CipherEra Profile Banner
Deepak Choudhary Profile
Deepak Choudhary

@CipherEra

Followers
2K
Following
166
Media
69
Statuses
268

Senior Security Tester 🇮🇳 | #WayToInject #RandomTips

Patna, India
Joined March 2016
Don't wanna be here? Send us removal request.
@CipherEra
Deepak Choudhary
10 months
#RandomTips. Default Credential Lead With Access To Dashboard Using Shodan Dork. #CipherEra #bugbounty #bugbountytips #bughunting #cybersecurity #shodan #dorks #Recon #offensivesecurity
Tweet media one
0
9
37
@CipherEra
Deepak Choudhary
11 months
Subdomain => 4 => After opening the subdomain I found all the Multiple ongoing and closed projects, with Project manager Information, Internal Teams Information, and Client Information. #CipherEra #bugbounty #bugbountytips #bughunting #cybersecurity.
0
1
3
@CipherEra
Deepak Choudhary
11 months
#RandomTips . Sensitive Data Exposure Via Google Dork. 1=> Tetsing on huge scope program. Domain => *.example.com. 2 => Started recon via google dork. I'll use multiple dorks but this one hit. Dork => site:*.example.com inurl:'@gmail.com'. 3 => Found Interested subdomain.
1
9
49
@CipherEra
Deepak Choudhary
1 year
Tweet media one
1
16
54
@CipherEra
Deepak Choudhary
1 year
3 => I can access the Dashboard just by navigating the URL without having to authenticate on the website. #CipherEra #bugbounty #bugbountytips #bughunting #cybersecurity.
0
0
4
@CipherEra
Deepak Choudhary
1 year
#RandomTips . Unauthorized Access To Admin Panel. 1 => After discovering a subdomain, I chose . to carry out my testing there. subdomain => *.example.com. 2 => For additional testing, I located the . login panel using the public tools.
3
19
71
@CipherEra
Deepak Choudhary
1 year
RT @TheSecOpsGroup: 🎖�� FREE Certified Network Security Practitioner (CNSP) Exam!🎖️. **No discount code needed**. Here's how to claim your o….
0
13
0
@CipherEra
Deepak Choudhary
1 year
Race Condition Testing ( Method 12 ) => #WayToInject. => Race condition leads to Inflation of coins when bought via Google Play Store. Poc:. #cipherera #vedixera #alphaera #bugbounty #bugbountytips #bughunting #offensivesecurity #webtesting #pentesting.
0
10
64
@CipherEra
Deepak Choudhary
1 year
0
7
26
@CipherEra
Deepak Choudhary
1 year
Race Condition Testing ( Method 10 ) => #WayToInject. => CVE-2023-32001: Fopen Race . Condition. Poc:. #cipherera #vedixera #alphaera #bugbounty #bugbountytips #bughunting #offensivesecurity #webtesting #pentesting #cybersecurity #cybersecuritytips.
0
3
22
@CipherEra
Deepak Choudhary
1 year
0
6
39
@CipherEra
Deepak Choudhary
1 year
0
2
4
@CipherEra
Deepak Choudhary
1 year
0
12
54
@CipherEra
Deepak Choudhary
1 year
Race Condition Testing ( Method 6 ) => #WayToInject . => Race Condition In Faucet When Using Starport. Poc:. #cipherera #vedixera #alphaera #bugbounty #bugbountytips #bughunting #offensivesecurity #webtesting #pentesting #cybersecurity #cybersecuritytips.
0
6
21
@CipherEra
Deepak Choudhary
1 year
Race Condition Testing ( Method 5 ) => #WayToInject. => Allows Sending User To Data-Protocol In Safari When Form Without OnSuccess Is Submitted. Poc:. #cipherera #vedixera #alphaera #bugbounty #bugbountytips #bughunting #offensivesecurity #webtesting.
0
5
28
@CipherEra
Deepak Choudhary
1 year
Race Condition Testing ( Method 4 ) => #WayToInject. => Allows To Redeem Multiple Times Gift Crads Which Leads To Free “Money”. Poc:. #cipherera #vedixera #alphaera #bugbounty #bugbountytips #bughunting #offensivesecurity #webtesting #pentesting.
1
4
30
@CipherEra
Deepak Choudhary
1 year
RT @Bugcrowd: The first stage of bug hunting is recon. The first stage of recon is. subdomains? Not always. @JR0ch17 prefers a small….
0
67
0
@CipherEra
Deepak Choudhary
1 year
Race Condition Testing ( Method 3 ) => #WayToInject. => Performing Retest Allow Duplicate . Payments. Poc:. #CipherEra #VedixEra #AlphaEra #bugbounty #bugbountytips #bughunting #offensivesecurity #webtesting #pentesting #cybersecurity.
1
14
51
@CipherEra
Deepak Choudhary
1 year
0
5
10