elcezeri @xelcezeri

Joined March 2023

Tweets

784
Followers

285
Following

1K
Likes

12K

ngosytuan @ngosytuanbug

2 weeks ago

Today i found a RCE in a bug bounty platform 1. found a bypass admin role with cve confluence 2. access and upload a plugin ( webshell) 3. turn on plugin in server and can run any system command HOPY THEY FAIR #BugBounty

7 14 167 10K 44

Download Image

Abdalkreem @00xalr

3 weeks ago

The new writup is here: Account Takeover via Insecure Email Change — Critical Vulnerability medium.com/@3bddagg3/acco… #bugbountytips #bugbounty #hackerone

5 22 209 12K 156

Abdulrhman @Zeno_h2r

3 weeks ago

Through a simple path manipulation in the hostName parameter, I was able to escalate the issue into a One-Click Account Takeover medium.com/@Zeno_H2r/expl…

1 8 47 3K 29

CaptinSHArky(Mahdi🇹🇳) @SalhiMahdi72759

3 weeks ago

Tip: When testing, try injecting a null byte (\u0000) into unexpected parameters. You never know how the backend will handle it — sometimes a small injection can completely break features like the invitation system. #BugBounty #BugBountytips #Hacking #Cybersecurity

5 38 246 12K 173

Download Image

يَاسِينْ🔻 @yassenAlsayed1

3 weeks ago

New Write-Up Published: One parameter. One click. One hijack. medium.com/@yassentaalab5… #BugBounty #BugBountytips

0 10 78 4K 51

Professor_xA1 @professor_xa1

3 weeks ago

اللهم بارك بس انا عندي استفسار واتمنى ميتفهمش غلط ليه لما بشوف سيناريوهات زي دي بشوفها ساهلة ومع ان اغلب الحاجات دي بطبقها وانا بهانت بس عمرها ما جات لان استحالة حاجة زي دي تكون متسابة ودا بيخليني احس ان الناس دي البروجرامز بتاعتها غير بتاعتنا حرفيا بحسهم حاجة زي لابات بورتسويجر

Abdalkreem @00xalr

3 weeks ago

6 14 169 10K 110

Download Image

9 2 40 4K 15

elSec @adrielsec

3 weeks ago

hardcoded credentials in javascript file xxxxxxx/static/js/main.xxxxx.chunk.js 🗣️ dp #bugbounty #bugbountytips #bugbountytip

11 13 207 10K 74

Download Image

The Bug Bounty Hunter @tbbhunter

3 weeks ago

How I Found a Critical Password Reset Bug in the BB program(and Got $4,000) s41n1k.medium.com/how-i-found-a-… #bugbounty

2 37 234 13K 148

Mehmet INCE @mdisec

3 weeks ago

özlemişsinizdir. buyrun fırından taze çıktı dostlar youtube.com/watch?v=xNxyhD…

5 5 83 25K 41

🇸🇦 Murtada Bin Abdullah (Rood) @0x_rood

3 years ago

Blind XSS on Admin Portal Leads to Information Disclosure medium.com/@rohit443/blin… #bugbounty #bugbountytips

2 63 189 0 53

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

3 weeks ago

The $1000 Critical Bug: Unauthorised Access Leading to Support Admin Panel Takeover v3d.medium.com/the-1000-criti… #bugbounty #bugbountytips #bugbountytip

1 12 84 6K 54

SIDDHANT SHUKLA @ghost__man01

3 weeks ago

"The Anotomy of Critical Bug" is now live on @InfoSecComm 🔗medium.com/bugbountywrite… #bugbountytip #bugbountytips #bugbounty #CyberSecurity #Security #infosec #appsec #Hacking #vapt

0 7 26 1K 17

Archer @jatav_ravi

2 months ago

$500 for Punycode email spoofing bug. Used comilav “m” to bypass email uniqueness check: >Register with [email protected] > Use same name as legit user > Invite real user to fake team Real user joins attacker’s team - gets locked out of real one #BugBountytips #BugBounty

11 13 173 12K 122

Download Image

Dark Web Intelligence @DailyDarkWeb

3 weeks ago

#CryptoSecurity 🚨 - A massive supply chain attack on the NPM registry has compromised popular packages with over 2 billion weekly downloads, aiming to steal cryptocurrency from users. dailydarkweb.net/major-npm-supp…

1 6 21 4K 4

Download Image

ZoomEye @zoomeye_team

4 weeks ago

🔍Discover More Exposed LLM Servers with ZoomEye ZoomEye Dork👉app="Ollama" || app="vLLM UI" || app="LLaMA Board" || app="LLaMA Factory" || app="Chat LangChain" || app="AnythingLLM" || app="Chat LangChain" ZoomEye Link: zoomeye.ai/searchResult?q…

Lμke Swi☨zer @LukeSwitzer_

4 weeks ago

4 101 467 34K 386

0 22 72 6K 41

Download Image

VIEH Group @viehgroup

4 weeks ago

Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi

2 87 506 24K 366

Download Image

Zuksh @zeyad_ashraf_

4 weeks ago

Alhamdulillah I got 3 RXSS duplicates on a public Bugcrowd program. Write-up: zuksh.medium.com/how-i-discover… #BugBounty #RXSS #XSS #InfoSec #Bugcrowd

1 1 80 5K 28

Download Image

Hossam A. Mesbah 🇵🇸 @m359ah

4 weeks ago

1. Register an account using [email protected] 2. Navigate to change email 3. Change it to [email protected] 4. Boom 💥 become the administrator and infrastructure takeover Rewarded $$$$$ #fuckbountytips