2023 with ALX has been transformative. I deepened my skills in C, Python, JS, TypeScript, DevOps, HTML/CSS, Git, and more. Building a web app from scratch and collaborating on projects were highlights.
& I earned $4,000 also for my submission on @bugcrowdbugcrowd.com/orwagodfather#ItTakesACrowd
Both of bugs it was a Unauthorized access to open dashboards
#bugbountytips
Scan ports top 1000 everyday , everyday
naabu -list sub.txt -top-ports 1000 -exclude-ports 80,443 -o file
For first time i found a SQL Injection On **sitemap.xml** endpoint 😎😎
#BugBountytips #BugBountytip
target[.]com/sitemap.xml?offset=1;SELECT IF((8303>8302),SLEEP(9),2356)#
sleep payload
[1;SELECT IF((8303>8302),SLEEP(9),2356)#] = 9s
Happy Hunting
#BugBounty
Hey there,
Recently released this new tool 'XSSearch'
It is a comprehensive reflected XSS tool with 3000+ Payloads for automating XSS attacks and validating XSS endpoints.
Do check it out ;)
Suggestions are welcome💜
github.com/Encryptor-Sec/…#selenium#Python#security#Pentesting
Lets give some tip to beginners about XSS. Comment what approach you use to find XSS. include tools. Tag bug hunter who find lots of XSS. Thanks #bugbounty#bugbountytips
2FA Bypass Techniques
1.)Response Manipulation:-In response if "success": false, change it to "success": true
2.)Status Code Manipulation:-If status code is 4xx. try to change it to 200 OK and see if it bypass restrictions.
3.)2FA Code Reusability:-Same code can be reused.
1K Followers 5K FollowingWe are building vulnerable applications using #Kotlin for education purposes #hpAndro 🏁 https://t.co/CDWDpr5xbv 🎥 https://t.co/mpKwPhklRn
68K Followers 2 FollowingThis is an unofficial HackerOne public disclosure watcher who keeps you up to date about the recently disclosed bugs. By @NOBBD
208K Followers 2 FollowingI save your favorite Tweets and Threads to your Notion Workspace!
Just follow @SaveToNotion & check the pinned tweet to start,
Developed by: @Abdulhade_Ahmad
3.5M Followers 63 FollowingThe Official *NASA* Webb X account.
The world's most powerful space telescope. Launched: Dec. 25, 2021. First images revealed: July 12, 2022.
9K Followers 2K Following📍 @yeswehack (aka Hisxo) - I love to break things (and I'm paid for that) - Bug Hunter
🔗 Check my Github repository https://t.co/Sj3prhiZyu
#BugBounty
50K Followers 617 FollowingThe power behind the @Synack platform is an elite team of the world's top cybersecurity researchers. Our best are honored at https://t.co/6bEAyp7HWJ
44K Followers 913 FollowingCo-founder of @centrahq/@detectify/@poweredbyingrid. I do not advertise doing hacking services, do not trust the ones telling you I do.
27K Followers 315 FollowingAuthor of "From Day Zero to Zero Day" - No Starch Press. Every day is 0day! Personal profile - all opinions expressed are my own.