Yash___HackZ (@HackzYash) profile picture

Bug Bounty Hunter | EJPT V2 | Web3

India
Joined June 2021
Photo by Yash___HackZ (@HackzYash)Photo by Yash___HackZ (@HackzYash)Photo by Yash___HackZ (@HackzYash)Photo by Yash___HackZ (@HackzYash)Photo by Yash___HackZ (@HackzYash)Photo by Yash___HackZ (@HackzYash)Photo by Yash___HackZ (@HackzYash)Photo by Yash___HackZ (@HackzYash)Photo by Yash___HackZ (@HackzYash)Photo by Yash___HackZ (@HackzYash)
Yash___HackZ retweeted
Try this: Bug hunters just dropped GhostJS Burp Extension. It passively scans JS, HTML, and JSON for secrets. API keys, tokens, endpoints. Zero config, 150 plus patterns, totally free. Install, browse, let it hunt github.com/trinetlayer/Ghost…
1
70
2
457
29,341
Yash___HackZ retweeted
Think you can break AI? Try: ai.trinetlayer.com/ Practice real Prompt Injection attacks Use Learn Mode to understand step by step Don’t just use AI — learn how to break it (ethically) #AI #CyberSecurity #PromptInjection #BugBounty #Infosec
1
4
442
Sometimes it is easier to draw than explain...
4
12
1
34
1,283
Important notice. Official company announcements and news happens on the official @RWA_Inc_ channels. This is my personal account, where I share news directly from the RWA INC machine room, my thoughts and where I produce articles to inform more about investment, blockchain, ai and entrepreneurship. At the moment, I cover my daily discoveries with the RWA INC AI agentic autonomous system! I consider this the most important work I have ever done. You should pay close attention as well. Understand, that we are transforming @RWA_Inc_ yet again. This time to the most future proof and high performing small startup in the Web3 space! Value is created as you read this beyond imagination. Trust the process! With the current pace, my best estimate is that in 10-15 days, we achieve Agentic Revenue AGI. The moment, where the RWA INC agents have figured out how to produce real revenue for buy back and burns of the $RWAINC token and the inception point, where real revenue comes in. Now... back to the AI findings and conclusions. Finding #1 AI works best under threats (LOL) Finding #2 You have to build systems to manage hallucinations within the systems themselves. So we did. Finding #3 AI forgets. Even clear instructions. Build systems to mitigate against AI Alzheimers (I just made up this term) Finding #4 It is the human and AI Agent hybrid that performs the best in getting revenue. for now... Finding #5 AI is uncontrollable. Expect complete autonomous actions. Do what you can to control it.
6
10
27
1,156
Yash___HackZ retweeted
Bug Hunters… you’re walking past CRITICALS. While everyone is busy fuzzing endpoints… the real money is chilling inside JavaScript files. 🔎 One scan. And suddenly you see: 🔥 PEM Private Keys 🔥 Hardcoded API Keys 🔥 Active Google Cloud Keys 🔥 NuGet Tokens (ACTIVE) 🔥 Sentry DSNs 🔥 Client Secrets Up to 99% confidence. Categorized. Prioritized. No guesswork. Most hunters: view-source → ctrl+f → hope Smart hunters: ⚡ Scan → Extract → Validate → Report → Get Paid Low-hanging criticals don’t scream. They hide in plain sight. Start catching what others miss 👇 🚀 app.trinetlayer.com/ #BugBounty #ReconLife #HackerCommunity #AppSec #TrinetLayer
1
1
3
458
BREAKING NEWS FROM OPERATIONS... After many months of development an old dream of mine came through! today @RWA_Inc_ AI Call Center is now officially LIVE!!! and @RWA_Inc_ can finally enage with VCs and clients worldwide fully automized with up to 100 concurrent calls (in phase 1). Quality is INSANE... DM or [email protected] me your phone number, if you want our AI agents to pitch our Series A round to you (min ticket size is 100.000 USD and you have to be KYCed on launch.rwa.inc and diamond tier) ... Do note, some countries are restricted due to regulation etc. With this huge milestone, we are now finally ready to dial for Dollars at global scale. Sales, fundraising, partner onboarding just got a 10000x super power and we just eliminated the last obstacles for global scaling... The Call Center is just a tiny part of the total Agentic roll out. AI revenue generated buy backs and burns will be a thing very, very soon, mark my words! We are cooking! Chart has never been worse, but RWA.INC has never been stronger. We will continue to build and do all the right things at the right time... Market will follow.... LFG
3
18
60
3,496
Look closely at the @RWA_Inc_ brand letters and tell me what you see.... I see AI - full blown agentic roll out I see WAR - against traditional finance I see RAW execution 24-7 I see INC - on our ready offers... ...It will go very fast from here! K.Y.
