Yonas @yoni_ETH

Linux 🫀,OWASP,🎱 BugBounty♣️,🚀API ,💔vanilla.js,🛺Bash,WEBSEC_God👽 Ethiopia Joined December 2018

Tweets

409
Followers

49
Following

684
Likes

1K

/ XNL -н4cĸ3r (and @xnl-h4ck3r in the new Sky) @xnl_h4ck3r

2 weeks ago

Check out this great Chrome extension by @Arqsz 🔥🤘👇 github.com/TheArqsz/JSRec…

6 43 208 9K 211

/ XNL -н4cĸ3r (and @xnl-h4ck3r in the new Sky) @xnl_h4ck3r

2 weeks ago

Here's a talk I did for @Jhaddix discord channel back in March '24 about my waymore tool. I tried to cover EVERYTHING, including useful post processing (that's why it's over 2 hours long 😬). Hopefully it will be helpful. 🤘 youtube.com/watch?v=hMaYSi…

0 29 128 21K 67

Cyb3rGh0st 🕵️‍♂️ ( cyber pantheon ) @AnuriamI

4 weeks ago

Here’s my learning material on RCE cyber-spac3.notion.site/RCE-264d925480… please read and give your feedbacks

5 49 256 12K 256

Yonas @yoni_ETH

a month ago

0 0 0 18 0

Download Image

Shreyas Chavhan @shreyas_chavhan

3 months ago

I studied 170+ hrs of top hacker interviews in the last 2 months to understand what I was doing wrong. Here's what I learnt and what I'm planning to do about it: 🔗 Link: shreyaschavhan.notion.site/I-studied-170-… #BugBounty #BugBountytips

19 134 846 36K 993

Download Image

Joseph Thacker @rez0__

4 months ago

josephthacker.com/hacking/2025/0…

3 15 66 5K 30

Paul Seekamp @nullenc0de

5 months ago

If you want to find 0 Days. You should learn the following RFCs: RFC 7230 RFC 7235 RFC 7540 RFC 7519 A high number of CVEs stem from improper implementation of these RFCs.

4 101 628 27K 734

Aurélien Chalot @Defte_

6 months ago

If you missed my talk about browser cache smuggling, here is the replay youtube.com/watch?v=wukEpT… :P

2 43 171 15K 89

Stephen Sims @Steph3nSims

6 months ago

An Introduction to using Artificial Intelligence (AI) for Vulnerability Research x.com/i/broadcasts/1…

8 230 756 58K 696

🇷🇴 cristi @CristiVlad25

7 months ago

read this kpwn.de/2023/05/javasc…

5 193 587 23K 557

Devansh (⚡, 🥷) @0xAsm0d3us

7 months ago

Everything I learned about Prompt Injection Attacks in last 2 years is here in this guide. This should be your stepping stone to the field of AI Red Teaming. Link in comments 👇

9 130 625 40K 783

Download Image

Jayesh Madnani @Jayesh25_

8 months ago

🚀 Unspoken Bug Bounty Rules – From many years of failures & experience! 🕵️‍♂️ Got a similar bug across multiple assets but fear the program might count them as one for payout despite requiring multiple fixes? ✅ Report one at a time. Wait for a bounty. Then submit the next one.…

7 62 298 16K 221

Md Ismail Šojal 🕷️ @0x0SojalSec

9 months ago

if you are interested in finding 0-days vulnerabilities from reading codes, here are some articles about how to find 0-day RCEs from static code analysis. -shells.systems/category/stati… #infosec #cybersec #bugbountytips

1 40 147 7K 135

Sayaan Alam @ehsayaan

10 months ago

I just published my latest article on a recent finding at @SynackRedTeam : From Template to Threat: Exploiting FreeMarker SSTI for Remote Code Execution! Don’t hesitate to reach out if you have any questions! blogs.sayaan.in/freemarkerssti #BugBounty

3 75 264 20K 198

Whispersmith @Whispersmith_n

11 months ago

Super Blind SQL Injection- $20000 bounty | Thousands of targets still vulnerable medium.com/@pranshux0x/su… #infosec #bugbounty #TogetherWeHitHarder #inbbupdatesblogs

1 80 334 13K 232

Ben Sadeghipour @NahamSec

11 months ago

I have hacked for almost 8 hours today with 0 findings. Do I recommend it? no. Will I do it all over again tomorrow? Absolutely!

42 76 977 74K 69

Jayesh Madnani @Jayesh25_

12 months ago

Using Netlas to Identify the Origin IP of your target 🌐 - There are many known ways to find Origin IPs, but sometimes none of those techniques work. I had a potential SQLi that couldn't be validated due to a really strict WAF 🛡️. After spending hours trying different methods,…

4 12 126 11K 153

Ciarán Cotter @monkehack

a year ago

📖 Monke's Guide to Bug Bounty Methodology An exhaustive article answering pretty much everything you ever wanted to know about methodology. Enjoy :) #bugbounty monke.ie/p/monkes-guide…