339
Subscribers
No data24 hours
+47 days
+2830 days
Data loading in progress...
Similar Channels
No data
Any problems? Please refresh the page or contact our support manager.
Tags Cloud
Incoming and Outgoing Mentions
---
---
---
---
---
---
Attracting Subscribers
May '25
May '25
+2
in 1 channels
April '25
+36
in 2 channels
Get PRO
March '25
+342
in 4 channels
| Date | Subscriber Growth | Mentions | Channels | |
| 03 May | 0 | |||
| 02 May | +1 | |||
| 01 May | +1 |
Channel Posts
Python for Cybersecurity
A collection of a few dozen small #Python scripts to solve various problems related to pentest and #cybersecurity.
Contributor hposton
https://github.com/hposton/python-for-cybersecurity
| 2 | [𝐅𝐑𝐄𝐄 𝐑𝐄𝐒𝐎𝐔𝐑𝐂𝐄𝐒 - 𝐁𝐔𝐆 𝐁𝐎𝐔𝐍𝐓𝐘]
Want to get into Bug Bounty? Here is a list of resources
👉 A great introduction on how to get into bug bounty by Katie Paxton-Fear
https://lnkd.in/eEf6b5AN
👉 A list of bug bounty platforms by disclose
https://lnkd.in/e27qdTkn
👉 A list of bug bounty programs by vpnmentor:
https://lnkd.in/eECUuYgp
👉 Want to apply to the Synack Red Team Artemis program?
An exclusive community open to security professionals who identify as women, trans and nonbinary people, and others who identify as a gender minority. See this link:
https://lnkd.in/eD_XDm4j
👉 Farah Hawa has a great video about bug bounty resources:
https://lnkd.in/ea-Nn2KB
👉 The Bug Hunter Handbook by Gowthams
https://lnkd.in/eW6awYWU
👉 A repo “AllAboutBugBounty” by daffainfo
https://lnkd.in/evPuwGKZ
🚨🚨 𝐒𝐇𝐀𝐑𝐄 - Do you know other resources? Please share them
Credits:- Gabrielle B
Shared by @Cybertrickszone
Telegram:- https://telegram.me/cyber_tricks_zone | 737 |
| 3 | +2 Follow @CYBER_TRICKS_ZONE | 176 |
| 4 | ![[CHFI] - Computer Hacking Forensic Investigator](data:image/jpeg;base64,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){kind=small} [CHFI] - Computer Hacking Forensic Investigator | 160 |
| 5 | #tools
#Offensive_security
1. Juumla - python tool created to identify Joomla version, scan for vulnerabilities and sensitive files
https://github.com/oppsec/juumla
2. Keres - Powershell rev-shell backdoor with persistence
https://github.com/ELMERIKH/Keres
3. SingleDose - framework to build shellcode load/process injection techniques
https://github.com/Wra7h/SingleDose | 156 |
| 6 | 🚀 Bug Bounty Hunters!
Found an interesting target—https://cyscan.io/. URL scanners can be vulnerable to SSRF, Open Redirects, or XSS.
🔍 Test scan parameters
🕵️ Check User-Agent handling
🌐 Analyze external content fetching
#BugBounty #BugHunting #CyberSecurity #EthicalHacking | 124 |
| 7 | DHRUV RATHEE - Master CHATGPT With Latest Chapter 8
Selling Page:
https://dhruvrathee.tagmango.ai/web/checkout/64abb0433fcf6e1fc7bdb47b
Above course is available to sell at cheap price dm me for buy
@PROTOCOLNICK | 133 |
| 8 |  "Wishing you a vibrant and joyous Holi filled with colors, laughter, and unforgettable moments! May this festival bring happiness, love, and prosperity to your life. Celebrate the spirit of togetherness and make beautiful memories! Happy Holi!" | 1 034 |
| 9 | https://t.me/code_security_vault | 119 |
| 10 | *CertScanPro - SSL Certificate & Subdomain Extractor*
CertScanPro is a PowerShell-based tool designed to extract SSL certificate data and subdomains from a target domain using the crt.sh API. Additionally, it checks the HTTP status codes of discovered subdomains and presents them in both the terminal and an optional HTML report.
> git clone https://github.com/Dit-Developers/CertScanPro.git
> cd CertScanPro
> .\CertScanPro.ps1
*Try on windows ⚠️* | 116 |
| 11 |  🇮🇳♥️🏏 | 87 |
| 12 | *Mobile Penetration Testing Guide (MPTG) with Exploit*
Mobile penetration testing is an essential domain in cybersecurity, enabling security professionals to identify vulnerabilities within mobile applications and devices. With the increasing use of smartphones for sensitive transactions, ensuring mobile security is paramount. This guide delves into advanced penetration testing methodologies, focusing on Android exploitation using the Android Debug Bridge (ADB), Metasploit Framework, and various persistence mechanisms.
GitHub Repo :
https://github.com/Dit-Developers/MPTG | 135 |
| 13 | Shared by @cyber_tricks_zone | 780 |
| 14 | https://chat.whatsapp.com/HRsybxWS6Ia3MSndM4N0Dj
Join whatsapp group | 118 |
| 15 |  CIA model explained | 114 |
| 16 | Prototype Pollution Vulnerability
Prototype Pollution is a security vulnerability in JavaScript that allows an attacker to add arbitrary properties to the prototype (the root object) of a general object. This enables an attacker to modify object properties that would typically be inaccessible.
