| Tweetovi |
| sumgr0 proslijedio/la je tweet | ||
|
Pranav Sapra
@pranavsapra
|
33 min |
|
If I got a rupee every time a millennial said "I mean" and "like", do you know how rich I'd be? I mean like really rich!
|
||
|
|
||
| sumgr0 proslijedio/la je tweet | ||
|
Jeff Man
@MrJeffMan
|
22 h |
|
InfoSec Rule: If customer says, "we don't store that"...they do.
|
||
|
|
||
| sumgr0 proslijedio/la je tweet | ||
|
Luke Stephens (hakluke)
@hakluke
|
11 h |
|
Quickly get the ASN of an IP address, along with the associated company name and location:
curl ipinfo.io<ip>
This is a great way to confirm ownership of an IP/domain. It also is a great way to services that might be in use (AWS/Azure/Cloudfront/Akamai, etc.) pic.twitter.com/0Ng0qEQIbt
|
||
|
|
||
|
sumgr0
@sumgr0
|
24 h |
|
Shows of hands, if you’ve got the #airtel #bugbounty invite and going to be there!
|
||
|
|
||
|
sumgr0
@sumgr0
|
24 h |
|
Mine highest was 12 sub takeovers for a VDP...but you rock 🤘
|
||
|
|
||
|
sumgr0
@sumgr0
|
5. velj |
|
In my experience it’s a wildcard registration. But I could be wrong.
|
||
|
|
||
| sumgr0 proslijedio/la je tweet | ||
|
Prateek Tiwari
@prateek_0490
|
5. velj |
|
Bas yahi dekhna reh gaya tha 🤦♂️ twitter.com/jonoberheide/s…
|
||
|
|
||
| sumgr0 proslijedio/la je tweet | ||
|
Eduard Tolosa
@Edu4rdSHL
|
4. velj |
|
Findomain has just reached 1k of stars in Github. Thanks for all the community support and ideas. pic.twitter.com/QjMIjFuD25
|
||
|
|
||
|
sumgr0
@sumgr0
|
5. velj |
|
You cannot disclose the private ones 😂
|
||
|
|
||
|
sumgr0
@sumgr0
|
5. velj |
|
I hope you mention this from the public one 😉
|
||
|
|
||
|
sumgr0
@sumgr0
|
5. velj |
|
BTW I’ve noticed the cross between same programs being public on one platform, and them being private on the other 🤔
|
||
|
|
||
| sumgr0 proslijedio/la je tweet | ||
|
Mr Andy goTtA gO fASt offensive
@ZephrFish
|
5. velj |
|
Laugh of the morning :-) pic.twitter.com/rntaxkmj59
|
||
|
|
||
| sumgr0 proslijedio/la je tweet | ||
|
Twitter Support
@TwitterSupport
|
3. velj |
|
We recently discovered an issue that allowed bad actors to match a specific phone number with the corresponding accounts on Twitter. We quickly corrected this issue and are sorry this happened. You can learn more about our investigation here: privacy.twitter.com/blog/2020/an-i…
|
||
|
|
||
| sumgr0 proslijedio/la je tweet | ||
|
Elliot Alderson
@fs0c131y
|
4. velj |
|
Another *super smart* phishing attempt...
urlscan.io/result/0e8eafe… pic.twitter.com/883e4qWKgm
|
||
|
|
||
| sumgr0 proslijedio/la je tweet | ||
|
Yassine Aboukir 🐐
@Yassineaboukir
|
4. velj |
|
Rumors say that local tax authorities have all started tracking down those "Yay, I was awarded a $XXX bounty on @Hacker0x01" related tweets for interviews eligibility. You may find more information on irs.gov
|
||
|
|
||
|
sumgr0
@sumgr0
|
4. velj |
|
I’ve got the invite and I’m in delhi but the amount is really low to consider. I’d be keen to see how many are going?
|
||
|
|
||
| sumgr0 proslijedio/la je tweet | ||
|
Random Robbie
@Random_Robbie
|
4. velj |
|
|
||
|
|
||
|
sumgr0
@sumgr0
|
4. velj |
|
|
||
|
sumgr0
@sumgr0
|
4. velj |
|
Check out gf tool from tomnomnom. It integrates grep for common scenarios and makes it easy to trace.
|
||
|
|
||
| sumgr0 proslijedio/la je tweet | ||
|
dawgyg
@thedawgyg
|
4. velj |
|
When testing for SSRF using a black list, take internal IP addresses and when encoding them, dont encode entire IP. Encode 1 octet of the IP address, or 2 or 3. For Instance: AWS Metadata - 0251.254.169.254 (this got the $160,000 payout in Oct 2018) #bugbountytip #bugbounty
|
||
|
|
||