mrTereSte

Bugs Hunter and More

[Marius du Preez @mdp_sec]

free account to billing admin, all from a public oauth client id

the back office client needed no secret. logged in through it with my own free creds and the token came back with back office scopes. could rewrite their prod pricing and it stuck. check which client ids skip the secret

[mrTereSte @333_hunterX]

@mdp_sec Clean job

[mrTereSte @333_hunterX]

“this is how I feel dealing with the triager”

@Hacker0x01 @YesWeHack @Bugcrowd

#bugbounty

[Zeroday Lab @Zerodaylabowner]

JS function param whitespace seperator
Bypass XSS WAF protection using invisible separators before or after function name or between a JS function name and parameters

<img/src/
onerror=alert(1337)>

#XSS

[Mehul Panchal @CyberMehul]

Bug Bounty SSRF Detection:

What's your methodology?

[mrTereSte @333_hunterX]

@mdp_sec 🙃🥹

[mrTereSte @333_hunterX]

First report on YesWeHack — officially Accepted! 🔥🟢

CVSS 9.3 (Critical) | +1 credit.
A great start on a new platform. The hunt continues!

#BugBounty #YesWeHack #CyberSecurity #InfoSec

[mrTereSte @333_hunterX]

To everyone who helped me, thank you. To everyone who ignored me, thank you too. You all played a part in pushing me further than I thought possible.

I haven't forgotten. And I'm just getting started.

#BugBounty #HackerOne #YesWeHack #Bugcrowd

[mrTereSte @333_hunterX]

@mdp_sec Thanks Marius! Challenge accepted, more reports coming 🔥

[mrTereSte @333_hunterX]

@bxmbn This kind of posts ✅ = Motivation

[mrTereSte @333_hunterX]

Interesting development! 👀

The report was initially closed as Informative due to the HackerOne Signal Score requirement. However, it has now been triaged, and the team confirmed they are preparing a fix.

Keep hunting! 🔥 @Hacker0x01 #BugBounty #HackerOne

[mrTereSte @333_hunterX]

@0xConda 🤯

[mrTereSte @333_hunterX]

@nozxrashi1 @Hacker0x01 Congratulations bro

[mrTereSte @333_hunterX]

@ReebootToInit5 Clean work bro

[Zeroday Lab @Zerodaylabowner]

If you have a JSON login page, test blind-SQL injection directly in the username and/or password fields like below.

Payload injected in username input field: 👇
username' ; waitfor delay '0:0:8' --

Happy hunting. ❤️

#bugbountytips #bugbountytip #bugbounty 🔥

[mrTereSte @333_hunterX]

@ethical_h4ck3r_ @avanish46 🫵👍

[𝐤𝐣𝐮𝐥𝐢𝐮𝐬 @ethical_h4ck3r_]

If you have a JSON login page, test blind-SQL injection directly in the username and/or password fields like below.

Payload injected in username input field: 👇
username' ; waitfor delay '0:0:8' --

Happy hunting. ❤️

Credit: @__nav1n_
#bugbountytips #bugbountytip #bugbounty 🔥

[Mehul Panchal @CyberMehul]

Bug Bounty is not about spraying and praying.

Deep Dive into a specific target and you'll see the magic.

[Mehul Panchal @CyberMehul]

Bug Bounty API Testing Edge Case Bypasses:

What's bypasses you found?

[mrTereSte @333_hunterX]

@ibrahimatix0x01 Good Lucka