Shawkat Emad

[Shawkat Emad @0xshawkroot]

@for_N5R1 Ok bro i will do it , thx bro

[Shawkat Emad @0xshawkroot]

SSRF write-up is live! 🔥

Real-world findings, bypass techniques, and my methodology behind discovering SSRF across 6 companies.

Read it here 👇
🔗 https://t.co/RLZbJOMyqq

#BugBounty #SSRF #WebSecurity

[Shawkat Emad @0xshawkroot]

@for_N5R1 Yeh sure i will see the public repo of the same version of java

[Shawkat Emad @0xshawkroot]

@for_N5R1 The technique bypassing the checking layer , but there is a error does at a library in java , i will read this library and return to the target, i believe that it will improving my skills in ssrf

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

Open Redirect escalated to a P2 on a Dell asset — proof that "low impact" bugs stay low impact only until you show the chain. Nice one @shawkat7h :D

[T1erOne @tieroneforum]

Методология поиска SSRF: от «Address is Blocked» до полного доступа к внутренней сети

https://t.co/GvaPvemUJQ
https://t.co/rfDSDoX8SO

#articles @0xshawkroot #BugBounty #SSRF #WebSecurity

[Shawkat Emad @0xshawkroot]

@tieroneforum Really appreciate the feature and the support! Glad to see my work shared with your community. Much respect! 🙏🔥

[Shawkat Emad @0xshawkroot]

@ParthShethia25 Thanks bro :D

[Shawkat Emad @0xshawkroot]

@for_N5R1 I appreciate that very much, my friend. I'm pleased and delighted that you liked the write-up and that it caught your attention to this extent.

[Shawkat Emad @0xshawkroot]

@mdp_sec Sure broo.

[Shawkat Emad @0xshawkroot]

@kareemkorama @0Xmannaf Thanks broo😍

[Shawkat Emad @0xshawkroot]

@for_N5R1 Agreed. The key is whether validation and the fetcher operate on the same canonical IP. I'm testing the same IPv6-mapped bypass on another target to see if the same parsing gap exists. 💀

[Shawkat Emad @0xshawkroot]

@mdp_sec @Hacker0x01 Jwt bugs is rare now , nice finding broo🔥♥️

[Shawkat Emad @0xshawkroot]

@for_N5R1 The URL was fetched immediately, not stored. The IPv6-mapped address bypassed the blacklist, likely due to a parsing/normalization gap.

Meanwhile, I'm testing the same trick on a new target. 💀

[Shawkat Emad @0xshawkroot]

@S4AD_DXD @0Xmannaf Why u put ur post at my post?

[Shawkat Emad @0xshawkroot]

Another Dell report hits P1 & Triaged! 🔥

Currently under assessment. Let's see where this goes.

Another hunt with my brother @0xmannaf ❤️ Always better hunting together!

#BugBounty #CyberSecurity

[Shawkat Emad @0xshawkroot]

@labelblueice @0Xmannaf We can't share any details , the report isn't resolved yet

[Shawkat Emad @0xshawkroot]

@0xOFFA @0Xmannaf حبيبي ي اخويا اوفاااا😍♥️

[Shawkat Emad @0xshawkroot]

@0Xmannaf Dell can't catch a break with us 💀

[Shawkat Emad @0xshawkroot]

@mdp_sec @0Xmannaf We appreciate that bro.