Mazid @Normalitee0os

BugBounty Hunter | Security Researcher Loves to Play JRPGs in free time~ Joined October 2021

Tweets

650
Followers

52
Following

289
Likes

3K

Mazid @Normalitee0os

2 weeks ago

Hey @Flipkart @Flipkartsupport , you blocked my account for cancellations of two orders which YOU guys cancelled yourself because it was out of stock on yourside. How the heck is it fair. I have been your customer for more than 10 years with thousands of orders! Pathetic!

1 0 0 13 0

Mazid @Normalitee0os

2 weeks ago

Hey @flipkartsupport , you blocked my account even though I have been your customer since 2017 with 100s of orders. A few days ago, I ordered cat food from FK minutes which got cancelled by side because of stock unavailability maybe. Then I noticed my account got blocked?

0 0 0 12 0

huli @aszx87410

2 weeks ago

I received an email from a reader asking if I could explain the payload of the "XSS without () and ;" here is it I am not the one who invent it, just someone trying to explain every details of it. Based on it, we can also make it worked in both browsers blog.huli.tw/2025/09/15/en/…

2 39 160 8K 117

Het Mehta @hetmehtaa

2 weeks ago

Complete Slides: docs.google.com/presentation/d…

Het Mehta @hetmehtaa

3 weeks ago

Complete Slides: docs.google.com/presentation/d…

2 11 127 17K 38

Download Image

0 29 136 11K 108

Gospel @4osp3l

2 weeks ago

A Guide To Subdomain Takeovers 2.0 hackerone.com/blog/guide-sub…

0 28 113 6K 104

Peter Cronau @PeterCronau

3 weeks ago

The whole team.

Abubaker Abed @AbubakerAbedW

3 weeks ago

The whole team.

686 14K 22K 3.7M 1K

Download Image

954 38K 109K 2.1M 3K

Frances 'Cassandra' Coppola @Frances_Coppola

3 weeks ago

A nursery. They burned a nursery.

509 83K 273K 5.4M 6K

Critical Thinking - Bug Bounty Podcast @ctbbpodcast

4 weeks ago

Start by getting your AI environment set up. Claude Code works well for this, but if you don't have a subscription, Gemini CLI with its massive context window is a great alternative. - First prompt step: Have the AI analyse each file for its business function, primary methods,…

0 3 45 2K 51

Ethiack @ethiack

2 months ago

What happens when a WAF blocks every XSS payload you throw at it? You get creative. 🔗 Read the full blog post: blog.ethiack.com/blog/bypassing…

5 44 152 14K 137

shubs @infosec_au

4 weeks ago

My favourite finding from @SLCyberSec's Security Research team in 2025 so far is a secondary context path traversal in Omnissa Workspace One UEM (CVE-2025-25231). Really interesting bug, and fun kill chain to RCE. slcyber.io/assetnote-secu…

4 50 198 13K 100

BBC News (World) @BBCWorld

4 weeks ago

Israel committing genocide in Gaza, world's leading experts say bbc.in/42bgCdY

3K 12K 54K 7.6M 2K

Critical Thinking - Bug Bounty Podcast @ctbbpodcast

10 months ago

How to earn $100k in your first year of bug bounty hunting! In a recent tweet, @Rhynorater outlined his roadmap for hitting $100k in his first year of bug bounty hunting (if he had to start from scratch). Here's what he'd do:

6 94 411 30K 550

Download Image

Justin Gardner @Rhynorater

2 years ago

I've made over 100k on SSRF vulnerabilities. They aren't always as simple as pointing it at localhost or AWS Metadata service. Here are some tricks I've picked up over the past 5 years of web app testing:

45 935 3K 440K 3K

Download Image

Corben Leo @hacker_

2 years ago

I've made $500k+ from SSRF vulnerabilities. Here are my tricks:

85 1K 4K 432K 5K

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

a month ago

Teaching LLMs how to XSS - An introduction to fine-tuning and reinforcement learning (using your own GPU) ⚔️ - docs.google.com/presentation/d… Thanks : @har1sec #infosec #cybersec #bugbountytips #Ai

2 72 240 12K 210

Download Image

Gareth Heyes \u2028 @garethheyes

a month ago

I discovered how to use CSS to steal attribute data without selectors and stylesheet imports! This means you can now exploit CSS injection via style attributes! Learn how below: portswigger.net/research/inlin…

13 85 358 23K 232

Download Image

Devansh (⚡, 🥷) @0xAsm0d3us

a month ago

If you start reading just 5 CTF write-ups a day, by the end of this year, you'll be 10x more skilled than you are today. Just start, rn! That's 150 write-ups in a month. Assuming you learn 30–40 unique techniques from them, no course can match that. You'll be unstoppable.

21 83 720 45K 604

Devansh (⚡, 🥷) @0xAsm0d3us

a month ago

When I say CTFs, I mean the following: DEF CON CTF Google CTF Plaid CTF HITCON CTF SECCON CTF Dragon Sector CTF hxp CTF ASIS CTF InCTFi CSAW CTF Facebook/Meta CTF justCTF (and similar...) AVOID LOW QUALITY CTFs.

1 12 127 4K 168

Awesome Google VRP Writeups @gvrp_writeups

a month ago

New Google VRP writeup "XSS in Google IDX Workstation" for a bounty of $22,500 by @sudhanshur705: sudistark.github.io/2025/07/02/idx…

0 23 125 5K 83

‏Martyrs of Gaza @GazaMartyrs

a month ago

This beautiful little girl’s name was Fatima Abu Daqqa, yesterday israel killed her along with her grandmother. In this video, she asked that when she passes away, the video be shared with the song “Those We Love Have Gone.” Fatima was only (7)