1.
Chirag Artani
@Chirag99Artani
6 AI tools to reduce work hours:
Notes - reflect.app
Design - stockimg.ai
Create Vid… twitter.com/i/web/status/1…
Notes - reflect.app
Design - stockimg.ai
Create Vid… twitter.com/i/web/status/1…
Retweet of status by @hasantoxr
2.
Chirag Artani
@Chirag99Artani
Port Scan, Probe and Directory Brute Force with HTTPX
cat domains | httpx -nc -silent -p 80,443,8080,8443,9000,… twitter.com/i/web/status/1…
cat domains | httpx -nc -silent -p 80,443,8080,8443,9000,… twitter.com/i/web/status/1…
Retweet of status by @_bughunter
3.
4.
5.
6.
7.
Chirag Artani
@Chirag99Artani
So many beginners ask what to do after finding subdomains
1. Do directory search
2. Do Github dork
3. Do google d… twitter.com/i/web/status/1…
1. Do directory search
2. Do Github dork
3. Do google d… twitter.com/i/web/status/1…
Chirag Artani
@Chirag99Artani
️ How To Hack Web Applications in 2022: Part 2
@hakluke provides an overview of several vulnerability classes:
*… twitter.com/i/web/status/1…
@hakluke provides an overview of several vulnerability classes:
*… twitter.com/i/web/status/1…
Retweet of status by @clintgibler
Chirag Artani
@Chirag99Artani
BugBounty Tips:
Always check for paths in JS Files. I found an endpoint in js file /customer/state, send a request… twitter.com/i/web/status/1…
Always check for paths in JS Files. I found an endpoint in js file /customer/state, send a request… twitter.com/i/web/status/1…
Retweet of status by @HackerGautam
Chirag Artani
@Chirag99Artani
A thread
Secrets of automation-kings in bug bounty
Finding 1day (or 1month) web exploits that haven't made the… twitter.com/i/web/status/1…
Secrets of automation-kings in bug bounty
Finding 1day (or 1month) web exploits that haven't made the… twitter.com/i/web/status/1…
Chirag Artani
@Chirag99Artani
Mnemonic API is
add to .bashrc
mn(){
curl -s -X POST api.mnemonic.no/pdns/v3/search -H 'Content-Type: application/jso… twitter.com/i/web/status/1…
add to .bashrc
mn(){
curl -s -X POST api.mnemonic.no/pdns/v3/search -H 'Content-Type: application/jso… twitter.com/i/web/status/1…
Retweet of status by @_bughunter
8.
9.
10.
11.
Chirag Artani
@Chirag99Artani
msdt-follina
@_JohnHammond
367 (+178)
Python
Codebase to generate an msdt-follina payload
github.com/JohnHammond/ms…
@_JohnHammond
367 (+178)
Python
Codebase to generate an msdt-follina payload
github.com/JohnHammond/ms…
Retweet of status by @gh_trending_py
Chirag Artani
@Chirag99Artani
LFI AT SCALE
cat hosts | gau | gf lfi | httpx -paths lfi_wordlist.txt -threads 100 -random-agent -x GET,PO… twitter.com/i/web/status/1…
cat hosts | gau | gf lfi | httpx -paths lfi_wordlist.txt -threads 100 -random-agent -x GET,PO… twitter.com/i/web/status/1…
Retweet of status by @_bughunter
Chirag Artani
@Chirag99Artani
How I get RCE via Dependency Confusion
#bugbountytips
#bugbountytips
Retweet of status by @MeAsHacker_HNA
Chirag Artani
@Chirag99Artani
Search for secret API keys publicly exposed on websites :
ex : Searching for slack API token on all the scanned… twitter.com/i/web/status/1…
ex : Searching for slack API token on all the scanned… twitter.com/i/web/status/1…
Retweet of status by @AseemShrey
...but wait! There's more!
1.
fakhright
@fakhright
astaghfirullah peng.krim guaaaaaaaa..............a *salto sambil solat*
