Coffin's banner

Coffin

@lostsec_ • 32,057 subscribers

ʜᴇʟᴘɪɴɢ ᴏʀɢᴀɴɪᴢᴀᴛɪᴏɴꜱ ꜱᴛᴀʏ ꜱᴇᴄᴜʀᴇ ᴛʜʀᴏᴜɢʜ ʙᴜɢ ʜᴜɴᴛɪɴɢ, ᴏꜱɪɴᴛ ᴀɴᴅ ꜱᴇᴄᴜʀɪᴛʏ ʀᴇꜱᴇᴀʀᴄʜ | ᴡʀɪᴛᴇᴜᴘꜱ: https://t.co/39DXITYobD | ᴄᴏᴍᴍᴜɴɪᴛʏ: https://t.co/otIBnWOeua

Shorts

Brada, IF you want your friend to learn $BugBounty hunting, send him 2-3 months to Lostsec and forget.<3

Brada, IF you want your friend to learn $BugBounty hunting, send him 2-3 months to Lostsec and forget.<3

16,512 görüntüleme

Here’s a proper PoC I made for PasteJacking XSS. You can test it yourself on my website:

Here’s a proper PoC I made for PasteJacking XSS. You can test it yourself on my website:

30,076 görüntüleme

i made a simple CORS PoC, just replace the target and test it against a sensitive endpoint, since public ones usually don’t qualify for a valid report..

i made a simple CORS PoC, just replace the target and test it against a sensitive endpoint, since public ones usually don’t qualify for a valid report..

17,727 görüntüleme

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

This is my longest article on Medium yet. I’ve put together all the methods, setups and workflows from my 3 recent videos on Claude, including all the prompts so you can easily copy, paste, and try them yourself.

This is my longest article on Medium yet. I’ve put together all the methods, setups and workflows from my 3 recent videos on Claude, including all the prompts so you can easily copy, paste, and try them yourself.

29,880 görüntüleme • 1 ay önce

Bug Hunting Skills added for the upcoming video on Claude 👀 Make sure you’ve got notifications turned on..

Bug Hunting Skills added for the upcoming video on Claude 👀 Make sure you’ve got notifications turned on..

23,134 görüntüleme • 2 ay önce

Hi everyone! I just built a WaybackURLs extension that saves you a ton of time when gathering archive URLs. it supports main domains, wildcards, specific paths and sensitive file extensions. Give it a try and let me know your feedback!

Hi everyone! I just built a WaybackURLs extension that saves you a ton of time when gathering archive URLs. it supports main domains, wildcards, specific paths and sensitive file extensions. Give it a try and let me know your feedback!

58,521 görüntüleme • 1 yıl önce

/Dependency Confusion/ FULL SYSTEM + CLOUD METADATA HARVESTING & MULTI-CHANNEL EXFILTRATION (DNS + HTTP)

/Dependency Confusion/ FULL SYSTEM + CLOUD METADATA HARVESTING & MULTI-CHANNEL EXFILTRATION (DNS + HTTP)

26,195 görüntüleme • 6 ay önce

if you are a bug hunter and your notes don’t look like this, you’re not my type..

if you are a bug hunter and your notes don’t look like this, you’re not my type..

26,009 görüntüleme • 6 ay önce

Finally our website is live! You’ll find all the bug hunting commands, tools, extensions & writeups here—many more things coming soon for all types of bugs. Huge thanks to @madhusudan91263 for contributing and making this toolkit even more amazing!

Finally our website is live! You’ll find all the bug hunting commands, tools, extensions & writeups here—many more things coming soon for all types of bugs. Huge thanks to @madhusudan91263 for contributing and making this toolkit even more amazing!

57,941 görüntüleme • 1 yıl önce

People seriously underestimate how dangerous leaked Google API keys are. With just a little know-how, you can use them to access Gemini without spending money. This clip is just a small demo. I’ve covered a wide range of dorks and methods in my member only video.

