Pinned Tweet
Just Updated my Subdomain Enumeration Guide with new techniques, fixes, etc.
Have a look 😊
Boost your Recon game !!🚀🚀
sidxparab.gitbook.io/subdoma…
#bugbounty #infosec
Siddhesh Parab retweeted
Checkout my CRTO Review which i recently published on my blog.
an0nud4y.com/writeups/crto-r…
#crto #redteam #infosec #blog
Siddhesh Parab retweeted
I've finished my first Medium blog! Decided to start a series of blogs looking at the #infrastructure of hosting providers.
First up: #ChangWayTechLtd 🧐
Going in cold or from a trigger such as an incident and seeing what else I can find:
medium.com/@joshuapenny88/ho…
Findings 👇
Siddhesh Parab retweeted
To celebrate 10.000 followers on #Twitter and as a sign of appreciation to all of you, I partnered with @GreyNoiseIO. Together, we are giving away 3x 3 months access to #Greynoise #VIP. Additionally, all 3 winners will get a free Greynoise T-Shirt !
Rules below:
1/2
Siddhesh Parab retweeted
Have you ever wondered how one can overwrite the code runtime to bypass certain restrictions? I’ve published a blog on writing a Frida script to do the same on Android.
If you are enthusiastic about Android Security/Pentesting , you can check this out.
bit.ly/3Dme00i
Siddhesh Parab retweeted
Just posted a massive blog on my experience job hunting in these strange times that ended in me getting hired on Google's red team. It's basically a long list of "lessons learned" from my 5ish month long job search. Enjoy!
grahamhelton.com/blog/jobs/
Siddhesh Parab retweeted
Free Malware Analysis Course, covers malware concepts, malware analysis, and black-box reverse engineering techniques
class.malware.re/
#cybersecurity #malware
Siddhesh Parab retweeted
My two reports are disclosed publicly in GoogleVRP :)
You can check them here
bughunters.google.com/report…
#bugbountytips #BugBounty #Google #googlevrp #ssrf #bugbountytip
Siddhesh Parab retweeted
Here's my video showcasing email and phone phishing scenarios with the new .zip domains.
Making .zip domains look like real .zip download files and using file explorer to open .zip urls.
youtu.be/PMcVYHQIoF8
Siddhesh Parab retweeted
🚨SPOILER ALERT🚨
Evilginx 3.0 changelog sneak peek for the upcoming May 10th release. 🪝🐟
Siddhesh Parab retweeted
Web UI you said? Nothing more to say #micdrop
#reconftw new release, highlights over here ⬇️
Just a big shoutout to the devs of new additions like @n0kovo @hakluke @lc @r0oth3x49 and the web UI creator master @lur1el1
#bugbounty #hacking #recon
Siddhesh Parab retweeted
Check out my Talk on "Hacking Cloud For Fun and Profit" at IWCON22 (2nd Edition) by @InfoSecComm
Demonstration of using @pdiscoveryio CloudList Tool
youtube.com/watch?v=7hn1Qsbj…
#cloudlist #bugbounty #infosec #iwcon
Siddhesh Parab retweeted
Ever wondered what the fascinating world of #Marvel characters can teach us about #cybersecurity?
PDF - linkedin.com/feed/update/urn…
#Superheroes #Infosec #CyberDefense #DigitalForensics #RiskManagement #informationsecurity #security #bugbounty #appsec #inspiration #share #cyber
Siddhesh Parab retweeted
reconFTW has recently reached 4K stars on @github 😱
Thanks for the support, soon there will be interesting news in the main branch, stay tuned!
github.com/six2dez/reconftw
#reconftw #recon #BugBounty #hacking
Siddhesh Parab retweeted
🔥 Puredns v2.1.0 has been released!
This update comes with quality of life features:
☑ Bruteforce many domains at once
☑ Specify bruteforce location in domain
☑ Flag to use trusted resolvers only
☑ ...more!
🚨 Please RT and like for reach! ♥🤗
github.com/d3mondev/puredns/
Siddhesh Parab retweeted
So apparently I don't like to sleep and I did this:
- Diff between my 4 most used tools for perms/alts
- Includes output total lines, number of resolved and the % of resolved (~accuracy?)
- The uniqueness section is the number of unique resolved results compared between them
Siddhesh Parab retweeted
1/ 🚀 Happy to release the Burp VPS Proxy extension!
Inspired by @honoki, it creates cloud proxies in Burp Suite to dodge WAF IP bans⚡️ It supports AWS, DigitalOcean & Linode initially.
🔥 Please help spread the word if you'd like! 🫶🤗
Check it out 👇🏻
github.com/d3mondev/burp-vps…
Siddhesh Parab retweeted
I'm pleased to publish a blog post about the "Introduction to Beacon Object Files" in detail, targeting CobaltStrike.
👉Blog:
blog.shashwatshah.me/2023/03…
#cybersecurity #redteam #infosec #cobaltstrike