@pythoncike

security research,red team memeber,code reviewer

Google.com
Joined June 2017
  • Tweets67
  • Following2.2K
  • Followers79
2Media
RandomHt retweeted
Geek
@geekbb19 Apr 2024
发现一款 Chrome 插件，用于将网页文档以原样式保存到本地浏览器数据库，不用担心隐私泄漏，不依赖网络，支持关键词快速搜索和检索功能，节约磁盘空间同时减少浏览器内存的使用。github.com/wvit/web-document
18
128
2
634
106,799
RandomHt retweeted
Medusa
@medusa_0xf8 Apr 2022
New Blog! Exploiting XSS with Javascript/JPEG polyglot. #xss #infosec #javascript medium.com/@Medusa0xf/exploi…

Exploiting XSS with Javascript/JPEG Polyglot

What is a polyglot?

infosecwriteups.com
22
270
4
914
RandomHt retweeted
prin@fuxksniper13 Mar 2022
A small gift from my side to all bug bounty hunters. My 8 hour long burp suite focused course for free. share to someone who need it. #bugbountytips #bugbounty #infosec (rt & share + enjoy) udemy.com/course/bug-bounty-…
15
96
3
268
CVE-2022-0824 Webmin revshell - Post-Auth Reverse. PoC github.com/faisalfs10x/Webmi…
2
44
2
137
RandomHt retweeted
Phith0n@phithon_xg7 Mar 2022
Talk about 2 POC of DirtyPipe(CVE-2022-0847) Original POC: dirtypipe.cm4all.com/ is able to overwrite arbitrary file with offset like ./exp /etc/passwd 5 ":0:0:rootx" Improved POC: haxx.in/files/dirtypipez.c is able to overwrite a SUID program like ./exp /usr/bin/su
9
261
17
626
Top 25 Browser Extensions for Pentesters and Bugbounty Hunters (2022) p1boom.com/2022/02/top25-bro… Did i miss something? #bugbounty #bugbountytips #infosec #Pentesting
8
124
5
266
Found an XSS filter that allows SVG-based tags? Try the 'use' element, you can import a SVG via a data url and execute JavaScript automatically! portswigger.net/web-security…
Base64 encoded and plain use element that auto executes

ALT Base64 encoded and plain use element that auto executes

3
115
4
404
RandomHt retweeted
PT SWARM@ptswarm2 Feb 2022
✅ A Tip for SQL Injection WAF Bypass
1
141
3
476
Happy year’s 2022, I learning Java code review and codeql.
Most popular key word in #Linux with definitions that’s help u to learn more about who to use it in linux platform. #CyberSecurity #cybercrime #الامن_السيبراني
12
12
RandomHt retweeted
H4x0r.DZ
@h4x0r_dz4 May 2021
In this tweet, I will explain to you How to find Leaking AWS Keys.
19
318
6
777
#update St8out - Extra one-liner for reconnaissance gist.github.com/dwisiswant0/… Workflow: metabigor > findomain & amass > filter-resolved > subjack > dig > nmap > webanalyze > dirsearch > LinkFinder > cors-blimey > gowitness > Arjun > meg > gf #bugbountytips

St8out - Extra one-liner for reconnaissance

St8out - Extra one-liner for reconnaissance. GitHub Gist: instantly share code, notes, and snippets.

gist.github.com
4
54
3
123
RandomHt retweeted
noraj@noraj_rawsec2 Feb 2020
I added a script to generate the PDF & archive for my #OSCP Exam Report Template in Markdown, as I saw a lot of people where creating their own scripts. github.com/noraj/OSCP-Exam-R…

GitHub - noraj/OSCP-Exam-Report-Template-Markdown: :orange_book: Markdown Templates for Offensive...

:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report - noraj/OSCP-Exam-Report-Template-Markdown

github.com
2
166
2
429
xss cheat from xiangcao
learn hack in Twitter
RandomHt retweeted
xer0dayz@xer0dayz28 Dec 2019
If you didn't know, you can use Sn1per to retrieve a targets ASN, full subnet list and IP's via 'recon' mode. These can easily be fed into Sn1per using 'discover' mode to scan full subnets and enumerate all hosts. 😎 xerosecurity.com #bugbounty #netsec #infosec #offsec
14
1
41
Confirmed. Everyone is affected. Or you are not on the Internet.
Vinny Troia, PhD
@vinnytroia19 Nov 2019
I have a major #Databreach announcement tomorrow - 1.2 BILLION people exposed from a single organization. More details soon. @lilyhnewman @troyhunt @MayhemDayOne @DataViperIO
5
37
4
64
Here's Predator: github.com/s0md3v/Predator A collection of techniques to detect and fuck up bots 🔥 I made it for @mubix's OSCP voucher giveaway which I didn't win, it's community property now ❤️

GitHub - s0md3v/Predator: Anti-Automation System

Anti-Automation System. Contribute to s0md3v/Predator development by creating an account on GitHub.

github.com
4
58
286
Replying to @agrawalsmart7
Also, Gitrob. github.com/michenriksen/gitr…
5
20
Some github search keywords. Assuming target(.)com *"target(.)com" password *"target(.)com" "pass" 'email' *"target(.)com" "api" *"target(.)com" FTP *"target(.)com" SMTP *"target(.)com" LDAP *"target(.)com" PEM (For Keys) If found nothing try to change it.
9
177
5
534
Load more