Pinned Tweet
Tip of the day ...
sub.target.com/web/admin/ => 302 redirect to main domain
sub.target.com/web/aDmiN/ =>200 ok admin login page
sub.target.com/web/aDmiN/FUZ… =>$Critical sensitive files$
#bugbountytip #bugbountytips #Bugbounty
I'm dealing with flutter application but I'm not able to intercept any requests through burp , I've used reflutter for a while but it's not working for this app as I'm facing this error.
Anyone can help ?
#BugBounty #Hacking #Pentesting
1
581
Just dropped my first CVE. CVE-2022-3068, A privilege escalation exists where an low privileged user can escalate to admin privilege and
-Enable/disable/Uninstall plugins
-listing management plugins details
-Retrieving plugin notices
-Deleting orphaned plugins settings
#BugBounty
Improper Privilege Management in github.com/octoprint/octopri… (CVE-2022-3068) reported by @M0_SADAT - Patch: github.com/octoprint/octopri…
huntr.dev/bounties/f45c24cb-… #bugbounty #infosec #opensource
Thank you all 1337 followers :)
I'll start to share write-ups & more Tips soon so stay tuned!
This Post is from an account that no longer exists. Learn more
1
8
Mission accomplished ✅
Finally I made it to all time top 500 on @Bugcrowd. Thank you @Alra3ees for pushing me and motivating 🙏
Next goal : Top 300
#infosec #bugbounty #hacking
Proud to be part of @Microsoft Hall of Fame for reporting a security vulnerability in visual studio.
Thanks, @msftsecurity for the acknowledgment.
HOF: msrc.microsoft.com/update-gu…
#BugBounty #Hacking #CyberSecurity
One more productive weekend🔥
I just completed @Pentesterlab's recon badge!!!
A great set of real life labs that I really enjoyed.
#Hacking #pentesting #pentester #cybersecurity #ethicalhacking
Pwned 3 admin panels with my bro @Alra3ees 🔥
Hey Admin Pwner @hunter0x7!
You have a new competitors ;) ♥️
#BugBounty
So proud of this progress ! I really enjoyed work and hunting with @Alra3ees on private program at @Bugcrowd .
Can't wait for next collaboration.
#BugBounty #Hacking
1
30
Looking for high impact IDOR?
Always try to find the hidden parameters for this endpoints using Arjun and Parameth
/settings/profile
/user/profile
/user/settings
/account/settings
/username
/profile
And any payment endpoint
Thanks @Synack
#bugbountytip #bugbountytips #Bugbounty
Bugcrowd MVP 2020 swag finally arrrived, Thanks @Bugcrowd for this awesome gift Looking forward for 2021 MVP as well.
#OuthackThemAll #BugBounty #ItTakesACrowd #hacking #bugcrowd
16
Hard day I know,
#BugBountyTip Being passionate is the reason why you never give up. Getting dupes or even N/A means you're learning and doing progress NOT failures ... Keep motivated.
#BugBounty
Alhamdulillah, Last goal of 2020 is done✅
Acknowledged by @Apple security team for reporting multiple vulnerabilities.
It was a really tough year but always hard work pays off!
lnkd.in/d5MX55z
#bugbounty #hacking #hackerone #cybersecurity #togetherwehitharder #infosec
15
One more achievement done ✅
I was selected as bugcrowd winner of P1 warrior for submitting Critical vulnerabilities in 2020 Q3.
Thanks @Bugcrowd
#bugbounty #bugcrowd
1
15
I purchased @PentesterLab pro few minutes ago and super excited 🔥
#bugbountytip invest in yourself and don't miss the black Friday deal.
Alhamdullah, Hard work pays off!
Proud to announce that I made it to @Bugcrowd MVP hacker for Q3 2020❤️💪
Thanks @Bugcrowd
bugcrowd.com/blog/announcing…
#bugbounty #infosec #hacking #cybersecurity
Acknowledged by @ESET Security Team for 2020 & They provided me Internet Security licence Key
#BugBounty #Hacking
1
8
gau hacked-site.com | waybackurls | grep ".xlsx"
Using this simple one liner I discovered an excel file contains tons of PII leaked
Thanks to @TomNomNom and @hacker_
#bugbounty #bugbountytips
Finally!...The most awaited @SynackRedTeam awesome swag arrived!🔥
Thanks @synack for recognizing & @niksthehacker @Zigoo0 @hunter0x7 @Alra3ees for your support❤️
#bugbounty #synack #hacking
I'm dealing with <alphabet XSS filter
EX :
<1test> or <%h1> => reflected in response
<h1> or <anychar> =>500 Internal Server Error
anyone can help ? @rodoassis @kenanistaken @Alra3ees @hunter0x7
#bugbountytip





















