๐ Proud to share my 2024 #HackerOne journey! 242 vulnerabilities reported, including 8 critical findings! Special thanks to @Hacker0x01 for providing the platform to make the internet safer. Here's to more discoveries in 2025! ๐ #InfoSec#BugBounty#CyberSecurity
@V0iD_0daY Thanks! It currently uses literal marker/pattern matching, without decoding or cross-tool normalization, so re-encoded reflections can be missed. JSON probes test existing values; header probes cover User-Agent/Referer. New-parameter discovery is query-string only.
Iโm pleased to share recent progress in my vulnerability research through HackerOne, involving two security findings across different Vulnerability Disclosure Programs (VDPs).
#hackerone#bugs#BugBounty
Iโve published Punycode Pro Tool for Burp Suite ๐ง
โข Explore Unicode homoglyphs
โข Generate IDNA/Punycode results
โข Copy characters with one click
โข 421 entries across aโz
Code & setup:
https://t.co/2ROmAlz42B
#BurpSuite#AppSec
If we are not seeing mass exploitation of php2shell, it's not because the exploit is not easy. It's because threat actors are apparently absolute dumbasses, or don't make enough money to afford a Codex subscription.