Rasel Mir (@araselmir) header
Rasel Mir (@araselmir) profile picture

Rasel Mir

@araselmir

Cyber Security Engineer @Resecurity || Intigriti Top 25 || Intigriti 2023 Q3 Leaderboard 1st || Bug Hunter || Penetration Tester || Programmer || Student

 Bangladesh
Joined January 2019
  • Tweets649
  • Following827
  • Followers1.9K
96Media
Photo by Rasel Mir (@araselmir)Photo by Rasel Mir (@araselmir)Photo by Rasel Mir (@araselmir)Photo by Rasel Mir (@araselmir)Photo by Rasel Mir (@araselmir)Photo by Rasel Mir (@araselmir)Photo by Rasel Mir (@araselmir)Photo by Rasel Mir (@araselmir)Photo by Rasel Mir (@araselmir)Photo by Rasel Mir (@araselmir)
My 2023 #BugBounty Recap - Earned 41,000K$+ in Bounties ( From @intigriti & @Bugcrowd ) - Made it to worldwide top 25 in @intigriti - Made it to worldwide top 542 in @Bugcrowd - Top 1 worldwide in 2023 Q3 @intigriti I just hunt around 6 month this year.
Image from Rasel Mir (@araselmir)
Image from Rasel Mir (@araselmir)
Image from Rasel Mir (@araselmir)
12
6
186
14,162
🎉 Passed the EC-Council CPENT Exam! Happy to achieve another milestone in my cybersecurity journey. 🔐 Grateful for the learning experience and excited for what’s next! 🚀 #CPENT #ECCouncil #Cybersecurity #PenetrationTesting #InfoSec
Image from Rasel Mir (@araselmir)
1
9
731
In some cases, they claimed that a certain domain doesn’t contain real user data, yet they still haven’t marked that domain as out of scope. Even though the triage team reviewed my reports, once the program manager added such comments, the process just stopped there. 2/n
2
601
🚨 OSCP GIVEAWAY ALERT🚨 We’re giving away 3 OSCP vouchers to supercharge your pentesting journey – proudly sponsored by @offsectraining ! 💥🙌 To enter: 1.✅ Follow Us 2.🔁 Retweet this post 3.❤️ Like this post 4.💬 Reply with your funniest cybersecurity meme 🎯 We’ll pick 3 random winners – don’t miss your chance to win the gold standard in offensive security! 🗓️ Deadline= 20 June Let the hacking+meme battle begin! 🧠💻 #OSCP #OffSec #Giveaway #BSidesAhmedabad #Infosec #Cybersecurity
Image from Security BSides Ahmedabad (@bsidesahmedabad)
539
486
15
854
82,133
🔒 Just hit a new milestone on @Bugcrowd ! ⚡ 465 valid vulnerabilities 📈 96.5% accuracy 🏆 Ranked 295th globally Proud to be doing what I love: helping secure the web, one bug at a time. #BugBounty #EthicalHacking #CyberSecurity #Bugcrowd
Image from Rasel Mir (@araselmir)
6
1
142
5,485
Replying to @araselmir @Bugcrowd
2/ Without enable two factor I can't access my report or can't do anythings. Can you solve this problem fast @Bugcrowd
1
366
Last few days I submit few interesting bug on @Bugcrowd program collaborating with @akbar_ohi . It was an excellent experience. We earned $$$ for our submission on @bugcrowd #ItTakesACrowd
1
1
22
1,034
Passed eJPT :)
Image from Rasel Mir (@araselmir)
5
28
1,283
Wrapped up my bug bounty presentation 20th February! 📷 Had an amazing session sharing knowledge and connecting with future ethical hackers on Cumilla University. #BugBounty #CyberSecurity #EthicalHacking
Image from Rasel Mir (@araselmir)
Image from Rasel Mir (@araselmir)
Image from Rasel Mir (@araselmir)
20
1,039
I never got this kind of close timing duplicate on @Bugcrowd . Original Report : 22 Jan 2025 08:21:24 UTC My Report : 22 Jan 2025 08:26:03 UTC Only 5 minute difference.🫡
Image from Rasel Mir (@araselmir)
Image from Rasel Mir (@araselmir)
3
49
3,071
Agree. Recently I face same issue with the @Bugcrowd. My 20+ report mark as duplicate with the one report and that report is not match with my report path, parameter, Disclose information also.
Ahsan Khan (@hunter0x7) profile pictureAhsan Khan@hunter0x722 Jan 2025
Replying to @Bugcrowd
@Bugcrowd @Hacker0x01 Why not hire people like who have seen the struggle of real hunting? Why not hire people who are working day/night for years, These people are Gems, They know what are the real problems and how to overcome them. Hire bug hunters instead of Pentesters, Hire talent instead of certs, Hire those who would love to build the platform. 90% reports goes to N/A because Triagers (Pentesters) couldn't understand it. 5% goes to invalid priorities. 4% goes to no response. 1% goes to accepted because ur lucky that time. There were times when triagers (Bug hunters) help hunters to exploit their submissions to escalate the priority (Bug hunters). vs We don't have time to check your report, Kindly create a video because it takes time to create a new user (Pentesters).
14
1,137
Nice finding. And got more motivation for finding P1.
Abdullah Nawaf (HackerX007)🇯🇴 (@XHackerx007) profile pictureAbdullah Nawaf (HackerX007)🇯🇴
@XHackerx00716 Jan 2025
Exciting News: My Second Write-Up is Now Available! medium.com/@HX007/a-journey-… Dive into the details of the bounty that ranks as the 3rd highest I’ve received on @Bugcrowd "A Journey of Limited Path Traversal To RCE With $40,000 Bounty!" Collaborated with @GodfatherOrwa , This Write-Up is not just informative but also a fun read. Enjoy reading and happy hunting! #BugBounty #BugBountyTip #BugBountyTips #Bugcrowd #HackerOne #SOC #CyberSecurity #infosec
A Journey of Limited Path Traversal To RCE With $40,000 Bounty!

