵 👇 IDOR (insecure direct object reference) vulnerabilities are present in web services that directly reference a data object without proper access controls!

The data object can be anything, from sensitive fields that are stored in databases to files stored in a storage bucket.
Apr 12, 2024 • 5 tweets • 2 min read
Ever had to analyze JavaScript files using Burpsuite? 🧐

Here are 3 web extensions to help you out and find secrets, links and other sensitive data! 🤑

A thread 🧵 👇 1️⃣ JS Miner

JS Miner is a Burpsuite Pro extension to help you analyze static files like JavaScript & JSON files found on your target for finding secrets, endpoints and other hard-coded sensitive data! 😎

Check it out on the Github! 👇
buff.ly/3J9l6bl
Mar 1, 2024 • 6 tweets • 2 min read
Ever came across a subdomain on one of your targets that returned the following error? 🧐

If you ever skipped these, you may have missed out on a lot of bounties...

Here are the top 3 tools to bypass pages behind a 401 & 403 error status code! 🤑

A thread! 🧵 👇 Image 1️⃣ bypass-url-parser

Bypass-url-parser is a fuzzer that performs all types of checks to attempt and bypass protected pages behind a 40X status code! 😎

It features several bypass modes including an option to spoof your IP!

Bypass-url-parser is Github:
buff.ly/42XeUfq
Nov 10, 2023 • 13 tweets • 3 min read
Look at this login form 👀

There are multiple vulnerabilities present. 🤑️ But can you spot them all? 😎️

Let's cover each one of them! 🧵👇 Image Imagine this...

You just performed subdomain enumeration

Filtered all live hosts and got a list of URLs. You know, the usual.

In them, you spot "staging-id\.example\.com" subdomain 😏️

A quick look at the scope section, you see that this subdomain is in scope! 🤑️
Sep 9, 2023 • 6 tweets • 2 min read
Top 4 tools to automate SQL Injection vulnerabilities!

A thread! 👇 Image 1⃣ SQLMap

You probably already know about the first scanner...

SQLMap is the most popular SQL Injection vulnerability scanner out there and is fully open-source!

SQLMap is available on GitHub 👇

github.com/sqlmapproject/…
Aug 25, 2023 • 7 tweets • 2 min read
Understanding SQL Injections!

A thread! 👇️ Image Let's first understand what SQL is! 😎

SQL—Structured Query Language—is a query language used to perform CRUD operations in SQL-like databases!

So suppose you need to retrieve an entry from a database, you can use an SQL query to read that specific field.
Aug 11, 2023 • 9 tweets • 3 min read
XXE exploitation 👇️ Image Today, we will cover how you can successfully exploit XXE vulnerabilities

If you aren't familiar with the concepts of XXE yet...

This thread is made just for you! 👇️
Jul 5, 2023 • 7 tweets • 2 min read
A lot happened in the #BugBounty community last week, so let's take a look at the 5 must consumes in todays #BugBytes 1⃣ We start out with a blog from @assetnote that you've definitely already seen as they dive into the recent Critrix CVE and talk about the how of finding it! blog.assetnote.io/2023/06/29/bin…
Jun 29, 2023 • 6 tweets • 2 min read
You probably saw this before...

An XSS through your User-Agent header

But is it exploitable? 🤔️ Let's find out! 👇🧵 A common mistake new hunters make is reporting XSS where the payload is supplied inside a request header

However...this leads to a self-cross-site scripting vulnerability which is often out-of-scope! 😬️

Let's understand why and when you can actually report it!
Jun 6, 2023 • 8 tweets • 2 min read
Let's take a look at why this XSS won't execute 🤔

A thread 🧵👇 XSS - no execution You probably came across this scenario before

Your payload gets reflected without getting encoded...

But non of the HTML entered is getting rendered!
May 29, 2023 • 5 tweets • 2 min read
3 Tools to help you automate file upload vulnerabilities 📁🔨 1⃣Upload Scanner

Upload Scanner is a Burpsuite extension that can help you automate file upload vulnerabilities

It's capable of uploading various files, injecting ASP, JSP, and PHP code + bypassing restrictions!

portswigger.net/bappstore/b224…
May 19, 2023 • 9 tweets • 2 min read
An introduction to file upload vulnerabilities 🧵👇 Insecure File Upload Vulner... Let's first understand file upload vulnerabilities!

File upload vulnerabilities arise when you are able to upload files without any restrictions (or validations performed on the backend) 💡
May 17, 2023 • 12 tweets • 5 min read
Wondering what happened this week in #BugBounty and pentesting? Procrastinating on twitter and want to pretend to be productive? Let's check out this weeks #BugBytes PS: did you notice that the write ups and tutorials are now separated? If you're looking for more advanced security research or grow your skills! A screenshot of the latest ...
Apr 14, 2023 • 12 tweets • 3 min read
CSRF Vulnerabilities Explained!

A mega-thread 👇🧵 Let's understand CSRF vulnerabilities first before moving on to the exploitation part.

Cross-Site Request Forgery (CSRF) vulnerabilities arise when a malicious actor is able to trick the victim's browser into conducting any unauthorized action on his behalf.
Apr 12, 2023 • 13 tweets • 4 min read
5 CSRF exploitation techniques 🧵👇 CSRF techniques 1) Basic CSRF

Let's take a look at a very straight-forward example: CSRF example (1)