Arijit Dirghangi ๐ญ
@Arijit_Dir
Followers
100
Following
1K
Media
31
Statuses
1K
Bash Lover | Find-Hardcoded ๐ | eJPTv1 | eWPTXv2 | CTF Player โณLove to learn new things ๐ฅฐ
Kolkata, India
Joined February 2018
Hello Friends , when i am learning android pentesting i build a tool that can extract Hardcoded Api-key,Secret,token and etc . . I am release my first tools on @github GitHub Link : https://t.co/AmRTmFVBUk
#bugbountytip #androidpentesting Guys like - subscribe - share ๐
7
129
303
Final Black Friday Giveaway! Win FREE access to: โข 1 CRTP seat โข 1 CRTE seat How to participate: 1. Like 2. Comment which course youโre interested in and why 3. Repost If you've already availed the Black Friday offer, you're still eligible. Winners will be announced on Dec
476
419
634
๐๐๐๐๐๐: 100s of premium AI Agents... These exact Agents sell for $๐ฑ,๐ฌ๐ฌ๐ฌ+ ๐ฝ๐ฒ๐ฟ ๐ฏ๐๐ถ๐น๐ฑ, ๐ฒ๐ฎ๐๐ถ๐น๐... Inside the file you get: โ Lead qualification agents โ Content generation pipelines โ Appointment booking automation โ Cold outreach sequences โ Data
881
476
896
๐๐ผ๐ ๐ฎ ๐ง๐ฒ๐๐ ๐ฃ๐ถ๐ฝ๐ฒ๐น๐ถ๐ป๐ฒ ๐๐ผ๐บ๐ฝ๐ฟ๐ผ๐บ๐ถ๐๐ฒ๐ฑ ๐ฃ๐ฟ๐ผ๐ฑ ๐ถ๐ป ๐ฑ ๐ ๐ถ๐ป๐ ๐ฆ๐๐ผ๐ฟ๐๐๐ถ๐บ๐ฒ โ ๏ธ A developer added an unvetted npm package to the CI tests. That package contained hidden malwareโrunning under the ๐๐๐๐๐๐๐ service account. Since the same CI role had
0
2
4
๐จ Itโs finally here! ๐ After months of work, my Blind XSS detection framework is live: ๐ https://t.co/94rQG2mFbC This is my first open-source project, so go easy on me ๐
Thanks to everyone who supported the idea! #CyberSecurity #BugBounty #XSS #Infosec #OpenSource
github.com
A comprehensive toolkit for ethical security testing of Cross-Site Scripting (XSS) vulnerabilities. Features a CLI tool for automated payload spraying across web targets and a server component for ...
๐ Calling all #CyberSecurity pros & #BugBounty hunters! I'm a final year Cyber Security student working on an exciting project: an automated Blind XSS detection framework ๐ Could you spare 3-5 mins to fill out my survey? Your input is invaluable! https://t.co/AUv2qIaQs6
5
10
66
GIVEAWAY!! ๐ฅ Last 4 days of Hacker Summer 2025 We are giving away 1 seat of @AlteredSecurity Attacking & Defending Active Directory (CRTP). To participate - Like๐, Repost๐, and Comment๐ฌ what makes it useful to you, and follow @nikhil_mitt and @AlteredSecurity We will
92
85
130
IP whitelisting is fundamentally broken. At @assetnote, we've successfully bypassed network controls by routing traffic through a specific location (cloud provider, geo-location). Today, we're releasing Newtowner, to help test for this issue:
github.com
Abuse trust-boundaries to bypass firewalls and network controls - assetnote/newtowner
14
240
880
Four months later, the program accepted the security issue. Thanks @Hacker0x01 ๐ #BugBounty #hackerone
0
0
0
18
171
769
๐ ๐๐ฟ๐ฒ๐ฒ ๐๐ฒ๐ฟ๐๐ถ๐ณ๐ถ๐ฒ๐ฑ ๐ก๐ฒ๐๐๐ผ๐ฟ๐ธ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ ๐ฃ๐ฟ๐ฎ๐ฐ๐๐ถ๐๐ถ๐ผ๐ป๐ฒ๐ฟ (๐๐ก๐ฆ๐ฃ) ๐๐
๐ฎ๐บ - ๐ข๐๐ฟ ๐๐ถ๐ด๐ด๐ฒ๐๐ ๐๐ถ๐๐ฒ๐ฎ๐๐ฎ๐!ย ๐ Community empowerment is at the core of everything we do. ๐ค For a limited time, we are offeringย ๐๐ฅ๐๐ย access to one of our
83
924
1K
I reported a bug on December 18, 2024, but today I was informed it was marked as a duplicate of a report submitted on January 7, 2025. Really? ๐คท๐ปโโ๏ธ How is that even possible? ๐ฅฒ @Hacker0x01 please look into this ๐
0
1
1
I reported a bug on December 18, 2024, but today I was informed it was marked as a duplicate of a report submitted on January 7, 2025. Really? ๐คท๐ปโโ๏ธ How is that even possible? ๐ฅฒ @Hacker0x01 please look into this ๐
0
1
1
๐ GIVEAWAY ALERT ๐ โฌ๏ธ Today is day SIX of EIGHT days of @arcanuminfosec and friends Black Friday and Cyber Monday giveaways! Today game recognizes game. If youโve taken my classes, you know I always recommend @LearnPrompting. Today, Iโm giving away one free seat to their
maven.com
Learn how to uncover AI vulnerabilities, run real attacks, and apply defenses that secure systems in production.
114
159
273
๐จ I convinced my team to do one last giveaway! Options: https://t.co/60rsOCKTnO ๐ Full Access: $199 ๐ป Lifetime Course: $39 (includes updates) ๐ฏ 1-Month trial (no updates): $19 TWO WINNERS (1 each): - Full cert bundle - Lifetime access Enter: โช๏ธ RT + Reply with ๐ฏ
427
396
541
๐ฏ Black Friday Special+ Giveaway: Get the full course for just $29 (reg. $119) at with code 'FRIDAY2024'! https://t.co/xWSuabTpZ2 Includes: 15+ Hours of content + 100+ labs! ๐ BONUS: reply & retweet - one lucky winner gets 2 FREE course coupons (keep one, gift one)!
232
256
520
Hello Everyone, Iโm excited to share a file upload bypass technique I recently explored! In this write-up, I explain how an Nginx misconfiguration can lead to Remote Code Execution (RCE). Check it :
medium.com
Hello everyone! I hope youโre doing well. Today I will discuss an interesting bypass I got to know regarding file upload. So first I willโฆ
0
0
1
Super Blind SQL Injection- $20000 bounty | Thousands of targets still vulnerable https://t.co/u0XdH6hu0A
#infosec #bugbounty #TogetherWeHitHarder #inbbupdatesblogs
medium.com
Core Concept
1
80
334
I found a Full Account Takeover via Facebook OAuth Misconfiguration More details: https://t.co/sOAU09qD3d
#BugBounty #bugbountytip #bugbountytips #bugcrowd
medium.com
hello everyone!
2
54
277
๐ฐ 90-Day Cybersecurity Study Plan ๐ฐ This repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks, covering topics such as Network+,
0
50
155
Hello Everyone, This is my first write-up, where I have explained how small thing can create bigger impact, let me know everyone your thoughts and suggestions https://t.co/D7U92Tqc1g
medium.com
Hello everyone! I hope youโre doing well. Iโm Arijit Dirghangi, a security enthusiast like you currently focused on web applicationโฆ
0
0
1