Badhon Sec @badhonsec
Hunting bugs in silence. | Ethical Hacker | #H4ck3rBadhon Dhaka, Bangladesh Joined April 2025-
Tweets7
-
Followers4
-
Following63
-
Likes15
🥹🔥Alhamdulillah🖤🤦♂️ My First Bounty — Critical CSRF | CVSS 9.1 So happy to finally achieve my first bounty! ❤️ Huge thanks to @MainulIslam12 for collaborating & teaching me from day one. 🙏 Thanks @x0xHasan for the inspiration & @x0xHasan for the support. ❤️ #yeswehack
Consistency is key
🔍 GitHub Recon: Complete Guide Here’s a list of dorks you can use: Category 1: Credential & Secret Leakage org:"target" "aws_access_key_id" org:"target" "aws_secret_access_key" org:"target" "Authorization: Bearer" org:"target" "slack_token" path:*.json org:"target" "firebaseio.com" -fork org:"target" "access_token" path:*.json org:"target" "client_secret" path:*.yaml org:"target" "DATABASE_URL" path:*.env org:"target" "jwt_token" path:*.json org:"target" "sendgrid_api_key" These reveal hardcoded cloud keys, Slack tokens, and full environment creds — used in lateral cloud movement. Category 2: Internal Config & CI/CD org:"target" path:**/.env org:"target" path:**/config.js org:"target" path:**/docker-compose.yml org:"target" path:**/config.yaml org:"target" path:**/sshd_config org:"target" path:**/.github/workflows org:"target" path:**/host.json language:json org:"target" "DATABASE_PASSWORD" path:*.properties org:"target" "service_account" path:*.json Great for exposing build secrets, webhook endpoints, ssh configs, or automation credentials. Category 3: Dev/Test & Staging Discovery org:"target" "test_api_key" org:"target" "staging." org:"target" "debug=true" org:"target" "localhost:3000" org:"target" "internal_use_only" org:"target" "test_credentials" org:"target" "example_token" path:*.env These help trace dev > staging > prod transition logic, and may show accessible endpoints. Category 4: Cloud Pivot Points org:"target" "s3.amazonaws.com" org:"target" "gcloud auth activate-service-account" org:"target" "jdbc:mysql://" org:"target" "private_key" path:*.txt org:"target" path:**/id_rsa org:"target" "rds.amazonaws.com" These enable full-blown recon into S3, RDS, or Google Cloud services. 🧠 Smart Usage Tips 1. Use "pushed:>2024-01-01" for fresh commits 2. Combine with -fork to reduce noise 3. Use language: and path: to filter results 4. Automate with GitHub’s API for hourly scans 5. Integrate with subdomain recon for asset correlation (If you learned something, repost it and help others) --- What We do : linktr.ee/tcb_trainings
Rakib Hassan @yourrakibhassan
49 Followers 51 Following Security Researcher | Penetration Tester | Ethical Hacker | Learner | 🇧🇩
MD.Alhazur Rahman Jib... @MJibon48734
0 Followers 67 Following
mehrab opi🇧🇩 @mehrabopi33500
1K Followers 3K Following Web Application Security Engineer | Bug Hunter | Ethical Hacker | Penetration Tester
0x0Asif🇧🇩 @0x0asif
5K Followers 882 Following Security Researcher aka Bug Bounty Hunter | HackerOne|BugCrowd|Yogosha #bugbounty #whitehathacker || Follow me on social media @0x0asif
Aditya sharma 🇮�... @Assass1nmarcos
7K Followers 71 Following Cyber Security Researcher, Hacker🇮🇳 Love to get unauthorized access in your Server. HOF from Google | Microsoft | Apple | Meta | Adobe | Oneplus
Faav @efaav
6K Followers 248 Following Hacker & Developer. Hunting bugs. Building https://t.co/qiMEJOTD1H & NameMC Extras.
I'M H4CK3R 42 @luckyhacker43
5K Followers 0 Following Sharing free resources, write-ups, recon tips, OSINT guides, and learning roadmaps for aspiring security researchers. https://t.co/UYlYa33j6W
debsec @deb_security
2K Followers 593 Following Bug hunter. Part of AWC Chile, founder of deb-security.
Rakib Hassan @yourrakibhassan
49 Followers 51 Following Security Researcher | Penetration Tester | Ethical Hacker | Learner | 🇧🇩
Dihan Islam Olif @dihanislamolif
62 Followers 31 Following Entrepreneur. Marketer. Businessman. Tech Guy! Managing People Since 2015 The Team Phoenix, FindPros, Gotmyhost, Gadgets By Dihan, TapKori
Md Sadat Tamzit @SadatTamzit
1K Followers 704 Following “Passionate about cybersecurity, I uncover vulnerabilities to build a safer digital world.”
