Security Researcher | eJPT | CRTP
Faridabad, India
Joined April 2019
- Tweets57
- Following174
- Followers90
- Likes186
I just published Server-side javascript code injection link.medium.com/LgV9CXS3YLb
#HackTheBox #Dante Pro Lab has been pwned after 14 Machines, 2 domain Controllers, and 4 Tunnels.
It was a challenging Lab demanding out-of-the-box thinking and deep enumeration techniques.
Hello all,
Recently I have made a tool to bypass the Jailbreak Detection mechanisms in iOS devices. Give it a try.
github.com/rsbarsania/Univer…
#ios #vapt #bugbountytips #bugbountytip
Passed CRTP...
Thanks, Altered Security for providing this amazing course and the exam lab. It was a great learning experience.
#security #activedirectory #CRTP #cybersecurity
Softvul - A tool to find the CVE details with URL & description of the Vulnerable software/library.
github.com/rsbarsania/softvu…
#infosecurity
#infosec
#CyberSec
#cybersecuritytips #bugbounty #bugbountytip #bugbountytips #bug
Rishabh Kumar Singh retweeted
Tip for beginners to find newly launched bug hunting programs via Tools option on #Google search.
1. intext:"Responsible Disclosure"
2. Click on "Tools" option.
3. Now change "Any Time" filter to "Past Hour"
#HR51KDB #bugbountytip #hacker #dorks
Happy to secure 🙂-> St. Xaviers College Ahmedabad
XSS
vulners.com/openbugbounty/OB…
#BugBounty #bugbountytips #up81rks
Rishabh Kumar Singh retweeted
Trying Password Reset? Check Flaws using HPP:👇✅
[email protected]&[email protected]
[email protected]%0a%0dcc:[email protected]
[email protected],[email protected]
[email protected]%[email protected]
[email protected]|[email protected]
email=victim
[email protected]
{"email":["[email protected]","[email protected]"]}
Rishabh Kumar Singh retweeted
A simple tool to extract the #github members of the target organization
Link: github.com/darklotuskdb/orgm…
#HR51KDB #infosecurity #infosec #bugbountytip #bash
Rishabh Kumar Singh retweeted
Check out the only good software I ever created.
It generates an email address and then prints any OTPs or confirmation links sent to it.
Just enter 'ote' in your terminal and get your OTP.
Github: github.com/s0md3v/ote
Rishabh Kumar Singh retweeted
#bugbountytip Broad scope target:
1) Subdomain enum
2) httprobe
3) subdomain flyover
4) Nuclei (develop your own templates as well)
5) Portscan
Now pay attention
1/4
Rishabh Kumar Singh retweeted
#SecurityExplained S-1: Web Testing Methodology
The below thread contains an overview of my pentesting methodology on the web application targets:
1. Initially, before starting with the engagement, I start with "Scoping" .........
(1/n)
Rishabh Kumar Singh retweeted
Web Cache Vuln Scanner
github.com/Hackmanit/Web-Cac…
(I was actually making the same tool...😫 I should throw away mine😁)
Rishabh Kumar Singh retweeted
Here's a small list of what we can do with subdomains:
Passive findings.
Bruteforce.
Import external findings.
Take screenshots.
Check HTTP status.
Discover host IP/CNAME.
Send alerts of new assets found.
Discover open ports.
and more.
All for FREE: github.com/Findomain/Findoma…
I made a simple tool to automate finding out sensitive data such as API keys, hardcoded credentials, etc. on a target...
github.com/rsbarsania/secret…
#bugbountytips #bugbountytip #bugbountytools
#up81rks #infosec #bash #kali #Linux
Passed the #eJPT. This was the most enjoyable and challenging exam I've taken. Thanks @eLearnSecurity