However, this vulnerability alone is not always exploitable. To increase its impact, an attacker often combines it with other vulnerabilities like Cross-Site Scripting (XSS) to execute malicious actions.
━━━━━━━━━━━━━━━━━━
Understanding JavaScript Object Prototypes
In JavaScript, everything is an object. An object is essentially a collection of key-value pairs where values can be of any data type, such as boolean, string, integer, etc.
Creating an object in JavaScript is simple:
let userInfo = {
"username": "admin",
"password": "1qaz2wsx3edc",
"email": "admin@victim.com"
};
To access properties of this object, we can use two methods:
1-Dot notation:
userInfo.username;
Bracket notation:
userInfo["username"];
One of these methods is used for polluting the prototype of an object.
━━━━━━━━━━━━━━━━━━
How Prototype Pollution Works
When a property of an object is accessed, the JavaScript engine first looks for it inside the object itself.
•If the property does not exist in the object, JavaScript traverses up the prototype chain to find it in the parent prototype.
To better understand this, open the browser Console and create an object. JavaScript will automatically connect it to one of the built-in prototypes based on its type.
Example:
var name = "Arya";
console.log(name.proto);
Since "Arya" is a string, it inherits all properties from JavaScript's String prototype.
Using dot notation or bracket notation, we can see various inherited properties that were not explicitly defined.
Moreover, we can manually reference an object's prototype using:
a.proto;
Exploiting Prototype Pollution
If an attacker overwrites a property in a prototype that is being used in the frontend or backend of a web application, it can lead to serious security issues.
━━━━━━━━━━━━━━━━━━
Testing for Prototype Pollution
To test for Prototype Pollution, modify the URL as follows and send a request:
1️⃣ Dot Notation Approach
http://target.com/?proto.arya=arya
2️⃣ Bracket Notation Approach
http://target.com/?proto[arya]=arya
Bypassing WAF (Web Application Firewall)
If the WAF blocks the proto keyword, we can use constructor-based techniques:
/?constructor.prototype.arya=arya
/?constructor[prototype][arya]=arya
If the WAF still blocks requests, we can use nested obfuscation techniques:
/?proprototo[arya]=arya
/?proprototo.arya=arya
/?constconstructorructor[protoprototypetype][arya]=arya
/?constconstructorructor.protoprototypetype.arya=arya
Confirming
the Vulnerability
To check if the property was successfully polluted, create an empty object in the browser console and try accessing the polluted property:
let test = {};
console.log(test.arya); // Output: " arya"
If the property value appears, the Prototype Pollution vulnerability exists on the target system.
━━━━━━━━━━━━━━━━━━
Conclusion
Prototype Pollution is a powerful vulnerability that, when combined with other exploits, can lead to serious security risks. Understanding how JavaScript's prototype system works is essential for both attackers and defenders to identify and mitigate such threats effectively.
https://t.me/hacking_vidhya
#CyberSecurity #MSSQL #EthicalHacking
#PrototypePollution
#JavaScriptSecurity
#WebSecurity
#BugBounty
#EthicalHacking
#CyberSecurity
#SecurityResearch
#WebHacking | 128 |
| 17 |  OSCE³ and OSEE Study Guide
Checkout on GitHub
https://github.com/CyberSecurityUP/OSCE3-Complete-Guide | 79 |
| 18 | Angela Yu - Full Stack Web Development Course 2022
Link:1
https://drive.google.com/drive/folders/1h61cgJCELuyHklTGG_PfEuJ3LiGbZys0?usp=sharing
Link:2
https://drive.google.com/drive/folders/1gt2-fMgI-vBBaLsjc7Fvnmoyt52CtuI0?usp=sharing
Shared by @[CYBERTRICKSZONE] ©✓
Telegram: https://telegram.me/cyber_tricks_zone | 974 |
| 19 |  TCM PENTESTER ROADMAP | 86 |
| 20 | ⬇️ Our TELEGRAM Group's And Channel's ⬇️
https://t.me/cybertrickszone0 ==> Main Channel
https://t.me/INDIANCYBERWARRIOR ==> Main Group
https://t.me/+kR-MfUSov1xhYTBl ==> Ebooks, handwritten notes PDF Channel
CTZ BINS CHANNEL
==>> https://t.me/cybertrickszone_bins
OUR FACEBOOK GROUP :- https://www.facebook.com/groups/1666615317033089/
INSTAGRAM :- https://instagram.com/cybertrickszone
TWITTER :- https://twitter.com/cybertrickszone?t=-nLbfEpl0AnDHGsG1Rvupg&s=09
Our YouTube Channel ==>
https://youtube.com/c/NikhilCyberTech
2nd YT CHANNEL:- https://youtube.com/c/CyberTechwithNikhil
WHATSAPP CHANNEL -->> https://whatsapp.com/channel/0029VaGK9Jw5Ui2fHbdhX421
OUR DISCORD SERVER :- https://discord.gg/4VnzdkURxv
Linktree:- https://linktr.ee/cybertrickszone
SUPPORT OR DONATE US
Buy me a coffee - https://www.buymeacoffee.com/cybertrickszone
(Your small donation amount will motivate us to provide amazing content and resources free for everyone)
Owner Bio :- protocolnick.t.me | 78 |
