BePractical
Hey everyone, I'm thrilled and deeply grateful for the incredible response to our first web reconnaissance workshop! Your enthusiasm and feedback were amazing, and it's clear that many of you are eager to enhance your bug bounty hunting and penetration testingโฆ
Here's some more information about the workshop
1. Timing: 7:00pm to 8:30pm
2. Duration: 7 days(20th July - 27th July)
3. Language: English
4. Last Date Of Registration: 15th July
5: Recordings for each session will be shared.
3 more days to register!
1. Timing: 7:00pm to 8:30pm
2. Duration: 7 days(20th July - 27th July)
3. Language: English
4. Last Date Of Registration: 15th July
5: Recordings for each session will be shared.
3 more days to register!
๐4
Hi, If anyone is having any trouble in payment using PayPal then please let us know
โค3
New video will be releasing tomorrow! Stay tunedโค
Also, there's only 2 more days remaining for registration!
Also, there's only 2 more days remaining for registration!
โค9๐3
Hi everyone! I have just released a new video in which i tested some of the popular tools on target protected by WAF.
To know which tool is better, Check out the video:
https://youtu.be/_oLyUxRMnJk
To know which tool is better, Check out the video:
https://youtu.be/_oLyUxRMnJk
YouTube
Testing XSS Tools On Target Protected By WAF | 2024
In this video, we dive into the world of web application security by testing various XSS tools on a target protected by a Web Application Firewall (WAF). We'll explore how effective different XSS tools are at bypassing WAF defenses and highlight techniquesโฆ
โค10๐3๐1๐ฅ1
For those who have registered into the workshop which is going to be held on 20th July 2024, Your mobile number will be added in our group on 18th July 2024.Thank you. Keep learning, Keep Hacking!!!
๐3
Bug Bounty Tip: While testing on endpoints like /uploadedFiles or /uploads where you think that the app is storing files..make sure to look for common files (like .txt,.pdf,.zip,.tar.gz)
In a recent penetration testing engagement, I was able to uncover sensitive log files and some invoices of a company using this same method!
Keep Hacking!
In a recent penetration testing engagement, I was able to uncover sensitive log files and some invoices of a company using this same method!
Keep Hacking!
๐26โค6๐ฅ5
Hi everyone, I have recently found an interesting vulnerability which allowed me to get all the exposed log files that contains juicy information like hidden directories, credentials etc
Here's the methodology:
1. Did initial content discovery and found /system endpoint (It was giving 403 error)
2. Then i went to discover content inside the "/system" directory and found "/system/logs"
3. Finally, Got the log files!!!
Here's the methodology:
1. Did initial content discovery and found /system endpoint (It was giving 403 error)
2. Then i went to discover content inside the "/system" directory and found "/system/logs"
3. Finally, Got the log files!!!
โค33๐13๐ฅ5๐2
Hi guys! I hope you all are doing well. First of all, I am really sorry that i am not uploading any videos for a long time. To be honest, I was not feeling well and lot of other things were happening at the same time so couldn't get the time to upload new videos. However, I will try my best to be active from now on & help the cyber security community with whatever i can!!
With that being said, Let me share an exciting news with you all. I am happy to share that i am currently ranking as number 1 hacker in one of the private VDP programs on hackerone! The only suggestion/advise i can give you all is:- Focus on 1 target & hunt on it for months!
Keep learning & Keep hacking๐ฅ
With that being said, Let me share an exciting news with you all. I am happy to share that i am currently ranking as number 1 hacker in one of the private VDP programs on hackerone! The only suggestion/advise i can give you all is:- Focus on 1 target & hunt on it for months!
Keep learning & Keep hacking๐ฅ
๐ฅ17๐11โค10
Hi everyone! After a long time, Here's my new video that will help you to effectively recon on large scopes to discover content or sensitive files on your large scope based targets!
https://youtu.be/ie84NeBxPCM
https://youtu.be/ie84NeBxPCM
YouTube
Bug Bounty: Content Discovery on Large Scope Like a Pro! | 2024
Are you ready to take your content discovery game to the next level? In my latest video, I dive deep into how you can approach large-scope targets like a pro using the powerful tool, meg by tomnomnom. If youโve ever felt overwhelmed by the sheer size of yourโฆ
โค11๐1
Sometimes i feel like h1 triager's goal is to just mark every report as "Informative"
I have recently submitted a report the a private company which was marked as Informative by H1 security analyst. I knew it was a valid security issue so i asked for mediation and the internal staff from the company then finally triaged the report
I have recently submitted a report the a private company which was marked as Informative by H1 security analyst. I knew it was a valid security issue so i asked for mediation and the internal staff from the company then finally triaged the report
๐16โค3๐1
To all my mates from our beloved country India, Happy Independence Day ๐ฎ๐ณ
โค24๐ฅ6๐2โคโ๐ฅ1๐1
Weโve Reached 20K Subscribers on YouTube!
I canโt put into words how grateful I am today. Just a few months ago, we celebrated 10K subscribers, and now, weโre a community of over 20,000! Iโm truly thankful to each and every one of you for your incredible support and encouragement throughout this journey.
To show my appreciation, Iโm planning to host a free 2-hour webinar on bug bounty (Iโll announce the topic and date soon).
Thank you all so much from the bottom of my heart. Letโs keep learning and keep hacking together!
I canโt put into words how grateful I am today. Just a few months ago, we celebrated 10K subscribers, and now, weโre a community of over 20,000! Iโm truly thankful to each and every one of you for your incredible support and encouragement throughout this journey.
To show my appreciation, Iโm planning to host a free 2-hour webinar on bug bounty (Iโll announce the topic and date soon).
Thank you all so much from the bottom of my heart. Letโs keep learning and keep hacking together!
โค22๐6๐ฅ3๐1๐1