mssoffsec @r0g3rmr3n00b

Proud Indian 127.0.0.1 Joined September 2019

Tweets

2K
Followers

276
Following

2K
Likes

7K

Ynoof @YnoofAssiri

3 days ago

Bug bounty life tips: - Triage downgrades your report? Ignore it, comments won’t save you. - Company says “aware of this issue”? Skip, no one helps. - CSRF and IDOR = same (in their eyes)? Skip, you’re “wrong.” - They fix your sqli while program suspended? Skip, you lose. Skip..

8 12 184 15K 74

Abdalkreem @00xalr

5 days ago

I submitted 5 critical reports in 2 hours due to 2 bugs. 1- The first mistake is when you add slach at the end it will bypass authentication - /api/x/x --- > 401 Unauthorized - /api/x/x/ -- > 200 Ok (2/1) #bugbounty #hackerone

11 59 533 20K 301

Download Image

Justin Gardner @Rhynorater

2 years ago

I've made over 100k on SSRF vulnerabilities. They aren't always as simple as pointing it at localhost or AWS Metadata service. Here are some tricks I've picked up over the past 5 years of web app testing:

45 934 3K 440K 3K

Download Image

Corben Leo @hacker_

2 years ago

follow @hacker_ (and @boringmattress) top:

Corben Leo @hacker_

2 years ago

follow @hacker_ (and @boringmattress) top:

85 1K 4K 432K 5K

Download Image

2 4 60 27K 13

Harshleen Chawla @harshleenchawl2

3 weeks ago

API-specific wordlists for fuzzing hidden routes & endpoints🚀 wordlists-cdn.assetnote.io/data/automated/

4 81 395 18K 274

Download Image

Rahul Sirvi @rahul0x01

2 years ago

150$ - Info Disclosure on GoPro!⚡️ 1. In-Depth Subd Enum. 2. cat allsubs.txt | httpx -mc 200 > working.txt 3. nmap -iL working.txt -p0-65535 -oN fullscan.txt 4. dirsearch -l nmap.txt -w <wordlist> -x <status codes> -r -e <extensions> 5. Found .txt file #bugbountytip #bugbounty

9 89 351 18K 203

Download Image

Mohamed Ahmed @mooo_sec

3 weeks ago

Unauthenticated Access to Sensitive Customer Data via Google Dorking How I did it: - During recon, I used the dork: site:*.target.* "date of birth" ext:pdf - Found a PDF file exposing customer data. - Noticed an ID in the URL. - By changing the ID, I could access other data.

5 43 366 14K 254

Download Image

Intigriti @intigriti

4 months ago

12 API hacking bug bounty tips you must try on your target! 😎 🧵 👇

6 153 707 53K 984

Download Image

Intigriti @intigriti

a month ago

🔁 File uploads are almost everywhere... Sometimes, a simple validation mistake can result in a high-severity finding (such as RCEs) 🤠 In our technical article, we documented a few cool tricks you could try next time you're testing a file upload feature! Link in next post! 👇

1 20 91 6K 67

Download Image

Harshleen Chawla @harshleenchawl2

a month ago

OSINT-Advanced Searching🔍📝 github.com/The-Osint-Tool…

3 185 837 42K 1K

Download Image

Arshiya @arshiyaiha

a month ago

redacted[.]com/ --> [302]❌ redacted[.]com/app/api/doc/ --> [200 OK] ✅ Bypassed the 302 and hit API doc gold! #BugBountytips #BugBounty

3 10 142 8K 63

Download Image

Ahmet Barut @ahmtbrt07

a month ago

Bug Bounty Tips (1/2) 1- Add users with different roles in your company to the system. 2- Log in as a low-authority user in the incognito tab and log in as a high-authority account in the normal tab for role isolation. #BugBounty #BugBountytips

2 6 117 6K 79

Download Image

Rohan.exe 🖤 @roohaa_n

a month ago

The best informative report 😋 i ever had #bugbounty

14 2 209 13K 34

Download Image

André Baptista @0xacb

a month ago

Try this out on your next target! Some more gold from the guys at @ctbbpodcast! 🔥

2 49 284 16K 263

Download Image

annonimous254 @annonimous254z

2 months ago

~IDOR bypass techniques New video out too! youtu.be/JNvnCojTAvI #bugbounty

1 121 568 29K 676

Download Image

Erick Fernando @erickfernandox

2 months ago

A simple open redirect can wreak havoc. Simple open redirect -> misconfigured OAuth authentication flow -> privilege abuse using Amazon Cognito token #bugbounty #bugcrowd

5 19 349 14K 119

Download Image

Critical Thinking - Bug Bounty Podcast @ctbbpodcast

2 months ago

New episode is out! — youtu.be/rvA8IbyogJ0 Releasing the episode on Monday so you have something to listen to during your travel to DEFCON =) Diego Djurado joins us to discuss XBOW's architecture, hunting approach, hallucination challenges, and AI's future in bug bounty. He…

4 19 69 24K 31

Web Security Academy @WebSecAcademy

2 months ago

How to find viable targets for client-side desync attacks: 1️⃣ Open Burp Suite and intercept requests. 2️⃣ Choose an endpoint that wouldn't usually expect a POST request (e.g GET) and send it to repeater. 3️⃣ Go to Inspector > Request Attributes > Protocol field > Upgrade to…

3 53 344 16K 251

Download Video

x1337loser @x1337loser

9 months ago

Alhamdulillah, Awarded a $2500 bounty for an Unauthenticated IDOR which led to getting the User PII of a specific group in Indeed, this was a chain finding I chained 4 different endpoints to get the PII. [1/3] #bugbounty #bugbountytips #bugcrowd

8 11 287 11K 86

Download Image

HackProve @hackprove_

2 months ago

How 3 Free Recon Tools Found 40 Bugs — Helped To Score $1200 in Bug Bounties more information : discord.com/invite/h6dKuEt… medium.com/@rashad.desk/h…