Fardeen A. 🇮🇳 🇵🇸 (@insecrez) header
Fardeen A. 🇮🇳 🇵🇸 (@insecrez) profile picture

Fardeen A. 🇮🇳 🇵🇸

@insecrez

🌐| Security Engineer 🐞| Part-Time EH ⚡️| Memer 🫂| Need professional help.? Book now 👇👇

 India
topmate.io/insecrez
Joined October 2019
  • Tweets1.7K
  • Following199
  • Followers5.4K
314Media
Photo by Fardeen A. 🇮🇳 🇵🇸 (@insecrez)Photo by Fardeen A. 🇮🇳 🇵🇸 (@insecrez)Photo by Fardeen A. 🇮🇳 🇵🇸 (@insecrez)Photo by Fardeen A. 🇮🇳 🇵🇸 (@insecrez)Photo by Fardeen A. 🇮🇳 🇵🇸 (@insecrez)Photo by Fardeen A. 🇮🇳 🇵🇸 (@insecrez)Photo by Fardeen A. 🇮🇳 🇵🇸 (@insecrez)Photo by Fardeen A. 🇮🇳 🇵🇸 (@insecrez)Photo by Fardeen A. 🇮🇳 🇵🇸 (@insecrez)Photo by Fardeen A. 🇮🇳 🇵🇸 (@insecrez)
Automated creativity gives endless possibilities, but it's your duty to maintain authenticity, for newer possibilities.
6
970
Finding CRLF Injection across wild card domains is simplest of all time now: 1. Passive subdomain enumeration - subfinder -d target.com -silent -o subdomains_subfinder.txt
2
6
44
3,190
more replies
Escalate it to:- - Reflected XSS via Response Splitting - Session Fixation - Cache Poisoning (but don't waste time here much) - Open Redirect Bypass
1
131
These steps will help you get your first CRLF Injection vulnerability, and further chaining it towards other sever issues during bug-bounty hunting. Peace and Salam✌️
134
Load more