Bug Bounty Hunter, Top 1% Tryhackme and Cyber Security Researcher
127.0.0.1
Joined October 2021
- Tweets612
- Following821
- Followers439
- Likes4.9K
Proviesec retweeted
Damit die Weltreise nicht langweilig wird :)
linkedin.com/posts/oliver-tr…
Proviesec retweeted
We hacked the AWS JavaScript SDK, a core library powering the entire @AWScloud ecosystem - including the AWS Console itself 🤯
How did we do it? Just two missing characters was all it took.
This is the story of #CodeBreach 🧵👇
Proviesec retweeted
A quick and easy way to find forgotten hosts that are still exposed to the internet is by checking the SSL/TLS certificate! 🤑
Here's how you can filter by expired SSL certificates in Shodan! 👇
org:"<company>" ssl.cert.expired:true
#bugbountytips
Proviesec retweeted
Was able to escalate this to a 0 click!! Glory to God, I was awarded $20,000 for my report on @Hacker0x01 . Would do a writeup soon. Never give up fellow noobs💪🏾
#BugBounty #hackerone
#bugbounty #hackerone
Program: This is an intended behavior not a big.
Me: Lets disclose this intended behavior to the public👀
Program:
Proviesec retweeted
65+ million customers PII exposed, including passwords in *plaintext*
Probably I will write about this if I'm allowed to.
keywords: path traversal - secondary context - error message
Proviesec retweeted
Thanks to Allah always and forever ♥️
First Triage in 2024, HTML Injection on Login Page
#Tips :-
1- site:*[.]redacted[.]com login.php
2- arjun -u .../login.php -> parameters with body length reflection (username)
3- Test for :- SQLi, LFI, XSS, HTML inj,..etc
#bugbountytips
Proviesec retweeted
Yay, I was awarded a $10,000 bounty on @Hacker0x01! hackerone.com/moblig #TogetherWeHitHarder #bugbountytip
DOM XSS to Admin Account Takeover - No CORS policy so I was able to send authenticated requests on behalf of the victim and send the response back to my server.
👇
Proviesec retweeted
Broken Link Hijacking — 404 Google Play Store— xxx$ Bounty by @proviesec infosecwriteups.com/broken-l…
Proviesec retweeted
Great Google Dork write up by @proviesec infosecwriteups.com/google-d…
Proviesec retweeted
🎉🎉 Just published my new blog on
"My Favourite 10 Shodan Dorks"
This contains dorks for bug bounty hunters, penetration testers and red teamers. Retweet & Like to push it.
🎉🎉
rashahacks.com/shodan-dorks-…
#bugbounty #bugbountytips #cybersecurity #ethicalhacking #ethicalhackers
Proviesec retweeted
@proviesec found a Grafana admin panel bug using google dorks and has written a detailed article on how he earned $$$ using the same. Congratulations 🎉
▶️ Checkout the article published at InfosecWriteups here: infosecwriteups.com/my-first…
Proviesec retweeted
Hey :) If you want to know how you can get started in bug bounties, the first and most important step is learning how to use Google, because that'll be your main tool for your whole career.
Proviesec retweeted
🔍 Do you know what is google dorking and how to dork better?
Checkout this article where @proviesec walks us through on this topic: proviesec.medium.com/google-…
Proviesec retweeted
Today I have a great checklist suggestion for you on API Security❗️☺️ You should definitely add it to your bookmarks.🤞🏻🌸 To access the full checklist. ⬇️
Credit: @HolyBugx 🌟🙌🏻
Repo: github.com/HolyBugx/HolyTips…
#cybersecurity #infosec #API #Security #CheckList #Pentesting
