M u j t a b a @mujtabasec

Security Researcher | Penetration Tester Bug Bounty Hunter 💻 mujtabasec.github.io localhost Joined August 2019

Tweets

469
Followers

828
Following

371
Likes

4K

M u j t a b a @mujtabasec

a month ago

Hello Hackers 👋 Share your favorite bug class! Mine: Business Logic #infosec #bugbounty #websecurity #pentest #hackerone

8 1 34 3K 6

M u j t a b a @mujtabasec

2 months ago

I stopped using X for a few months because everybody was tweeting about their bounties, and it really fucked up my mind. 😶 #websecurity #BugBounty #hackerone #infosec

1 0 4 374 0

M u j t a b a @mujtabasec

2 months ago

I found some RXSS on a HackerOne program. You should go back to your old program and check for new live hosts and apply your methods #websecurity #BugBounty #hackerone #cybersecurity #pentesting

2 4 93 4K 24

Download Image

Found Reflected XSS in Bug Bounty Program! While bug hunting, I found an interesting reflected XSS vulnerability. I discovered a hidden parameter using Arjun and tested it. It turned out to be vulnerable to XSS! #websecurity #cybersecurity #bugbounty #security #xss

2 9 81 3K 21

Download Image

M u j t a b a @mujtabasec

5 months ago

Found some IDORs on a private HackerOne bug bounty program! - Sometimes the user ID in a cookie, but it's not properly validate the User. - Always try changing these Ids with other user ids #websecurity #bugbounty #hackerone #Pentesting

3 5 138 5K 43

Download Image

M u j t a b a @mujtabasec

6 months ago

Just found an IDOR on a private HackerOne BBP! Pro tip: Always check for user IDs in cookies — they might be the key! #BugBounty #Pentesting #websecurity #hackerone

0 8 144 4K 32

Download Image

M u j t a b a @mujtabasec

6 months ago

Here is Our first Writeup How we hacked a website offering crypto & trading courses using business logic bugs flaws. If you find it helpful, drop a like! #Pentesting #bugbounty #writeup

Shehzad Roy @TheRoyHunter313

6 months ago

Here is Our first Writeup How we hacked a website offering crypto & trading courses using business logic bugs flaws. If you find it helpful, drop a like! #Pentesting #bugbounty #writeup

2 55 261 14K 162

0 1 8 728 2

M u j t a b a @mujtabasec

7 months ago

why not 😄

Nana Sei Anyemedu @RedHatPentester

7 months ago

why not 😄

122 38 526 30K 74

Download Image

0 0 0 279 0

H4x0r.DZ 🇰🇵 @h4x0r_dz

7 months ago

Thank you for your submission! We were able to validate your report, and have submitted it to the appropriate team for remediation.

Irene Zhao @Irenezhao_

7 months ago

Thank you for your submission! We were able to validate your report, and have submitted it to the appropriate team for remediation.

2K 32 1K 907K 78

9 12 144 10K 9

M u j t a b a @mujtabasec

7 months ago

Some RXSS on H1 vdp Program. #bugbounty #websecurity #pentesting

2 0 76 3K 9

Download Image

bugcrowd @Bugcrowd

7 months ago

This is an oldie but a goldie. If you want to learn more about SSRF, watch this @owasp talk by @NahamSec and @daeken! This is a goldmine of SSRF nuggets including: 🪲 SSRF via URI Schemes 🐞 SSRF via Javascript (XSS) 🐛 SSRF via Styling 🐜 SSRF using (PDF Gen ‘0day’) 🪳 SSRF…

3 42 244 12K 188

M u j t a b a @mujtabasec

8 months ago

HTML Injection Via Websocket on a HackerOne Private BB Program . #BugBounty #websecurity #pentesting

4 6 128 6K 44

Download Image

M u j t a b a @mujtabasec

8 months ago

Found a cool Stored XSS in a private Bug Bounty program that uses GraphQL API! #bugbounty #Pentesting #websecurity #cybersecurity

1 19 203 8K 72

Download Image

Sarper⚡ @sarperavci

8 months ago

Just launched CTF Search with 24k+ CTF writeups, covering everything from web exploitation to reverse engineering. Check it out! ctfsearch.hackmap.win

23 315 1K 65K 1K

Download Image

Ben Sadeghipour @NahamSec

8 months ago

If you're serious about hitting $100K in bug bounties this year, you need to master these vulnerabilities in 2025. 📌 XSS 🔥 📌 SSRF 🕵️‍♂️ 📌 Path Traversal 🛠️ 📌 Web Cache Deception 🏗️ 📌 Supply Chain Attacks 🚨 Read it now & level up 👇 nahamsec.com/posts/high-val…

24 115 669 27K 480

Download Image

Shreyas Chavhan @shreyas_chavhan

8 months ago

It's been 1000+ hours into bug bounties since the day I started. Hunting: 1002 hrs Cyberstudy: 363 hrs Days worked: 271 days Here's the top 59 lessons/advice/learning I've been giving myself since day one that have helped me reach where I am today (a thread 1/60): #BugBounty

13 86 670 54K 748

Download Image

M u j t a b a @mujtabasec

8 months ago

Bug: Reflected XSS Payload is reflected in: <script>window.pageType = 'test'-alert(document.cookie)-'';</script> #BugBounty #cybersecurity

1 14 174 7K 77

Download Image

M u j t a b a @mujtabasec

8 months ago

Bug: Business Logic Attacker can join private room meetings without host permission Via Response Manipulation Modify the server response from: {"can_access":"no"} to {"can_access":"yes"} GetIn #BugBounty #websecurity #Pentesting

1 6 126 4K 29

Download Image

M u j t a b a @mujtabasec

8 months ago

found XSS using @KN0X55🤘 #BugBounty #cybersecurity #Pentesting #websecurity

3 3 57 3K 10

Download Image

H4x0r.DZ 🇰🇵 @h4x0r_dz

8 months ago

Hello @deepseek_ai, I have sent an email to [email protected] regarding a critical vulnerability that could allow attackers to access your database exposing sensitive data including API KEYS. I strongly recommend addressing this issue as soon as possible.