BlueBook @BlueBookSpace
The New Age of AI and Cybersecurity Begins. BlueBook Joined October 2024-
Tweets30
-
Followers23
-
Following1
-
Likes0
The Bluebook website is under construction…
Exploring a machine learning project focused on airline passenger satisfaction prediction. The workflow includes data preprocessing, exploratory analysis, and classification models such as Random Forest, XGBoost, and LightGBM to predict customer satisfaction levels. A solid demonstration of how analytics can support operational and business decision-making. github.com/aliabyar1998/a…
Join to my Telegram Channel. t.me/exploitdevelop…
ready for another big project?
it's an advanced CVE intelligence with exploit tracking, risk scoring, and threat analysis. - Search about a CVE - Find Exploit about a CVE - Explain about vulnerabilities - Package lookup : ex. npm, PyPI, Go, Maven via OSV. - Known Exploited Vulnerabilities Catalog
ready for another big project?
Almost done.
it's an advanced CVE intelligence with exploit tracking, risk scoring, and threat analysis. - Search about a CVE - Find Exploit about a CVE - Explain about vulnerabilities - Package lookup : ex. npm, PyPI, Go, Maven via OSV. - Known Exploited Vulnerabilities Catalog
I'm building a tool that automates every possible OWASP WSTG 4.2 test on a target. Because the best pentesters don't waste time on repetition, they focus on what machines can't do.
Fuck @claudeai , just Mimo Code by @Xiaomi .
A next-generation AI coding assistant for developers. Unlimited context lets you understand, build, and collaborate more efficiently. - curl -fsSL mimo.xiaomi.com/install | bash
mattew crawls target websites, extracts hidden attack surface, runs security analysis, fingerprints technology, and generates professional reports , all in one command. github.com/exploitcve/mat…
Raven is a powerful and customizable web crawler written in Go. github.com/exploitcve/Rav…
How to Perform Session Hijack with XSS + Session Fixation When the Session Cookie is HttpOnly 1. Create a session cookie with an unauthenticated session value on the /login path using JavaScript. 2. Force the user to log out. 3. When the user logs back in, they will use the unauthenticated session. The attacker creates a session cookie on another browser, then injects that session into the victim's account by overriding the existing HttpOnly cookie with a similar cookie name but a different value on a different path. sess=aaaa; path=/login; expires=Fri, 17 Jun 2024 10:00:00 When the login form is submitted, it will contain two cookies. The one created with JavaScript on the /login path will be first, followed by the HttpOnly cookie on the different path /. Cookie: sess=aaaa; sess=bbbb; Since the website has a Session Fixation bug, no new session will be generated when the user logs in. Because there are two session cookies, only the first one from the attacker (sess=aaaa) will be used, and the logged-in user will be attached to it. The final step is to use the unauthenticated session that was previously created on the attacker's browser for all website actions from the attacker's side.
The following payload demonstrates an effective Akamai WAF bypass under specific conditions. It relies on a combination of URL-encoded and Unicode-encoded characters, making it suitable for applications that invoke decodeURIComponent before the input is evaluated within a JavaScript or JSON context. During the decoding process, the Unicode sequences are reconstructed, allowing the malicious JavaScript to execute and successfully achieve XSS. html Click
FavFreak uses favicon hashes to help identify the technologies and products running behind a target, turning a tiny icon into valuable reconnaissance. github.com/devanshbatham/…
That’s all.
People lie with words. Shoes, however, never do.
Cariddi is where the interesting part begins. github.com/edoardottt/car… It crawls web applications, extracts endpoints, JavaScript references, API routes, parameters, secrets, and other hidden attack surface, turning scattered data into something you can actually investigate.
Good operators don’t waste time repeating the same steps. They automate them, Osmedeus turns reconnaissance into a repeatable operation, linking discovery, enumeration, and validation into a single workflow. github.com/j3ssie/osmedeus
Recon isn’t about running more tools. It’s about building a process you can trust.
Addison Neasy @AddisonNea84523
1 Followers 165 Following Recruiting webshell engineers to penetrate websites, with a monthly salary of up to $100,000. If in terested, please contact https://t.co/b6IVzAzzky
Fat @fattselimi
18K Followers 11K Following Chasing Positive vibes only & Ethical Hacking for fun and profit🧑🍳 https://t.co/NBYkYFb5V0 https://t.co/GucPN5Kvjp
Tran Van Nhan @thevietronin
4 Followers 315 Following
Iv0t @Iv0t_
228 Followers 2K Following
chees li @chees_li37907
0 Followers 90 Following
Ayush @r00t_ak
89 Followers 2K Following Nothing, just a noob and trying to learn new things🙂 Beg Bounty Security Researcher | CTF player
Sascha T. @Sascha_To
278 Followers 2K Following i trick rocks into thinking (no not AI) please talk to me I'm terminally lonely dc: sascha_t
Thiago Vieira @MustPlayBr
44 Followers 2K Following He/Him. 25 / Brazil. Im learning how to draw ( my hobby I think)/I like any kind of music
Hariharasudhan_C | C_... @zharivsc
606 Followers 7K Following aManFrmUnkwnWrld,lrnHwThingsWrkInThe🌎.EngrBy #Linux UsrBy #FreeBSD BlveInSymbiotic&✌️PtypeSC.Dreamer.RspctEvry1'sPvcy #kill -9 ego.A Proud Asli முடிச்சவிக்கி🦂
Axel Perez @Lobonoc08
0 Followers 58 Following
st_user @soc127_0_0_1
245 Followers 611 Following 努力就好 セキュリティの淀み役 肝臓を捧げてます。 好きな曲置いとく https://t.co/HxukQmcxHZ
ixtro z @ixtrooo
21 Followers 468 Following Security researcher, zero day hunter , breaking into AGI modelling x quantum computing to feed a request variable topology :p
Trends for United States
You might like
