Prial

Cybersecurity Enthusiast | Ethical Hacker | Red Team Member at @SynackRedTeam | Exploring the digital frontier, one vulnerability at a time.

[Prial @0xPrial]

And this is why I love @synack ❤️

[Prial @0xPrial]

Cyber by night, tactical by day 👌😚

[Prial @0xPrial]

Hunter x Nepal => @imranHudaA @araselmir @L3onid1s @MdInjamulHaqu @tamjid0x01 @0x0asif @RirRipon @akbar_ohi @ShoponAlom2014

[Prial @0xPrial]

Hey @Hacker0x01 @visma @intigriti 👀

[Prial @0xPrial]

Missing @Bugcrowd @SynackRedTeam 😮‍💨

[Prial @0xPrial]

Subdomain takeovers aren't always straightforward! Found an old target with a subdomain pointing to CloudFront, and its Origin Domain was configured with the S3 bucket's website endpoint. Always check beyond CNAME records to avoid missing these. #BugBounty #BugBountyTips

[Prial @0xPrial]

@lordjerry0x01 Ha sure next time ❤️

[Prial @0xPrial]

New year gift by me to me 🫠❤️
#BugBounty

[Prial @0xPrial]

@ADITYASHENDE17 Thanks bhai ❤️

[Prial @0xPrial]

@VECO_Cebu Yes. You can takeover. You just need a account.

[Prial @0xPrial]

Zendesk Takeover for fun and profit 😇
https://t.co/TYnDeBy88m

#BugBounty
#BugBountyTips
#TogetherWeHitHarder

[Prial @0xPrial]

@dmxjon Yes. You can

[Prial @0xPrial]

Zendesk Subdomain Takeover + Email routing wildcard setup = Any [email protected] email creates a ticket in my Zendesk setup.

#BugBounty
#BugBountyTips

[Prial @0xPrial]

@Prathameshwarak @Bugcrowd @BugcrowdSupport Sure, you can DM me about your questions 😇

[Prial @0xPrial]

@Bugcrowd Is considering In Scope subdomain takeover as a Basic Subdomain takeover which is a similar priority as RXSS. While attacker can do stored XSS using a subdomain takeover which is considered as P2 priority. Why this discrimination @BugcrowdSupport ?
#BugBounty

[Prial @0xPrial]

In previous days they considered subdomain takeover with proper PoC as P2 High Impact Subdomain takeover but nowadays all subdomain takeovers are accepted as Basic Subdomain takeover. This is not fair!

[Prial @0xPrial]

@gdattacker @Hacker0x01 I agree. In such case @Bugcrowd platform have done great work. They show original report title and when it was reported. This maintain good relationship with researchers and I think @Hacker0x01 can do the same with their platform too 😇

[Prial @0xPrial]

I earned $2,000 for Subdomain takeover report on @Hacker0x01 ❤️
Tips: Always look at CNAME domain’s historical data 😉

#BugBounty
#bugbountytips
#TogetherWeHitHarder

[Prial @0xPrial]

@shohel_96 @Hacker0x01 I use dig to print the DNS records then look st those records for possible takeovers 😇

[Prial @0xPrial]

I earned $2,000 for Subdomain takeover report on @Hacker0x01 ❤️
Tips: Always look for CNAME records with NXDOMAIN status 😉
#BugBounty
#bugbountytips
#TogetherWeHitHarder

[Prial @0xPrial]

@elh3x @Hacker0x01 Will do detailed writeup on different kind of takeovers 😇