No one really cares about you, so just focus in yourself, in the end you will be alone anyway.

My checklist for testing 'Insufficient Session Expiration' issues #appsec #websecurity #pentesting #pentest #securitytesting #infosec #infosecurity #itsecurity #cybersecurity #ethicalhacking #hacking #bugbounty #bugbountytip #bugbountytips

⚙️IIS-ShortName-Scanner is a tool by Soroush Dalili to identify potential security vulnerabilities in Microsoft IIS github.com/irsdl/IIS-Shor… #bugbounty #bugbountytip #bugbountytips #ethicalhacking #hacking #infosec #pentesting #penetrationtesting #hackforgood #vdp

⚙️ A python tool used to discover endpoints (and potential parameters) for a given target! created by / XNL -н4cĸ3r (and @xnl-h4ck3r in the new Sky) 🔥 github.com/xnl-h4ck3r/xnL… #bugbounty #bugbountytip #bugbountytips #ethicalhacking #hacking #infosec #pentesting #penetrationtesting #hackforgood #vdp

⚙️ A tool to brute discover GET and POST parameters github.com/Bo0oM/ParamPam… created by Bo0oM 👏 #bugbounty #bugbountytip #bugbountytips #ethicalhacking #hacking #infosec #pentesting #penetrationtesting #hackforgood #vdp

AEM Wordlist by 𝘻𝘰𝘪𝘥𝘴𝘦𝘤 gist.githubusercontent.com/kawing-ho/a4ca… #bugbounty #bugbountytip #bugbountytips #aem #ethicalhacking #hackforgood #togetherwehitharder #pentesting #penetrationtesting #infosec #cybersec

“Recon like a Pro!” by Suprajabaskaran infosecwriteups.com/recon-like-a-p…

“Admin Panel Bypass without the credentials” by Sayim0x medium.com/@sayim0x3105/a…

“Bug Bounty Hunting — How to use ChatGPT” by Batuhan Aydın medium.com/@batuhanaydinn…

🚨Bug Hunter Handbook🚨 📥gowthams.gitbook.io/bughunter-hand… #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #ssrf #AEM

I've dropped my 403 bypass tampers on ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ , g0t mi1k , and I's project SecLists this afternoon. I have found many bugs with these tricks. Enjoy 🫶✌️🤫 github.com/danielmiessler…

Episode 52: Best Technical Content from Year 1 of CTBB Podcast rss.com/podcasts/ctbbp… Critical Thinking - Bug Bounty Podcast

Looking at getting into bug bounty hunting? Bugcrowd University is a ✨FREE✨ project to help you level-up your skills! Modules include: ✅ Making a Good Submission ✅ Burp Suite ✅ XSS ✅ Recon and Discovery ✅ SSRF ✅ XXE And more! Jump in 👇 github.com/bugcrowd/bugcr…

Tips and Tricks for Effective SQL Injection Testing using SQLMap Tamper Scripts muhdaffa.medium.com/tips-and-trick…

Basic Beginner Bug Bouty methodology. thexssrat.medium.com/a-very-basic-b…

⚠️"Attacking Organizations with Big Scope - from 0 to Hero" was my talk at #HitBxPhdays in Bangkok 🇹🇭. Happy to share the slides and recording with the community. 🔴 Slides: drive.google.com/file/d/1bALcKL… 🔴 Recording: youtu.be/vFk0XtHfuSg?si… Enjoy! #bugbounty #infosec

OAuth testing resource for mobile applications 🙌🏻 An absolutely amazing blog for testing Mobile Application OAuth (iOS) - iOS URL Schemes Hijacking by Julien | MrTuxracer 🇪🇺 and evanconnelly.github.io/post/ios-oauth/ #bugbountytips #mobileapplication #iOS #apptesting #bugbounty

all you need to know about JWT vulnerabilities: medium.com/@0x_xnum/all-a… #Hacking #JWT #BugBounty #bugbountytips

Today's Bug Bounty Blogs #28 1)From Low to Whoa: Elevating a P5 SSRF to a P3 medium.com/@loayahmed686/… 2)Various Methods to Exploit Insecure Direct Object Reference (IDOR) medium.com/@sahusujal.dev… 3)API Testing 0xy37.medium.com/api-testing-9d… 4)Choosing Your First Program in Bug

Nothing is permanent.