YS @YShahinzadeh

Security enthusiastic, chess player voorivex.team Istanbul, Turkey Joined September 2012

Tweets

2K
Followers

16K
Following

470
Likes

2K

Ben Sadeghipour @NahamSec

a day ago

Really disappointed to see @Hacker0x01 do this. I also had a similar interaction with h1 about a month ago where they questioned my nationality and place of residence after 10+ on the platform.

YS @YShahinzadeh

3 days ago

Really disappointed to see @Hacker0x01 do this. I also had a similar interaction with h1 about a month ago where they questioned my nationality and place of residence after 10+ on the platform.

35 127 638 111K 82

Download Image

18 53 523 49K 64

Youssef Sammouda (sam0) @samm0uda

3 days ago

@Hacker0x01 is now banning people without explanation or providing how the terms and conditions were violated. While other platforms are advancing, H1 revolutionary new vision is to track hackers on social media, make assumptions and ban them without a real proof.

12 82 466 83K 48

Jorian @J0R1AN

2 weeks ago

Bit late but this is a nice challenge, worth trying if you haven't already :D Otherwise, my solution is below, it's a really fun technique that makes me re-evaluate all the .source checks I've seen before...

omid @omidxrz

4 months ago

5 9 109 26K 72

Download Image

3 12 81 13K 65

YS @YShahinzadeh

2 weeks ago

I love engaging with programs being professional and communicating in a well-mannered way, especially when assessing severity, worked on a private program recently and reported 3 High bugs that earned +12k, the bugs were found reading JavaScript codes

13 11 406 13K 63

Download Image

YS @YShahinzadeh

4 weeks ago

just crossed 10k on H1

25 1 324 10K 8

Download Image

YS @YShahinzadeh

a month ago

poking around with @AmirMSafari on a public program, no WAF bypass, no special payload 3x Dom XSS: javascript:alert(origin) CSPT + parameter pollution: critical CSRF HTMLi: leaking URL equipped with token Tip: read JS files curiously, do not rush for bug, enjoy the process :]

22 29 541 17K 147

Download Image

omid @omidxrz

a month ago

after a long time, I decided to write a blog post about one of the old bugs I found in an Android app, which finally led me to achieve 0-Click Mass Account TakeOver it's now published, you can read it here : blog.voorivex.team/0-click-mass-a…

23 51 334 16K 159

YS @YShahinzadeh

a month ago

Today I’m happy even though I’m dying from a damn virus :[

16 1 300 11K 25

Download Image

omid @omidxrz

2 months ago

after many unlucky moments in bug bounty, july was fun with interesting findings, I made around $30k bounty, mostly from XSS and OAuth in august, I've planned to dive deeper into client-side stuff

66 27 633 30K 167

Download Image

Sky Desperados @jusxing

2 months ago

After my first year of full-time bug hunting, I successfully completed Justin’s Challenge on @Hacker0x01 . I want to share a few things that might help beginners. The bugs I’ve earned the most from are IDOR and XSS — they’re great to focus on when you're getting started. One…