Yonas @yoni_ETH

Linux 🫀,OWASP,🎱 BugBounty♣️,🚀API ,💔vanilla.js,🛺Bash,WEBSEC_God👽 Ethiopia Joined December 2018

Tweets

407
Followers

48
Following

681
Likes

1K

Cyb3rGh0st 🕵️‍♂️ ( cyber pantheon ) @AnuriamI

2 days ago

Here’s my learning material on RCE cyber-spac3.notion.site/RCE-264d925480… please read and give your feedbacks

5 44 237 11K 240

Yonas @yoni_ETH

3 weeks ago

0 0 0 15 0

Download Image

Shreyas Chavhan @shreyas_chavhan

2 months ago

I studied 170+ hrs of top hacker interviews in the last 2 months to understand what I was doing wrong. Here's what I learnt and what I'm planning to do about it: 🔗 Link: shreyaschavhan.notion.site/I-studied-170-… #BugBounty #BugBountytips

19 133 850 35K 1K

Download Image

Joseph Thacker @rez0__

3 months ago

josephthacker.com/hacking/2025/0…

3 15 66 5K 30

Paul Seekamp @nullenc0de

4 months ago

If you want to find 0 Days. You should learn the following RFCs: RFC 7230 RFC 7235 RFC 7540 RFC 7519 A high number of CVEs stem from improper implementation of these RFCs.

4 102 629 27K 739

Aurélien Chalot @Defte_

5 months ago

If you missed my talk about browser cache smuggling, here is the replay youtube.com/watch?v=wukEpT… :P

2 43 171 15K 88

Stephen Sims @Steph3nSims

5 months ago

An Introduction to using Artificial Intelligence (AI) for Vulnerability Research x.com/i/broadcasts/1…

8 229 758 58K 695

🇷🇴 cristi @CristiVlad25

6 months ago

read this kpwn.de/2023/05/javasc…

5 193 586 23K 559

Devansh (⚡, 🥷) @0xAsm0d3us

6 months ago

Everything I learned about Prompt Injection Attacks in last 2 years is here in this guide. This should be your stepping stone to the field of AI Red Teaming. Link in comments 👇

9 130 621 40K 781

Download Image

Jayesh Madnani @Jayesh25_

7 months ago

🚀 Unspoken Bug Bounty Rules – From many years of failures & experience! 🕵️‍♂️ Got a similar bug across multiple assets but fear the program might count them as one for payout despite requiring multiple fixes? ✅ Report one at a time. Wait for a bounty. Then submit the next one.…

7 64 299 15K 219

Md Ismail Šojal 🕷️ @0x0SojalSec

8 months ago

if you are interested in finding 0-days vulnerabilities from reading codes, here are some articles about how to find 0-day RCEs from static code analysis. -shells.systems/category/stati… #infosec #cybersec #bugbountytips

1 40 147 7K 137

Sayaan Alam @ehsayaan

10 months ago

I just published my latest article on a recent finding at @SynackRedTeam : From Template to Threat: Exploiting FreeMarker SSTI for Remote Code Execution! Don’t hesitate to reach out if you have any questions! blogs.sayaan.in/freemarkerssti #BugBounty

3 75 264 20K 198

Whispersmith @Whispersmith_n

10 months ago

Super Blind SQL Injection- $20000 bounty | Thousands of targets still vulnerable medium.com/@pranshux0x/su… #infosec #bugbounty #TogetherWeHitHarder #inbbupdatesblogs

1 79 334 12K 236

Ben Sadeghipour @NahamSec

11 months ago

I have hacked for almost 8 hours today with 0 findings. Do I recommend it? no. Will I do it all over again tomorrow? Absolutely!

42 77 980 74K 69

Jayesh Madnani @Jayesh25_

11 months ago

Using Netlas to Identify the Origin IP of your target 🌐 - There are many known ways to find Origin IPs, but sometimes none of those techniques work. I had a potential SQLi that couldn't be validated due to a really strict WAF 🛡️. After spending hours trying different methods,…

4 12 126 11K 150

Ciarán Cotter @monkehack

a year ago

📖 Monke's Guide to Bug Bounty Methodology An exhaustive article answering pretty much everything you ever wanted to know about methodology. Enjoy :) #bugbounty monke.ie/p/monkes-guide…