@MeAsHacker_HNA

Web Security Researcher, ‌Bug Hunter Phd Candidate at Sharif University of Technology Farsi Tweets:@NafisiAslH

linkedin.com/in/NafisiAslH/
Joined April 2020
  • Tweets869
  • Following235
  • Followers8.5K
141Media
I'm going to reveal a hundred secrets of #BugBounty! You want to know them? Follow me and #100BugBountySecrets #BugBountyTip #BugBountyTips
10
57
3
404
آگهی به سفارش یکی از دوستان گذاشته شده. بابت اطلاعات بیشتر با آیدی تلگرام @jobsecurity4 در ارتباط باشید. #استخدام #امنیت #همکاری #فرصت_شغلی
1
2
6
3,405
4
1,393
Exchange OWA Penetration Test ✉️ github.com/NafisiAslH/Knowle… #bugbountytip 🧵👇🏻
1
11
36
3,470
more replies
6⃣ Bypasses 🔶 UserName Recon/Password Spraying 🔶Password Spraying MFA/2FA 🔶Password Spraying/GlobalAddressList 🔶Outlook 2FA Bypass 🔶Malicious Outlook Rules 🔶Outlook Rules in Action
1
1
8
1,981
Exchange OWA Penetration Test ✉️ Based on six2dez's github page. Based on kh4sh3i's github page.
1
1,391
JS for Bug Hunters 🛹 👉🏻 Items You Should Be Searching For 🔍 👉🏻 How to Extract JS File 🔧 👉🏻 Use Nuclei Exposures Tag 🗝️ github.com/NafisiAslH/Knowle… #bugbountytip
3
79
213
16,396
How I escalated default credentials to RCE 🧯 github.com/NafisiAslH/Knowle… #bugbountytip
1
34
116
8,277
IDOR a Highest Bounty 🍺 github.com/NafisiAslH/Knowle… #bugbountytip
4
42
1
117
7,474
My First Case of SSRF Using Dirsearch 🐿️ github.com/NafisiAslH/Knowle… #bugbountytip
9
74
248
17,506
How Recon Leads to RCE and Many More Vulnerabilities 🩻 github.com/NafisiAslH/Knowle… #bugbountytip
2
87
248
19,026
Found +6 DomXSS at different programs 🐉 github.com/NafisiAslH/Knowle… #bugbountytip
1
34
122
10,324
Uncovering an IDOR Vulnerability in a Major Online Store ❄️ github.com/NafisiAslH/Knowle… #bugbountytip
15
1
72
7,487
IDOR leading to Privilege Escalation! 🪰 github.com/NafisiAslH/Knowle… #bugbountytip
3
23
94
7,746
Accessing Admin Page via Blind XSS $1000 🦊 github.com/NafisiAslH/Knowle… #bugbountytip
2
41
1
168
11,388
#Secret14 How to use Burp Suite Like a PRO? 🚬 github.com/NafisiAslH/Knowle… #100BugBountySecrets #bugbountytip 🧵👇🏻
Hossein NafisiAsl@MeAsHacker_HNA22 May 2023
#Secret13 Firing 8 Account Takeover Methods 🔥 #bugbountytip 🧵👇🏻
1
70
175
18,997
more replies
1⃣0⃣ Simulate Manual Testing - Navigate to the Target tab and select the domain for which you want to perform simulation testing. - Then, under Engagement Tools, select Simulate Manual Testing.
1
7
1,105
How to use Burp Suite Like a PRO? 🚬 By 'N.I.M' github.com/NafisiAslH/Knowle… #100BugBountySecrets #bugbountytip
1
9
1,073
Load more