Founder @YogSec | Helping Businesses Secure Their Websites | #BugBounty & #OSINT Tips - https://nitter.cf/t.co/ZemJJyfFSq | Goodness 😇
Meerut, India
Joined November 2024
- Tweets1.7K
- Following319
- Followers658
- Likes1.7K
Pinned Tweet
Join my Telegram channel for regular tips on SQLi, XSS, IDOR, enumeration & business logic bugs.
Telegram Channel: t.me/bugbountyusa
#CyberSecurity #BugBounty
Bug Bounty Tip: Broken Link Hijacking via Payload Fuzzing
Look for:
External domains referenced in JS files, docs, and help pages
Test payload: check for expired domains like old-cdn.target.com → try registering it
If the domain is available and still referenced, it may indicate Broken Link Hijacking, enabling JS injection or phishing under the target's brand.
For more tips join our Telegram channel: t.me/bugbountyusa
#BugBounty #BrokenLinkHijacking #PayloadFuzzing #InfoSec
CVE-2026-106074
Node.js crypto entropy cache reuse. The internal entropy caches used by crypto.randomUUID() and crypto.randomInt() are serialized into startup snapshots and single executable applications. Processes launched from the same snapshot repeat the same values until the cache refills, causing UUID collisions and predictable identifiers. Affects Node.js 22.x, 24.x, and 26.x before 22.23.4, 24.22.1, and 26.12.1. CVSS 4.8 Medium. CWE-330.
nvd.nist.gov/vuln/detail/CVE…
#CVE #NodeJS #Cryptography #entropyduo
WebVerse Pro's Overdue is an amazing beginner lab where a library catalog portal exposes other patrons' checkout records just by walking predictable IDs, a clean IDOR that separates authentication from authorization.
Lab URL: webverselabs-pro.com/labs/ov…
#WebVersePro #IDOR #BrokenAccessControl #WebSecurity #Pentesting #CTF #InfoSec #ethicalhacking
The FBI has officially attributed the massive $6.3 billion Binance crypto heist to North Korea's TraderTraitor hacking group. The breach, now the largest crypto theft on record, reportedly stemmed from a compromised DevOps engineer's laptop, granting attackers access to service containers and withdrawal systems across multiple blockchains. Binance has since resumed customer withdrawals and claims to have covered roughly 95 percent of the losses from its own reserves.
Read more: deutschlandfunk.de/fbi-macht…
#Binance #NorthKorea #CryptoHeist #CybersecurityNews
Lab Spotlight: "Taipei": Come a-knocking
Port :80 is locked behind Port Knocking. Find the one SYN that opens it, then curl localhost. Easy, 15 min, no sudo. Real-world recon skills.
👉 sadservers.com/scenario/taip…
Bug Bounty Tip: Email Header Injection via Input Signals
Look for:
Contact forms, password reset, and invite flows. Check where user input lands in outbound email headers (From, Reply To, Subject)
Test payload: [email protected]%0d%0aBcc:[email protected]. An unexpected BCC delivery or header reflection confirms injection
For more tips join our Telegram channel: t.me/bugbountyusa
#BugBounty #EmailInjection #PayloadFuzzing #InfoSec
Abhinav Singwal retweeted
Pro tip for SSRF!
Blocking 127.0.0.1 does not necessarily account for every representation a parser may resolve as loopback. Depending on the parser, that can include case variations of localhost or shorthand forms such as 127.1.
Compare validation, normalization, DNS resolution, and the final request.
Explore the Academy SSRF labs 👇
portswigger.net/web-security…
Abhinav Singwal retweeted
DuckDuckGo Dorks for Messaging Apps: Find Public Groups
Article by @NoimosinyOSINT:
Table of Contents
@duckduckgo dorks for searching for information in messaging apps
WhatsApp
Discord
WeChat/Tencent (QQ)
Telegram
LINE
Snapchat
KakaoTalk
noimosiny.com/resources/blog…
#socmint
Abhinav Singwal retweeted
The FBI has confirmed North Korea was behind the $6.3 BILLION Binance hack. But the country's crypto heists go back years.
> On October 29, more than $6 BILLION in crypto was stolen from Binance.
> The FBI identified the operation as "TraderTraitor", a North Korean cyber operation.
> The stolen funds are now being converted primarily into ethereum:native with investigators expecting the hackers to move them through DeFi and instant-swap services.
> And if you think this came out of nowhere, North Korea has been targeting crypto platforms for years.
> In March 2022, hackers linked to Lazarus Group stole approximately $620 MILLION from the Ronin Network, one of the biggest crypto hacks at the time.
> A year later, in September 2023, the group struck again, stealing $41 MILLION from crypto betting platform Stake.com.
> One name that keeps coming up in investigations into North Korea's hacking operations is Park Jin Hyok.
> Park is a North Korean programmer on the FBI's Most Wanted list.
> The US government accused him of being part of Lazarus Group and participating in a hacking conspiracy involving major cyberattacks and cryptocurrency theft.
> Then came another massive target.
> In May 2024, North Korean hackers stole $308 MILLION from Japanese exchange DMM Bitcoin.
> And in February 2025, the FBI attributed the $1.5 BILLION Bybit hack to North Korea's TraderTraitor operation.
> Now, Binance has joined that list, with more than $6 BILLION stolen but about $3B were frozen with the help of industry partners.
