○●○●○●Bug Bounty Hunter
Joined March 2023
- Tweets236
- Following162
- Followers1.8K
- Likes513
Pinned Tweet
I've secured the 1st position on the @Hacker0x01 "Lebanon Q2 leaderboard" and 44th in highest reputation! 🏆
#BugBounty #hackerone #infosec #cybersecurity
Hasan Sheet retweeted
Happy to share this milestone. 🥂
Over the past few months, bro @hasansheet and I have earned together +250,000$ through cybersecurity vulnerability research.
This placed us on the global leaderboard and at the top of the Lebanese leaderboard. 🇱🇧
Just getting started. 🚀
Me and my friend @Ibrahim58733058 have been hacking on the BMW bug bounty on Intigriti for ~4 months.
2X on the BMW leaderboard and earned $$,$$$ 💰
Thanks @intigriti & @BMW 🙌
🚨 Just got a CRITICAL on HackerOne!
Didn’t even know that there is something called "PayPal API Key/Secret Key",
**Secret Hunter** detected them instantly and boosted the report impact 🔥
Thanks @kassem_s94!
Order Secret_hunter at: t.me/apesofficial
Submitted a critical ATO last year but it was marked out-of-scope.
Today the program added the asset into scope and reopened my report.
Appreciate the honesty — not every program does this.
Integrity matters. 🙏
#hackerone
#BugBounty
I didn’t suddenly start finding criticals.
I just changed my mindset.
A month ago, I decided to focus only on P1s.
Mediums still get reported, but they’re not the goal.
When you aim for criticals, you’ll find mediums, but when you aim for mediums, crits stay out of reach.
Just got a reward for a high vulnerability submitted on @yeswehack -- Information Disclosure (CWE-200).
Found 2 bugs on a program — info disclosure + follow-up issue discovered during analysis. Nice response from the team — fast and professional.
#YesWeRHackers
Yay, I was awarded a $1950 bounty on @Hacker0x01! hackerone.com/buggedout #TogetherWeHitHarder
Github token found in js file !
Thanks for @kassem_S94 for incredible tool 🔥secret finder🔥
Tool link : cybersecurity.tabbeqai.com/C…
🔥 New tool alert for bug hunters: zero‑payload XSS finder that scans source code for reflections — bypasses noisy payloads and reduces false positives. Must-try for recon.
Download : cybersecurity.tabbeqai.com/C…
Creator: @kassem_S94
Hasan Sheet retweeted
🎓 Get certified for completing my new course!
My book "3 Bugs That Pay – V1" is now available on 👉 onlysecurity.com/courses/3-b…
✅ Real-world bug bounty cases
✅ Full PoC reports
✅ Step-by-step recon & tools
💥 Learn, apply, and earn a certificate!
#hack
#BugBounty
#CyberSecurity
💥 XSS via .docx / .xlsx ?
No macros. No VBScript. Just pure hyperlink magic. 🪄
Create a hyperlink to `javascript:alert(1)` inside a `.docx` or `.xlsx`, upload it to a target with a file viewer feature, and boom 💣—XSS on click!
#bugbountytips
#xss
#BugBounty
Hasan Sheet retweeted
The security research community in Europe and the Middle East just got even stronger. Say hello to these new HackerOne Brand Ambassadors:
🇦🇿 @AzeriumD34132 (Azerbaijan—new club!)
🇧🇪 @dropn0w & @hgreal1 (Belgium—new club!)
🇩🇰 @mthirup (Denmark—new club!)
🇮🇹 @Al7eX91 & @Ciper_942 (Italy—new club!)
🇱🇧 @hasansheet (Lebanon—new club!)
🇸🇪 @joaxcar (Sweden—new club!)
🇳🇱 @yoerivegt (Netherlands)
🇫🇷 @DoomerOutrun (France)
🇵🇹 @secgus (Portugal)
🇹🇷 @jusxing (Turkey)
These ambassadors will fuel research, mentoring, and live events across the region. We’re glad they’re here!
Check out the program: bit.ly/3lMs6lO
#AppSec #EthicalHacking #H1Club
💥 Found 5 XSS bugs via SVG file upload using @KN0X55 SVG payload!
If you're testing for SVG-based XSS and want to prove session hijacking (PoC), you must try uploading the SVG file from KNOXSS.
#bugbountytips #knoxss #xss #hackerone
Found 2 new types of bugs just by shifting my mindset. One of them is usually dismissed as "informative" or "P5"—but with a slight twist, I realized it could be critical. Sometimes, the key isn’t new tools, it's new thinking.
#BugBounty #CyberSecurity #Hacking #EthicalHacking
Hasan Sheet retweeted
Proud of @hasansheet a Lebanese tech researcher from the semicolon team acknowledged publicly by @Apple for uncovering a critical vulnerability in iOS 18.4.
#TechNews: #Apple publicly acknowledged #Lebanese security researcher Hasan Sheet from the Semicolon team for helping uncover a critical iOS 18.4 flaw that prompted an urgent fix.
lbcgroup.tv/news/varietytech…
Bug bounty tip: I've been testing this program for about 8 months, and the more I understand it, the more bugs I find! Instead of jumping straight into testing, first use the application like a regular user. Deep understanding leads to better findings! #BugBounty #EthicalHacking
Recent bug bounty finds: Blind XSS exposing support panel messages, LFI revealing /etc/passwd, IDOR leaking PII, and exposed credentials! Critical security flaws still lurking in production. Stay vigilant! #BugBounty #CyberSecurity #EthicalHacking
I earned $$$ for my submission on @bugcrowd bugcrowd.com/hasan_sheet #ItTakesACrowd
Stored xss , payload : <<x>img src=x onerror=alert(1)>
Yay, I was awarded a $,$$$ bounty on @Hacker0x01! hackerone.com/buggedout #TogetherWeHitHarder
Blind xss leads to access support panel !