fubxx @fishcccc

OSWP,OSCP,OSWE/RedTeam/Bug Hunter localhost Joined January 2019

Tweets

326
Followers

177
Following

241
Likes

604

fubxx @fishcccc

3 months ago

出来就喜欢躺沟里

1 0 1 145 0

Download Image

fubxx @fishcccc

4 months ago

This is disgusting. If H1 is banning people because of their race, they don’t deserve to call themselves a “global platform.” Shame on you, H1.

0 0 9 727 0

fubxx @fishcccc

4 months ago

瓜。不知道真的假的

0 0 0 80 0

Download Image

fubxx @fishcccc

4 months ago

《A股圣经》

0 0 0 108 0

Download Image

Intigriti @intigriti

4 months ago

Good tips!

6 153 707 53K 984

Download Image

0 0 1 167 0

VAIDIK PANDYA @h4x0r_fr34k

4 months ago

Web Cache Poisoning! here are few reports to Explore them! 1. hackerone.com/reports/622122 2. hackerone.com/reports/1096609 3. hackerone.com/reports/1621540 4. hackerone.com/reports/397508 5. hackerone.com/reports/919175 6. hackerone.com/reports/1010858 7. hackerone.com/reports/429747 8.…

0 89 336 11K 303

fubxx @fishcccc

4 months ago

Got a P1 on @Bugcrowd #bugbountytips

2 0 68 2K 1

Download Image

Nasser Albarrak @nass3r000

5 months ago

牛逼还能这样

29 98 666 63K 412

Download Image

0 0 1 243 0

fubxx @fishcccc

5 months ago

I earned $300 for my submission on @Bugcrowd

1 0 6 192 0

Download Image

I'm a big big fan of the bug bounty tips posted by @intigriti Here's 8 bug bounty tips posted by them that I feel you all should keep in your fingertips. 🧵👇 #bugbounty #cybersecurity #infosec #bugbountytips

23 129 349 59K 296

fubxx @fishcccc

5 months ago

P1是60kg的时候 P2是70kg的时候现在84kg了，已经不敢拍照了😅

1 0 4 151 0

Download Image

fubxx @fishcccc

5 months ago

I just realized why some of my previous reports looked messy on bugcrowd— when the content is long.Don't wrap everything inside code blocks like: ``` your_content_very_long ``` Instead, it’s much more readable like this: >`you_content_very_long` #bugbountytips

0 0 2 130 0

fubxx @fishcccc

5 months ago

持仓过节

0 0 0 92 0

Download Image

Muqsit 𝕏 @mqst_

5 months ago

📲 Introduction to Android Pentesting for Beginners Blog: tsublogs.wordpress.com/2022/11/18/int… #infosec

2 76 357 12K 243

Download Image

Shaurya Sharma @ShauryaSharma05

5 months ago

Don't stop at /actuator — WAFs and path filters are easy to trick Here's some spicy evasion sauce: /actuator%252fenv /actuator/..;/env /actuator%00/metrics //actuator///heapdump /actuator;/env /actuator%2e%2e/ #springboot #cybersecurity #bugbounty

0 40 238 8K 192

HUNTER @OX0DAYS

5 months ago

Thanks For The Super Recon Method @GodfatherOrwa Kindly Share Your Slides of These Videos, Thanks. 1. youtube.com/watch?v=5RyODe… 2. youtube.com/watch?v=yyD8Z5… & 4 Others 1. youtube.com/watch?v=yyD8Z5… 2. youtube.com/watch?v=YoXM4m… 3. youtube.com/watch?v=L0-aa6… 4. youtube.com/watch?v=_aST_z…

0 64 236 10K 291

YesWeHack ⠵ @yeswehack

8 months ago

Medusa by @Ch0pin is a game-changer for mobile bug hunters 📱🕵️ With its FRIDA-powered framework, you can automate tasks like bypassing SSL pinning, tracing function calls, and modifying app behaviour in real time. Perfect for uncovering vulnerabilities in Android & iOS apps! 🔍…

2 126 539 25K 436

Download Gif

fubxx @fishcccc

6 months ago

When I access a.com/api/test, the request gets forwarded to b.com/api/test, but b.com is an inaccessible domain. I have a feeling there might be a vulnerability here, but I’m not sure how to proceed with testing. Any ideas?#bugbountytips