From Ronin to Stake, DMM Bitcoin, Bybit and now Binance, North Korean hackers have stolen BILLIONS of dollars from the crypto industry.
Abhinav Singwal retweeted
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection thehackernews.com/2026/11/ne…
Abhinav Singwal retweeted
‼️ FBI confirms North Korea's TraderTraitor hackers were behind the record $6.43 billion Binance crypto heist.
$2.85 billion in stolen assets has been frozen as investigators track the laundering of funds through Ethereum.
Full story: thehackernews.com/2026/11/fb…
Find Google API Keys in JavaScript with grep
Example:
grep -aoE "AIza[0-9A-Za-z_-]{35}" target.js | sort -u
For more tips join Telegram channel t.me/bugbountyusa
#bugbounty #googledork #recon #infosec #ethicalhacking #javascriptcourse
WebVerse Pro's TwinTone is an amazing free medium lab where a guest account's settings update lacks a field allowlist, letting you over-post role=admin, then reach an expense report title that gets evaluated as an ERB template, giving SSTI and RCE to read the flag.
Lab URL: webverselabs-pro.com/labs/tw…
#WebVersePro #SSTI #MassAssignment #RCE #WebSecurity #Pentesting #CTF #InfoSec #EthicalHacking #Ruby
This shows that no company is too big to be hacked.
It is very scary that a simple web page can trick AI to steal passwords.
Asking your AI agent to summarize a web page shouldn’t leak your one-time password. With indirect prompt injection, it can. 😈
Hidden instructions in content an AI agent reads, like an email, a web page, or even a Reddit comment, can trick it into leaking sensitive data using access it already has. Brave’s research on Perplexity Comet showed exactly that.
Swipe to learn more about indirect LLM prompt injections. 🎃
Have you found prompt injections in AI features before? Share your story in the comments! 👇
#bugbounty #HackWithIntigriti #AISecurity
Scan a web server for known vulnerabilities and misconfigurations with Nikto
nikto -h target.com
Join Bug Bounty USA Telegram channel for regular tips: t.me/bugbountyusa
#Nikto #BugBounty #WebSecurity #KaliLinux #VulnerabilityScanning
Social Engineering Awareness 💡
An attacker can say: "Hi, I'm from the apartment management office. We're updating resident records. Please confirm your unit number, ID, and bank details for the maintenance refund."
More tips on my Telegram channel: t.me/bugbountyusa
#SocialEngineering #CyberSecurity #InfoSec #ScamAlert #Phishing
Thousands of pentesting tools, one organized repo. From Nmap to Metasploit, all categorized across 50+ areas. Star it at github.com/yogsec/Hacking-To…
#cybersecurity #pentesting #hackingtools #infosec #bugbounty
Bug Bounty Tip: IDOR via HTTP Method Swap
Look for:
GET /api/invoices/123 returning 403 or 405 for another user's ID.
Test by swapping methods on the same endpoint: POST, PUT, PATCH, DELETE, or HEAD with the victim's ID, since sometimes authorization checks exist only on GET while other verbs pass through.
If a non-GET method returns or modifies another user's data, it may indicate IDOR via Method Swap, enabling data theft, unauthorized modification, or account takeover.
For more tips join our Telegram channel: t.me/bugbountyusa
#BugBounty #IDOR #MethodSwap #AccessControl #InfoSec
⚠️ Daily CVE Roundup November 1, 2026
Here are the notable CVEs disclosed or updated today:
🔴 Critical & High Severity
CVE-2026-120197 (WAVLINK WL-WN530HG4B) CVSS 9.9 (Critical).
An OS command injection vulnerability exists in the port_forward function of /cgi-bin/wapi.cgi within WAVLINK WL-WN530HG4B firmware version M_V260724.
Manipulation of the Name argument allows remote attackers to execute arbitrary commands.
The exploit has been publicly disclosed and may be actively used. The vendor was contacted regarding this disclosure.
CVE-2026-118527 (Ivanti Connect Secure) Critical.
A predictable numbers or identifiers vulnerability allows remote authenticated attackers to upload files with attacker-controlled content to a known location on disk.
This flaw is part of an exploit chain documented by Volexity, alongside CVE-2026-111357 and CVE-2026-104935, which together enable unauthenticated root-level access.
Threat actor UTA0576 has been observed exploiting this chain to target Active Directory credentials and BitLocker recovery keys.
Fixed in Ivanti Connect Secure 25.1.1.3 and 22.8R2.6. The CISA KEV remediation deadline for federal agencies is November 13.
🟡 Medium & Notable
CVE-2026-118341 (Chromium / Microsoft Edge) Critical severity.
A use-after-free vulnerability in Chromium's Modularization component.
Microsoft Edge (Chromium-based) ingests Chromium and addresses this flaw. Users should update Chrome and Edge to the latest versions.
CVE-2026-97229 (GitLab CE/EE) CVSS 10.0 (Critical).
An integer overflow or wraparound vulnerability allows unauthenticated remote code execution via crafted CI/CD regex configurations.
Affected versions include GitLab 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2.
The CISA KEV federal remediation deadline is November 1, 2026.
📢 Join our Telegram channel for daily CVE updates and cybersecurity news:
t.me/bugbountyusa
#CVE #CyberSecurity #VulnerabilityManagement #InfoSec #PatchManagement #ThreatIntelligence #SecurityAdvisory #BugBounty #DailyCVE #CyberNews