A Journey of Limited Path Traversal To RCE With $40,000 Bounty!

#Introduce Myself:

medium.com
2
451
👍Thanks to @RashedulCSS's organization, we have seen the style of Bangladesh security researchers! 🥰We also look forward to more fresh blood joining us in 2025! Contribute your strength to the 2025 TECNO security journey! #infosec #bugbounty #AppSec #cybersecurity #hack #MEETUP
Image from TECNO Security Response Center (@TecnoSRC)
Image from TECNO Security Response Center (@TecnoSRC)
Image from TECNO Security Response Center (@TecnoSRC)
2
3
2
14
2,060
I found a target site 3rd party subdomain like target.okta.com. And from web archive I got a link where leaked PII data. Should I report or not ? @GodfatherOrwa @krishnsec
8
1
37
7,894
@XHackerx007
1
1,081
I never twitted about any platform. But this is totally unacceptable @Bugcrowd. 17 days ago one RCE is triaged by @RelentlessT7 . Today I see this bug mark as “Informational”. Program team says this is their test environment. 1/n
Image from Rasel Mir (@araselmir)
26
11
2
187
27,442
But on out of scope options this subdomain is not included. After reporting RCE the team says this is test environment. And @Bugcrowd team didn’t says any things. Just mark as “Informational”. How is it acceptable?
3
31
4,419
3/n Finally that RCE bug accept as P3. At least accepted. That's why I am happy. Thanks @RelentlessT7
Image from Rasel Mir (@araselmir)
1
7
612
Hey @Bugcrowd this is a really nice hoodie. Thanks ☺️ 📍 Ghandruk, Nepal 🇳🇵
Image from Rasel Mir (@araselmir)
2
1
1
91
7,005
Thanks @Bugcrowd for this gift 🎁 #BugBounty #CyberSecurity
Image from Rasel Mir (@araselmir)
3
1
116
4,303
Sorry sir 😅 I am trying to focus on android and IOS. And this is the result. I didn't understand the out of scope properly. Actually out of scope is soo confusing. That's why this is happed.
$mit (@Fabrikat0r) profile picture$mit@Fabrikat0r11 Oct 2024
Replying to @araselmir
@araselmir Sir , Ig you found something dangling ,hope you share soon about your research😁🤞 #bugbounty
Image from $mit (@Fabrikat0r)
2
4
1,928
Load more