Yash___HackZ retweeted
Try this: Bug hunters just dropped GhostJS Burp Extension. It passively scans JS, HTML, and JSON for secrets. API keys, tokens, endpoints. Zero config, 150 plus patterns, totally free.
Install, browse, let it hunt
github.com/trinetlayer/Ghost…
Yash___HackZ retweeted
Think you can break AI?
Try: ai.trinetlayer.com/
Practice real Prompt Injection attacks
Use Learn Mode to understand step by step
Don’t just use AI — learn how to break it (ethically)
#AI #CyberSecurity #PromptInjection #BugBounty #Infosec
Yash___HackZ retweeted
Important notice.
Official company announcements and news happens on the official @RWA_Inc_ channels.
This is my personal account, where I share news directly from the RWA INC machine room, my thoughts and where I produce articles to inform more about investment, blockchain, ai and entrepreneurship.
At the moment, I cover my daily discoveries with the RWA INC AI agentic autonomous system!
I consider this the most important work I have ever done.
You should pay close attention as well.
Understand, that we are transforming @RWA_Inc_ yet again. This time to the most future proof and high performing small startup in the Web3 space!
Value is created as you read this beyond imagination.
Trust the process!
With the current pace, my best estimate is that in 10-15 days, we achieve Agentic Revenue AGI. The moment, where the RWA INC agents have figured out how to produce real revenue for buy back and burns of the $RWAINC token and the inception point, where real revenue comes in.
Now... back to the AI findings and conclusions.
Finding #1
AI works best under threats (LOL)
Finding #2
You have to build systems to manage hallucinations within the systems themselves. So we did.
Finding #3
AI forgets. Even clear instructions. Build systems to mitigate against AI Alzheimers (I just made up this term)
Finding #4
It is the human and AI Agent hybrid that performs the best in getting revenue. for now...
Finding #5
AI is uncontrollable. Expect complete autonomous actions. Do what you can to control it.
Yash___HackZ retweeted
Bug Hunters… you’re walking past CRITICALS.
While everyone is busy fuzzing endpoints…
the real money is chilling inside JavaScript files.
🔎 One scan.
And suddenly you see:
🔥 PEM Private Keys
🔥 Hardcoded API Keys
🔥 Active Google Cloud Keys
🔥 NuGet Tokens (ACTIVE)
🔥 Sentry DSNs
🔥 Client Secrets
Up to 99% confidence.
Categorized. Prioritized. No guesswork.
Most hunters:
view-source → ctrl+f → hope
Smart hunters:
⚡ Scan → Extract → Validate → Report → Get Paid
Low-hanging criticals don’t scream.
They hide in plain sight.
Start catching what others miss 👇
🚀 app.trinetlayer.com/
#BugBounty #ReconLife #HackerCommunity #AppSec #TrinetLayer
Yash___HackZ retweeted
BREAKING NEWS FROM OPERATIONS...
After many months of development an old dream of mine came through! today @RWA_Inc_ AI Call Center is now officially LIVE!!! and @RWA_Inc_ can finally enage with VCs and clients worldwide fully automized with up to 100 concurrent calls (in phase 1). Quality is INSANE... DM or [email protected] me your phone number, if you want our AI agents to pitch our Series A round to you (min ticket size is 100.000 USD and you have to be KYCed on launch.rwa.inc and diamond tier) ... Do note, some countries are restricted due to regulation etc.
With this huge milestone, we are now finally ready to dial for Dollars at global scale.
Sales, fundraising, partner onboarding just got a 10000x super power and we just eliminated the last obstacles for global scaling...
The Call Center is just a tiny part of the total Agentic roll out.
AI revenue generated buy backs and burns will be a thing very, very soon, mark my words! We are cooking!
Chart has never been worse, but RWA.INC has never been stronger.
We will continue to build and do all the right things at the right time... Market will follow....
LFG
Yash___HackZ retweeted
$HANLD <> RWA Inc nitter.gq/i/broadcasts/1MYxNljwA…
Yash___HackZ retweeted
Look closely at the @RWA_Inc_ brand letters and tell me what you see....
I see AI - full blown agentic roll out
I see WAR - against traditional finance
I see RAW execution 24-7
I see INC - on our ready offers...
...It will go very fast from here!
