How I found XSS to RCE ! 🤟 Use wp-wordlist() to generate a list of all available #WordPress plugins and themes! Use the wordlist to fuzz your target and find CVEs or 0days to report🔥 hackerone.com/reports/941421 #infosec #bugbounty #bugbountytips #bugbountytip

[+1] Broken Access Control [+1] Default Creds leads to admin Account Takeover [+1] PII leakage [+1] IDOR

How to stop planning and start doing?

⚡

⚠️ Giveaway ⚠️ Want to learn modern reconnaissance and hacking skills? Join The Bug Hunter's Methodology Cohort 5! October 2nd, 3rd, 4th - jhaddix.gumroad.com/l/kihwd Like and retweet this post for a chance to win a free seat! Five winners will be announced on Sept 1st!

I'm from Bangladesh, and right now, my country is going through the toughest time since we got our independence. People are scared for their lives. Every day, people are dying—some know why, and some don't even have a clue. [1/3]

🚨 KNOXSS GIVEAWAY! 🚨 LIKE ♥️ and SHARE 📤 this to have a chance to win one of the following 🥇 1 Pro Sub 1-year 🥈 1 Pro Sub 6-months 🥉 1 Pro Sub 3-months Winners of this draw will be announced on October 7th 2024, good luck! 😀🤞 #KNOXSS - The magic ✨ #XSS tool.

Pic of the Day #infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness #informationsecurity

alhamdulillah

[+] Race Condition

Mood 🍂

Excited to announce a new giveaway, thanks to PentesterLab. We will pick 10 winners to win 6 month (x5) and 1 month (x5) subscriptions. To enter: 1️⃣ Follow us @BugBountyDefcon and PentesterLab 2️⃣ Like this post ❤️ 3️⃣ RT this post 🔁 You've time until next Friday (10/18), GO!

OSCP Giveaway In celebration of Cybersecurity Awareness Month, win the OffSec OSCP PEN-200 Course & Certificate Exam Bundle! 🛡️✨ 💥 How to Participate: 1. Follow us on Facebook, LinkedIn, Instagram & Twitter. 2. LIKE this post. 3. SHARE with your community! Good luck! 🍀

Bug bounty hunters: What’s your advice for someone who’s trying to make their first $100,000 in 2025? What should they do/learn? What should they avoid?

Ok so, i've never had any success with vhost scanning but i know many people SAY they have... What's the newest tooling and methodology here? Def don't wanna skip something just because my engagements have never really presented it....

10 places to practice hacking for beginners: 🪳 portswigger.net/web-security/a… 🐛 hackthebox.com 🕷️ tryhackme.com 🪲 pentesterlab.com 🐞 xss-game.appspot.com 5 more in thread 🧵👇

LUbuntu

Few tips on bypassing 401/403s 👇 What else can you add? 🧐