Hammam

Just a bug hunter

[Hammam @1yz02]

@SirBagoza والمفروض اشتغل كل دة تحت Job Role واحد مش كدة؟ 😂

[Hammam @1yz02]

@4osp3l Thanks brother , I actually haven’t been active on Bugcrowd for a while. This report is kinda old , found and submitted it around 4–5 months ago

[Hammam @1yz02]

Easy Bounties with Open Redirects

How I Found 4 Open Redirect Bugs Using
2 Simple Approaches

https://t.co/wW6rjOvUnt

#bugbountytips #bugbounty

[Hammam @1yz02]

@4osp3l Appreciate it. I already tested XSS and SSRF escalation but no luck. Didn’t try the geolocation exposure scenario yet , will take a look.

[Hammam @1yz02]

@SirBagoza ساعتين تلاتة اربعة يا باشا انت براحتك

[Hammam @1yz02]

@SirBagoza اعملي referral سريعا بس يا حبيبي وحياتك

[Hammam @1yz02]

Alhamdulilah

Recently reported :

Broken Access Control Vulnerability Got Accepted at HackerOne

Open Redirect Vulnerability Got Accepted at YesWeHack

[Hammam @1yz02]

@dPhoeniixx @SirBagoza جبت one click في التيك توك ولا ايه يا اخويا

[Hammam @1yz02]

@0xwer8 اللهم بارك

[Hammam @1yz02]

@SirBagoza وانت رايح تعمل فولو للبتاع اللي هيرفدك يا اخويا 😂😂😂

[Godfather Orwa 🇯🇴 @GodfatherOrwa]

* Create your own AI scanner
* Create website for that AI
* Offer it for Sale/Subscription
* create a X profile for the AI
* Start Posting Old bounty’s photos with posts like (found this by this @AI, I spend 10$ and I got rewarded 10K$)

Story Of This Days 😤

Not #bugbouny 🫣

[Hammam @1yz02]

@V_E_N_O_M_001 جدده واعمل بيه وماتحاولش تعمل بيه تاني قبل ما تجدده عشان بيقفلوا الحسابات

[Hammam @1yz02]

Recently reported on @yeswehack
HTML injection Got Accepted
Open Redirect Got Triaged “Assessed”
HTML injection Got Duplicate

[Hammam @1yz02]

@MiniMjStar @yeswehack Program Policies

[Hammam @1yz02]

@yeswehack Thx ❤️❤️❤️❤️

[Hammam @1yz02]

Got 2 Broken Access Control vulnerabilities accepted on @yeswehack

[Hammam @1yz02]

@m359ah اللي انت شايفه ياعم😂😂😂

[Hammam @1yz02]

@SirBagoza ربنا معاك ويوفقك يا اخووويا

[Hammam @1yz02]

“وَقُلِ اعْمَلُوا فَسَيَرَى اللَّهُ عَمَلَكُمْ وَرَسُولُهُ وَالْمُؤْمِنُونَ “

New write-up featuring one of my favorite findings

In this report, I walk through my discovery of 5 Broken Access Control vulnerabilities within the same web application .

https://t.co/xZTkoVxX3a