Leonidas D. Ace (Md R... @L3onid1s
2K Followers 684 Following Bug Bounty Hunter || @YogoshaOfficial Top - 30 All-time || Top 4 Security Researcher in @TecnoSRC 2022
KNOXSS @KN0X55
16K Followers 1 Following Announcements, tips and support via DM of KNOXSS - The most comprehensive XSS tool available by @BRuteLogic https://t.co/Ar5icALkk6
Federal_bonk_Investig... @fbictf
114 Followers 23 Following 🇧🇩 CTF TEAM - Official Site: https://t.co/qUTvhBEEQS (Under Development) - Official Discord: https://t.co/gGxOiVJ4w6 Managed By @0xAr7hur
Md Shopon Alom @shoponalom29
311 Followers 578 Following Bug Bounty Hunter | Web App Hacker | Red Team Specialist | Finding vulnerabilities, exploiting weaknesses, and securing the web one app at a time. ▂▃▄▅▆▇█
Tabassum @ehtabbu
3K Followers 217 Following Security Researcher | Certified Penetration Tester| Coder 👩💻
Rasel Mir @araselmir
2K Followers 826 Following Cyber Security Engineer @Resecurity || Intigriti Top 25 || Intigriti 2023 Q3 Leaderboard 1st || Bug Hunter || Penetration Tester || Programmer || Student
7h3h4ckv157 @7h3h4ckv157
57K Followers 99 Following Hacker | Hall of Fame: Google, Apple, X, NASA | BlackHat x1 | CVE ×4 | HTB SME (Guru) | BC: P1 warrior | Featured in NASA’s IT Talk | OSCP+ | Consultant at EY
mehrab opi🇧🇩 @mehrabopi33500
1K Followers 3K Following Web Application Security Engineer | Bug Hunter | Ethical Hacker | Penetration Tester
Muhammad Tanvir Ahmed @Tanvir0x1
2K Followers 96 Following Bug Bounty Hunter || Cyber Security Researcher || Ethical Hacker From Bangladesh 🇧🇩
K R Hasan @x0xHasan
209 Followers 645 Following Bug hunter,Vulnerability researcher,cyber security enthusiast
khan mamun @mamunwhh
8K Followers 1 Following Cyber security researcher| Red team member | Bug Bounty Hunter | (whh)white hat hacker at @Hacker0x01 @intigriti
Iman Gurung @ImanGurung13
8K Followers 452 Following Computer Engineer, Ethical Hacker, Tatoo Lover, Blind xss king
Hussein Daher @HusseiN98D
52K Followers 228 Following Entrepreneur, Hacker 🇱🇧🇨🇮 @WebImmunify 21th/270000 BugCrowd Hacking Platform
Imamul Mursalin @vulnbot0
4K Followers 580 Following Security enthusiast aka Cyber Security Researcher
publiclyDisclosed @disclosedh1
68K Followers 2 Following This is an unofficial HackerOne public disclosure watcher who keeps you up to date about the recently disclosed bugs. By @NOBBD
TheTeamPhoenix @tteamphoenix
91 Followers 17 Following A non-profit initiative, dedicated to enhance the community's well being in CyberSec & Tech domain.
SickSec 🇲🇦 🇵... @OriginalSicksec
10K Followers 409 Following I love GraphQL | Hackerone Ambassador 🇲🇦 | Tweets are my own | Riichi #Mahjong Player | Founder of https://t.co/9ELRuMo4HK
Prial @0xPrial
3K Followers 332 Following Cybersecurity Enthusiast | Ethical Hacker | Red Team Member at @SynackRedTeam | Exploring the digital frontier, one vulnerability at a time.
Syed Mushfik Hasan Ta... @SMHTahsin33
5K Followers 350 Following Cyber Security Enthusiast | Learner | Free Time Bug Bounty Hunter | Ambitious | eWPTX, CRTO, ASCP | 21 Y/O | @bbcbd_official🇧🇩
Yassine Aboukir 🐐 @Yassineaboukir
34K Followers 424 Following HackerOne Top 40, Elite, Pentest Lead, Ambassador, x2 MVH Title, and ex- Hacker Advisory Board • Digital Nomad/Hybrid Athlete/Surfer
STÖK ✌️ @stokfredrik
139K Followers 1K Following Hi.. im that hacker / creative that your friends told you about.,
Kanhaiya Sharma @krishnsec
20K Followers 771 Following APPLICATION SECURITY & RECON | Top 3 P1 warriors globally @bugcrowd | https://t.co/8Fo8sBoCVN
JS0N Haddix @Jhaddix
181K Followers 7K Following CEO, Trainer, Hacker, and Speaker. Cybersecurity + Hacking + AI + Sec Leadership @arcanuminfosec
The Bug Bounty Hunter @tbbhunter
48K Followers 0 Following Promotions or business ✉️[email protected]
charan @0xcharan
2K Followers 427 Following @Hacker0x01 Brand Ambassador | Bug Bounty Hunter | Penetration Tester
Hack The Box @hackthebox_eu
252K Followers 227 Following Cyber Mastery: Community Inspired. Enterprise Trusted.
Rood @0x_rood
29K Followers 350 Following Messy | Digital Nomad Lifestyle 💎 | Not doing collabs, not selling coursesYou might like
