TheHatedOne

Bug Bounty Hunter.
Until death, all defeat is psychological.

[TheHatedOne @3ugman]

Got my first bounty $$$ on @Hacker0x01 🥹.

#CyberSecurity #BugBounty #bugbounytips
#hackerone #bugcrowd

[TheHatedOne @3ugman]

@0xSalm0n @Hacker0x01 congrats brother

[TheHatedOne @3ugman]

@DuckyWantDucky Thanks bro 🤍

[TheHatedOne @3ugman]

Always take a shot. Now they gave me a bounty of $150 and total $250 bounty.
#TogetherWeHitHarder #bugbounty

[TheHatedOne @3ugman]

Yay, I was awarded a $100 bounty on @Hacker0x01! #TogetherWeHitHarder #bugbounty

[TheHatedOne @3ugman]

@alial1shan Nice finding 😳 and congrats for the bounty. Keep hacking.

[soloboy @alial1shan]

A simple OTP bypass resulted in a €2,000 bounty.
1. Request some OTP codes.
2. Test one of them randomly.
3. If accepted, try to bypass the OTP request limit.
How the exploit works: enter victim's email, request 99999 OTP codes, then submit any random code like 77777 and log in.

[cTino @tinopreter]

$2000 for a web cache deception bug. As always I share my methodology 👇

Identifying a deception bug is always easy but exploiting it can be hard due to SameSite restrictions on victims cookie

I bypassed this to steal victim JWT. Read about it here:

🔗 https://t.co/CAxfKAC0eP

[TheHatedOne @3ugman]

Yay, I was awarded a $100 bounty on @Hacker0x01! #TogetherWeHitHarder #bugbounty

[Preben @prebenve]

Found a cool bug at Meta.

From misconfigured Grafana instance to R/W access on 507 private Meta repositories.

Wrote up the full chain here:
https://t.co/LYQ0prc68d

$157k bounty awarded by @metabugbounty

[Youssef mohamed (Tyrion) @Youssef12142311]

ًWrite-up is now available
you can read it here
https://t.co/gYRRya8swV
Follow Me to Stay updated with more Findings

[TheHatedOne @3ugman]

@4osp3l I will suggest At&t

[Suresh Aydi (xploiterr) @_xploiterr]

Deleting any user’s account from the platform via exposed /admin/manage-user

#BugBounty

https://t.co/dwBFbZVHDw

[Suresh Aydi (xploiterr) @_xploiterr]

Bypass for the earlier reported issue leading to Organization Takeover via IDOR ($3,700)
#BugBounty
https://t.co/aGKpK0DyR8

[Suresh Aydi (xploiterr) @_xploiterr]

Organization Takeover via IDOR ($3,700)
https://t.co/tdKBNJRDbm
#BugBounty

[🇸🇦 Murtada Bin Abdullah (Rood) @0x_rood]

If the admin panel you targeted has a username enumeration , you can brute-force using a wordlist. This has worked many times for me in this case, the username was "admin"

My password wordlists:

Basic: https://t.co/dwZXsZISiJ

Advance: https://t.co/2AvuC5qTqz

Usernames wordlist:

https://t.co/cKCjZbmS39

#bugbountytips #bugbounty

[TheHatedOne @3ugman]

@arth_bajpai @Fabrikat0r Actually it's two different programs not https://t.co/PtjFM8J6xc & https://t.co/t3AFPjMGeN it's like https://t.co/mZbeRZ9x37 & https://t.co/YTcZlcXcOp. Anyways they just closed it as informative but thanks for explanation

[TheHatedOne @3ugman]

IDK why informative? The web restrict users from email changing and I bypassed it completely and still they are saying informative. What is this logic ? If I'm wrong on this, hunters can change me.

#bugbountytips #bugbounty #hackerone

[TheHatedOne @3ugman]

Got invited to 2 similar prgms on @Hacker0x01 1 tested earlier & 1 recently. Noticed both used identical APIs, but only the newer prgm allowed email changes. By swapping its endpoint into the older prgm, I bypassed the restriction & successfully changed the email
#bugbountytips

[TheHatedOne @3ugman]

@heristum 👍🏻🤍

[TheHatedOne @3ugman]

@FritzHax 👍🏻

[TheHatedOne @3ugman]

@arth_bajpai Yeah That's right 🤍

[TheHatedOne @3ugman]

@sin99xx Ok lil bro. I understood everything, now take some rest 😭