Pwning Admin Panels (Host header poisoning) POST /admin/forgot_password HTTP/1.1 Host: web..com"><img src="Blind XSS Here">

📄 I have reviewed nearly 250+ resume for security engineering role in my company, recently !! 🚀Below are few suggestions for a good RESUME from hiring perspective. 🧵👇 #infosec #security #InfoSecJobs #resume

Due to the interest, I have an additional 20x PentesterLab Pro subs up for grabs. Simply interact with this tweet, follow me, etc to go into the draw. All 20x will be selected randomly separately to the previous 3x licences. Thanks PentesterLab for donating 10x of the subs!

The wait is over!🔥 I personally wrote about all my methodologies and also answered some FAQs at the end! Do check it out and let me know :) #infosec #bugbounty #bugbountytips gowtham-naidu.medium.com/f566651cef82:

I’ve never done a similar giveaway but got 2 professional passes to Security BSides Ahmedabad 🇮🇳 that I’d love to donate should you be interested in attending and haven’t purchased one yet. Just FOLLOW me and RETWEET this post to participate 🤍

By age 30, you should have these truths at your fingertips...

😎Good Morning folks 🏖️ Unpredictable weather but beautiful to begin Welcoming you folks to the #Security Paradise ®️Registration Begins at 8 AM IST 🔥It's time to Experience #Nullcon 🌊 #NullconGoa2022 #Infosec #Conference #Cybersecurity

#NullconGoa2022 #stryker

1I participated in PingSafe Security Quiz at #PingSafeAtNullCon and Scored Grade A+ in the Challenge -  PingSafe (Now a Part of SentinelOne) NULLCON pingsafe.com

Fileless malware by Denis Denis Legezo #nullcon2022 #security

Yay, I was awarded a $16,300 bounty on HackerOne! hackerone.com/moblig #TogetherWeHitHarder 🎉🎉🎉 Tip: Even if an asset asks for authentication, fuzz for endpoints using ffuf, I found an unauthenticated API that allowed me to retrieve sensitive information!

#learn365 - Day 3⃣2⃣ 10 XSS payloads that don't need parentheses 😄 #xss #bugbountytips

Here are 30 #CyberSecurity search engines:🔍 1. Dehashed—View leaked credentials. 2. SecurityTrails—Extensive DNS data. 3. DorkSearch—Really fast Google dorking. (1/n) #infosec

#CodeReview Exercise Days This one is easy, Can you name the vulnerability in the following code snippet? And can you jot down the exploit payload ? Name & Solution in thread below.

Giveaway time!! I'll be giving away 1 AppSecEngineer Annual Subscription to one lucky winner! All you'll need to do is: 1. Follow me 2. Follow AppSecEngineer 3. RT/Share this message

Excited for the event ! #AWSCommunityDay, #awsugahm #Ahmedabad

#awscommunityday #Ahmedabad

📢 NullAhmedabad July Meetup 📢 Date: 30th July 2023, 10:45AM IST. Learn how to fetch historical records like a pro in this session on #historicalrecords by Purvil Kamdar. RSVP: null.community/events/909-ahm… null - The Open Security Community #nullahm #infosec #cybersecurity #OSINT