0xHun73r (@0xHun73r) header
0xHun73r (@0xHun73r) profile picture

0xHun73r

@0xHun73r

Security Researcher.

 /endpoint
medium.com/@0xhun73r
Joined January 2025
  • Tweets236
  • Following233
  • Followers714
Alright this is the write up and i would like to get your feedback and hope you like 0xhun73r.medium.com/how-i-fo… #CyberSecurity #Hacker101 #bugbountytips #BugBounty
How I Found a Hidden Role in JavaScript That Became a Permanent Backdoor.

How I Found a Hidden Role in JavaScript That Became a Permanent Backdoor.

Hi everyone, this is my first writeup, and I hope you find it informative.

0xhun73r.medium.com
1
5
39
3,057
0xHun73r retweeted
leorac (@leo__rac) profile picture
leorac@leo__racSep 23
Now that @brave supports containers, I couldn't wait for an extension to come out that would let me replicate Pwnfox without being tied to Firefox anymore. So I built it myself. Here it is 🦁 github.com/leorac/pwnbrave
GitHub - leorac/pwnbrave: PwnFox-style container highlighting for Brave

GitHub - leorac/pwnbrave: PwnFox-style container highlighting for Brave

PwnFox-style container highlighting for Brave. Contribute to leorac/pwnbrave development by creating an account on GitHub.

github.com
2
4
22
1,015
0xHun73r retweeted
Marius du Preez (@mdp_sec) profile picture
Marius du Preez
@mdp_secAug 4
If you spent your time clicking through the app and reading the traffic instead of reading ten writeups. You would find your own bugs.
6
5
82
3,770
Honored to receive a Letter of Recognition from @NASA for my responsible vulnerability disclosure through their Vulnerability Disclosure Program. Grateful that my research helped improve the security of NASA's systems. Huge thanks to the NASA security team for the recognition.
Image from 0xHun73r (@0xHun73r)
4
43
1,635
0xHun73r retweeted
0xHun73r (@0xHun73r) profile picture
0xHun73r@0xHun73rMar 4
Alright this is the write up and i would like to get your feedback and hope you like 0xhun73r.medium.com/how-i-fo… #CyberSecurity #Hacker101 #bugbountytips #BugBounty
How I Found a Hidden Role in JavaScript That Became a Permanent Backdoor.

How I Found a Hidden Role in JavaScript That Became a Permanent Backdoor.

Hi everyone, this is my first writeup, and I hope you find it informative.

0xhun73r.medium.com
1
5
39
3,057
16 hours late
Image from 0xHun73r (@0xHun73r)
3
69
3,387
Hi been quiet here for a while. Spent the last 5 months working as a Pentester, but still found some time for bug bounty. Ended up reporting 3 vulnerabilities to NASA, a few more to other companies, and a zero-click ATO affecting 100k+ accounts. Time to be active again idk :)
Image from 0xHun73r (@0xHun73r)
4
3
105
3,907
Just got awarded a bounty on HackerOne for a critical privilege escalation bug I found #BugBounty #HackerOne #CyberSecurity #InfoSec
Image from 0xHun73r (@0xHun73r)
6
1
162
5,095
simple SQLi bug read details on LinkedIn: linkedin.com/posts/0xhamdoon… #bugbounty #penetrationtesting #cybersecurity #SQLinjection
Image from Hamed Elnwasani (@0xhamdoon)
5
8
1
107
3,932
Two useful writeups I recently published: 1. Zero-Click ATO via Self-Stored XSS + WAF Bypass + IDOR 🔗medium.com/@0xhamdoon/from-s… 2. Chained Two Logic Flaws to Break a Ticketing System 🔗medium.com/@0xhamdoon/how-i-… Enjoy reading, and happy hacking #bugbounty #cybersecurity
From Self-Stored XSS to Zero-Click ATO

From Self-Stored XSS to Zero-Click ATO

From Self-Stored XSS to Zero-Click ATO Hello mates, I am Hamed Elnwasani Penetration Tester and Bug Bounty Hunter. Today, I will share a simple chain that led to 0-Click Account …

0xhamdoon.medium.com
1
26
172
7,828
4 hours late
Image from 0xHun73r (@0xHun73r)
2
72
3,406
well done congrats👏
NXSTY007 (@itsmeNxSTY) profile pictureNXSTY007@itsmeNxSTYMay 12
My first bug bounty after just 1 month from starting learning Special thank to @0xHun73r @ide9x @hamidonsolo
Image from NXSTY007 (@itsmeNxSTY)
1
23
895
today's finding with @MahmoudMunir0
Image from 0xHun73r (@0xHun73r)
4
65
1,557
idk why they changed the severity to low when this is clearly high. i contacted them asking to reconsider the severity (hope they do) but seems like they're gonna take way too long to reply so I'm just gonna drop the writeup tomorrow Inshallah and hope u like it
Image from 0xHun73r (@0xHun73r)
1
1
56
2,344
i found that writing a writeup is harder and more boring than I expected lol
5
421
And btw, my friend 0xAlchemist and I managed to get alhamdulillah 4 CVEs in an open source CMS plugin while I was vanished.
1
11
992
Yoo If this report gets triaged, I'm back to daily bug bounty hunting. Let’s pray for this one guys lol
Image from 0xHun73r (@0xHun73r)
2
1
83
2,927
And also if accepted and not duplicate, then get ready for a top tier Broken Access and Privilege Escalation writeup.
5
475
بسم الله الرحمن الرحيم ﴿ وَقُل رَّبِّ زِدْنِي عِلْمًا ﴾ زي ما وعدتكم، ده أول ملخص من كتاب Web Hacking Arsenal. الفصل ده بيسد فجوة مهمة حتى لو إنت فاكر نفسك مذاكر Web Security. 🔗 Link: notion.so/Chapter-1-2fb9d4ff… لو لقيت أي خطأ أو عندك فيدباك، ابعتلي ❤️.
10
32
2
412
15,629
0xHun73r retweeted
Coffin (@lostsec_) profile picture
Coffin
@lostsec_20 Nov 2025
I miss the early Twitter BBP community where people actually shared tips and lessons from their findings. Nowdays my feed is flooded with bounties screenshots, tools and there paid services promos and courses ads. It’s just not the same vibe anymore..
35
28
1
472
17,296
Load more