Cyber Security Enthusiast. Love to discover new things. Certified Ethical Hacker v10.

Joined March 2019
1 Photos and videos
Cryptcreed retweeted
"A majority of the bugs were only possible due to automated asset discovery, but still required some manual inspection and exploitation." This is an important point, automation is only part of the puzzle! Great blog @infosec_au blog.assetnote.io/2020/09/15…
2
60
202
Cryptcreed retweeted
17 Sep 2020
I wrote a post on @assetnote's blog about hacking in bug bounties for the last four years. This should give you a good idea on what I've been reporting and how I find bugs and incorporate them back into our platform. blog.assetnote.io/2020/09/15…
12
310
764
Cryptcreed retweeted
Python 4 FAQ. 1. The version after 3.9 is 3.10; in fact it already exists (in github master). 2. If there ever is a version 4, the transition from 3 to 4 will be more like that from 1 to 2 rather than 2 to 3.
141
691
4,011
Cryptcreed retweeted
I just uploaded some of the most common file types for my Patrik's Bug Bounty Tools mind map here: SVG: blog.it-securityguard.com/pb… PDF: blog.it-securityguard.com/pb… XMIND: blog.it-securityguard.com/pb… PNG: blog.it-securityguard.com/pb… enjoy! 🥰🥳👑 #bugbountytips #BugBounty
10
276
729
Cryptcreed retweeted
5 Sep 2020

4
139
329
Cryptcreed retweeted
Easily generate a custom wordlist from any domain: echo "bugcrowd.com" | subfinder -silent | hakrawler -plain -usewayback -scope yolo | sed $'s/[:./?=:]/\\\n/g' | anew
9
135
385
Cryptcreed retweeted
Try this when testing webapps: 1. Set up burp in browser1 2. Do a password reset request in browser1 3. Open the password reset email in browser2 and copy the token 4. Search your Burp history for the token, if it is there, you've got yourself a nice easy account takeover!
15
348
1,031
Cryptcreed retweeted
#bugbounty #bugbountytip #Android The Easiest way to find deeplink patterns search on google - targetscheme:// deeplink OR On github - "targetscheme://" deeplink
2
18
54
Cryptcreed retweeted
alert() with no parenthesis, back ticks, brackets, quotes, braces, etc. by @stealthybugs a=8,b=confirm,c=window,c.onerror=b;throw-a
10
107
428
Video Tuts on Debugging Automation Basics for Vuln. Researchers bit.ly/2QtczEV *Debug Events *Breakpoints *Registers, Memory Thread & Module Manipulation *Hook API *Writing Your First Fuzzer #vulnerability #bugbountytips #bugbounty #fuzzing #ReverseEngineering #malware
44
82
Cryptcreed retweeted
16 Aug 2020
Trick for bypass the rate-limit.. (it worked for me in many companies) #bugbountytips #bugbountytip #bugbounty
7
323
946
Cryptcreed retweeted
Sharing my OSCP notes. I hope it will help you guys! hackanythingfor.blogspot.com…

5
94
244
Cryptcreed retweeted
8 Aug 2020
I just published Reflected XSS in Facebook’s mirror websites Hope you will like it. Feedbacks are appreciated link.medium.com/CqgFgAajM8
25
173
489
Cryptcreed retweeted
If you hate analyzing JS files with strange variable names and minified versions, you should give a look at jsnice.org/

1
35
114
Cryptcreed retweeted
A common question asked is how do I best prepare for OSCP? This list of OSCP-Like boxes from @TJ_Null writeups from @rana__khalil are great resources to use heading into the PWK lab! Machine List: docs.google.com/spreadsheets… Rana's Writeups: medium.com/@ranakhalil101 #OSCP #PWK
1
65
168
Cryptcreed retweeted
link.medium.com/Dulig8BYG8 Always try to fetch hidden web directories In subdomains of the target #bugbountytips #bugbounty #cybersecurity

1
88
190