Lazy Security Researcher & Bug Hunter from pokhara
Nepal
Joined April 2015
- Tweets84
- Following388
- Followers483
- Likes292
OWASP KATHMANDU CHAPTER -Nepal . A warn thank you to Organizer especially Kilash dai and other important persons like @smaranchand @TheNittam plus others who has serious contribution toward this event. It wasn't possibe without you...
#bugbounty #cybersecurity #hackers #infosec
back to back. I rewarded by 000 and you know the value of zero? Let me know in which way you know the value to zero.
#bugbounty #cybersecurity #hackings
Thank you for the invitation OWASP KATHMANDU. See you there. Say hello if you are there. Lets share our experiences, skills, resources. Because knowledge and kindness is free for everyone. @OWASP
#hacking #infosec #bugbounty #cybersecurity
agent --> report --> auto response according to their further needed info (autosubmit the more information according to the context) --> when we get reward finally send bank info and chill -->
With the 14 years of offensive security and bug bounty experience. We are going to provide a real world ethical hacking and bug bounty training experience. Say good bye to labs. we do real test on real target with proper permission. Inbox is free
Good morning message. Back to back 10+ critical. Just a little warm up
#bugbounty #cybersecurity #hacker
If you want a free knowledge? Lets join this meet.google.com/kwg-cdjm-jvd here we are talking about bug bounty, ethical hacking, cyber security and ai . This is the way of learning new stuff. this is exact after 30 min after so make sure to join this to learn something new
Sujan Thapa Magar retweeted
Out-of-scope doesn’t always mean irrelevant.
A bug bounty finding involving a third-party Featurebase integration was initially rejected- then reversed after the vendor confirmed the real issue was insecure identity verification by the customer.
The research ultimately found the same trust-boundary weakness across 50+ organizations, resulting in 16 rewards and multiple fixes.
Key lesson: don’t just ask “Is this third-party?” Ask:
“Who controls the trust relationship - and is that trust actually verified?”
TBDSR is a useful mindset for modern security research.
Source: trinitytech.com.np/blog/from…
3 billion device' data secured. It is not just about finding a vulnerability; it is about taking the responsibility to secure another organization's critical infrastructure.
Let me know if i can help you with regarding bug hunting 🙌
#bugbounty #cyberSecurity #hacking
13th Pentester Nepal x Owasp kathmandu Anniversary . This people are crazy abiut cyber security. I have shared a insight about my recent research about featurebase.
#bugbounty #cybersecurity
Hacking or Cyber Security? Want to enhance your skill for free? I thinks its a great opportunity to learn something new. Decade of experience
📅 August 23.
Add to calendar: ttpl.pw/webinar
Or Join via meet.google.com/kwg-cdjm-jvd
#hacking #cybersecurity #bugbounty
Full account takeover at feedback.projectdiscovery.io . I have reported this issue to @pdiscoveryio @pdnuclei . Sandeep thank you for not fixing this issue. At least our infoSec community will learn something new from this POC. Check image and let me know who is responsible for this?
From Out of Scope to $10K+ in Bug Bounty Rewards
If the paper helps you discover even one valid vulnerability—or changes the way you approach third party integrated applications—then writing it was worth it. Read the full research paper,
drive.google.com/file/d/11td…
#BugBounty #bug
Register Now!
Most cyber security training stops at CTFs and lab environments—let's change that. Students deserve real targets, real skills, and hands-on bug hunting experience.
More info:ttpl.pw/bootcamp
#bugbounty
#Hacker
#cyberSecurity
#automations
#vulnerabilities
This week valid
1. Full account takeover via swapping
2. Access control
3. Business logical
#bugbounty #hackers #ethical – at Nepal
Initially they rewarded me with $1000 bounty. Within 10min i am able to bypass the fix. Now with total bounty of $2500. But the venice team is really good. They quickly fixed issue again. Now still i am trying to bypass😂😂
#begbounty
#bugbounty
#cybersecurity
Account takeover without any restriction and other two easy win bounty.
#bugbounty #responsibledisclosure
I have Successfully bypassed their fix 🤫🤫
#bugbounty #responsibledisclosure #ethicalHacking #HackingForFood #HackSujanHack
Bug hunters i got this message after reporting 100 plus bugs in this program. You guys also can try this bug bounty target. Magic of 100 plus reports.