2
12
40
911
Yash___HackZ retweeted
🚨 New Drop for Security Researchers & Wallet Builders 🚨 We built Awesome Wallet Security 🛡️ — a repo of blogs, courses, checklists, audit reports & tools. 👉 github.com/ValkyriSecurity/a…
2
8
4
45
5,921
Yash___HackZ retweeted
New Episode Out Now!
Dive into the world of #Cybersecurity with Saransh Saraf – Head of Security @ Perimeters.io & top bug bounty hunter. We talk SaaS Security, Bug Bounties, Startups & tips for aspiring hackers! Watch here: youtu.be/ABwswRxTXdE?si=x4ya… #Infosec #bugbounty
1
1
3
353
My Recon Engine will help you to find xss Recon Engine link github.com/freelancermijan/r… URLFuzzer link github.com/freelancermijan/u… Payloads link github.com/freelancermijan/p… Youtube video link youtu.be/u6YNOindyOQ #BugBounty #hackerone #bugcrowd
4
55
236
12,732
Yash___HackZ retweeted
🚀 Just launched the first blog in my Hunting and Learning API series! 🌐 This is an 8-part series with new posts dropping weekly, covering API fundamentals to advanced vulnerability hunting. Start your journey here: bytebloggerbase.com/main/672… #API #CyberSecurity #BugBounty
1
4
18
1,421
Yash___HackZ retweeted
Dorking Clouds 🌩️ Have you thought of targeting Google Dorking techniques for cloud storage, CDNs, and more. Check out these 👇 Find Invoices site:*.s3.amazonaws.com -www Uber Invoice Breakdown: -Targets Amazon S3 buckets with Uber-related invoice files. -Excludes common sites (-www). -Use specific company names & sensitive terms to narrow the results. Data Treasure site:*.*.*.s3.amazonaws.com ext:xlsx "School" Breakdown: -Targets S3 buckets with school-related data. -The xlsx extension ensures you're hunting for spreadsheet files, often rich with sensitive information. Uncover CDN Goldmine site:cdn.*.com ext:pdf | ext:docx | ext:xlsx "Zomato" Breakdown: -Looks into CDN domains that often store files. -Targets file types like PDFs, Word docs, and Excel sheets. Bonus: site:cdn.*.*.com inurl:admin This digs deeper, targeting CDN URLs with admin portals for more extensive results. Google URLs site:drive.google.com "Dell" Breakdown: -Finds public Google Drive links containing Dell-related information. -Use specific keywords to track down sensitive company data. Stay curious & keep digging! 🕵️‍♂️ #BugBounty #Cybersecurity #Infosec #Dorking #OSINT #kongsec
3
87
5
318
27,189
Live Session on Automotive Testing We were thrilled to host Mr. Arun Mane, Founder & CEO of Amynasec Labs & unoacademy, for an insightful session on car & scooter testing. 🚘🔧 Learn how to enhance vehicle safety & security! 📺 Watch full video: youtu.be/__qRltm9KXY?si=Wrql…
1
1
250
🚀 Check out DigIT: A tool that makes subdomain enumeration easy by integrating resources like crt.sh, Wayback Machine, and more Tool Link: github.com/Byte-BloggerBase/… #recontool #bughunting #CyberSecurity
3
4
187
🚀 Join us on Aug 3, 2024, at 8 PM for an exclusive session on Advanced Reconnaissance with Suvendu Dash! Register here: forms.gle/MUGFWoK1NLtvdGkp7 🚀 #CyberSecurity #livesession #recon
1
3
191
Aditya Shende's article 'How to JS for Bug Bounty/Pentest: Edition 2023' has crossed 3,000 views! 🎉 Check it out for great JS tips. Link: bytebloggerbase.com/main/667… Credit: @ADITYASHENDE17 #Cybersecurity #BugBounty #JStips #article #kongsec
4
1
14
3,393
Yash___HackZ retweeted
Dear Content Creators, aka so-called influencers, Why not try hunting bugs and earning money with the same content you're sharing with the public? So, kindly stop fooling them to gain followers, because this isn't LinkedIn where no one will say anything. This is X (Twitter).
21
9
5
129
19,060