People seriously underestimate how dangerous leaked Google API keys are. With just a little know-how, you can use them to access Gemini without spending money. This clip is just a small demo. I’ve covered a wide range of dorks and methods in my member only video.

22,852 görüntüleme • 6 ay önce

Hell nahh..Check this out all🔥you will enjoy it <33 Full Admin pannel access via this simple methodology..

Hell nahh..Check this out all🔥you will enjoy it <33 Full Admin pannel access via this simple methodology..

30,484 görüntüleme • 11 ay önce

60 XSS in 60 seconds full video on yt soon..

60 XSS in 60 seconds full video on yt soon..

44,869 görüntüleme • 2 yıl önce

so finally guys here is your final script for xss now its give you results with 0% false postive free tool for all 🔥and special thanks to my brother who make this tool more better and we will add all owsp top 10 vuln scan soon..

so finally guys here is your final script for xss now its give you results with 0% false postive free tool for all 🔥and special thanks to my brother who make this tool more better and we will add all owsp top 10 vuln scan soon..

43,500 görüntüleme • 2 yıl önce

Google Captcha Bypass :) thank to my friend Sarper⚡

Google Captcha Bypass :) thank to my friend Sarper⚡

48,180 görüntüleme • 2 yıl önce

amazing xss tool ❤️

amazing xss tool ❤️

39,938 görüntüleme • 1 yıl önce

just built this tool, take a look 🔥

just built this tool, take a look 🔥

14,830 görüntüleme • 6 ay önce

tried something new for the Bug Hunting community i hope this will help in there hunting jurney ❤️ site: special thanks to my team haq and javox to make it more better..

tried something new for the Bug Hunting community i hope this will help in there hunting jurney ❤️ site: special thanks to my team haq and javox to make it more better..

36,934 görüntüleme • 1 yıl önce

Try the latest version of Crtmon. We’ve completely removed Docker, so you can now run the tool without any Docker-related issues. It also works smoothly with stdin input.

Try the latest version of Crtmon. We’ve completely removed Docker, so you can now run the tool without any Docker-related issues. It also works smoothly with stdin input.

15,579 görüntüleme • 9 ay önce

Created a private bookmarklet packed with features to extract hidden paths, URLs and endpoints. It fetches data from HTML elements, inline scripts, quoted strings, performance logs and even external JavaScript files for deep reconnaissance.

Created a private bookmarklet packed with features to extract hidden paths, URLs and endpoints. It fetches data from HTML elements, inline scripts, quoted strings, performance logs and even external JavaScript files for deep reconnaissance.

21,918 görüntüleme • 1 yıl önce

get lifetime free powerful ryzen 9 vps for Bug hunting 🔥 watch poc and full details how to setup in my telegram channel

get lifetime free powerful ryzen 9 vps for Bug hunting 🔥 watch poc and full details how to setup in my telegram channel

28,849 görüntüleme • 2 yıl önce

next time don't trust anyone blindly 😶that guy show himself as a security researcher and he did'nt have enough knowldge to understand simple code and relay on chatgpt results and post shit things in his acc and distroy someone reputation without confirming it 💔

next time don't trust anyone blindly 😶that guy show himself as a security researcher and he did'nt have enough knowldge to understand simple code and relay on chatgpt results and post shit things in his acc and distroy someone reputation without confirming it 💔

28,368 görüntüleme • 2 yıl önce

i see some guy struggling with shodan ip extraction and showing long process here you go use this one click method and boom 💥

i see some guy struggling with shodan ip extraction and showing long process here you go use this one click method and boom 💥

25,113 görüntüleme • 1 yıl önce

I used to think people didn’t really care about the content or its value. But after seeing all the comments on my YouTube and X posts, I’m honestly amazed by the reactions. It really motivates me to keep improving and make even better content.. #yourLostsecForever

I used to think people didn’t really care about the content or its value. But after seeing all the comments on my YouTube and X posts, I’m honestly amazed by the reactions. It really motivates me to keep improving and make even better content.. #yourLostsecForever

12,165 görüntüleme • 10 ay önce