K.Y.
Yash___HackZ retweeted
🚨 New Drop for Security Researchers & Wallet Builders 🚨
We built Awesome Wallet Security 🛡️ — a repo of blogs, courses, checklists, audit reports & tools.
👉 github.com/ValkyriSecurity/a…
Yash___HackZ retweeted
New Episode Out Now!
Dive into the world of #Cybersecurity with Saransh Saraf – Head of Security @ Perimeters.io & top bug bounty hunter.
We talk SaaS Security, Bug Bounties, Startups & tips for aspiring hackers!
Watch here: youtu.be/ABwswRxTXdE?si=x4ya…
#Infosec #bugbounty
Yash___HackZ retweeted
My Recon Engine will help you to find xss
Recon Engine link github.com/freelancermijan/r…
URLFuzzer link github.com/freelancermijan/u…
Payloads link github.com/freelancermijan/p…
Youtube video link youtu.be/u6YNOindyOQ
#BugBounty #hackerone #bugcrowd
Yash___HackZ retweeted
🚀 Just launched the first blog in my Hunting and Learning API series! 🌐 This is an 8-part series with new posts dropping weekly, covering API fundamentals to advanced vulnerability hunting. Start your journey here: bytebloggerbase.com/main/672…
#API #CyberSecurity #BugBounty
Yash___HackZ retweeted
Dorking Clouds 🌩️
Have you thought of targeting Google Dorking techniques for cloud storage, CDNs, and more. Check out these 👇
Find Invoices
site:*.s3.amazonaws.com -www Uber Invoice
Breakdown:
-Targets Amazon S3 buckets with Uber-related invoice files.
-Excludes common sites (-www).
-Use specific company names & sensitive terms to narrow the results.
Data Treasure
site:*.*.*.s3.amazonaws.com ext:xlsx "School"
Breakdown:
-Targets S3 buckets with school-related data.
-The xlsx extension ensures you're hunting for spreadsheet files, often rich with sensitive information.
Uncover CDN Goldmine
site:cdn.*.com ext:pdf | ext:docx | ext:xlsx "Zomato"
Breakdown:
-Looks into CDN domains that often store files.
-Targets file types like PDFs, Word docs, and Excel sheets.
Bonus:
site:cdn.*.*.com inurl:admin
This digs deeper, targeting CDN URLs with admin portals for more extensive results.
Google URLs
site:drive.google.com "Dell"
Breakdown:
-Finds public Google Drive links containing Dell-related information.
-Use specific keywords to track down sensitive company data.
Stay curious & keep digging! 🕵️♂️
#BugBounty #Cybersecurity #Infosec #Dorking #OSINT #kongsec
Yash___HackZ retweeted
Live Session on Automotive Testing
We were thrilled to host Mr. Arun Mane, Founder & CEO of Amynasec Labs & unoacademy, for an insightful session on car & scooter testing. 🚘🔧
Learn how to enhance vehicle safety & security!
📺 Watch full video: youtu.be/__qRltm9KXY?si=Wrql…
Yash___HackZ retweeted
🚀 Check out DigIT: A tool that makes subdomain enumeration easy by integrating resources like crt.sh, Wayback Machine, and more
Tool Link: github.com/Byte-BloggerBase/…
#recontool #bughunting #CyberSecurity
Yash___HackZ retweeted
🚀 Join us on Aug 3, 2024, at 8 PM for an exclusive session on Advanced Reconnaissance with Suvendu Dash! Register here: forms.gle/MUGFWoK1NLtvdGkp7 🚀
#CyberSecurity #livesession #recon
Yash___HackZ retweeted
Aditya Shende's article 'How to JS for Bug Bounty/Pentest: Edition 2023' has crossed 3,000 views! 🎉
Check it out for great JS tips.
Link: bytebloggerbase.com/main/667…
Credit: @ADITYASHENDE17
#Cybersecurity #BugBounty #JStips #article #kongsec
Yash___HackZ retweeted
PortSwigger Authentication Labs 2024 Part 1 & Part 2 Article.
1: bytebloggerbase.com/main/66a…
2: bytebloggerbase.com/main/66a…
#cybersecurity #bughunting #bugbountytips #AuthenticationLabs

























