Bero

hi

[Bero @4b0dx]

@MalekMohamed0 @OriginalSicksec Yes same

[Bero @4b0dx]

@Azx7af @ynsmroztas I'm interested in his response, I used an old sumsung phone setuped a proxy and used burp on my laptop but most of the apps won't work when proxy is working

[Bero @4b0dx]

@b4ssya @PUBGMOBILE @PUBG @BgmiDev Maybe you should move on, and focus on finding something new, you might be just losing energy over this. You will definitely find a valid bug that will get validated just keep up the consistency

[Bero @4b0dx]

@_Freakyclown_ @the_IDORminator Thanks man

[Bero @4b0dx]

@N163361N انشاءالله تتقبل لا تخاف

[Bero @4b0dx]

@d3doxp very impressive, great job!!

[Bero @4b0dx]

@b4ssya @Hacker0x01 since they are not planning to integrate twitter why do they hardcode credentials there?? also I think there might be a potentiel risk if someone uses those hardcoded creds to post on there twitter account on behalf of them, specially if those creds belong to the app...

[Bero @4b0dx]

@b4ssya @Hacker0x01 I think you were scammed ngl

[Bero @4b0dx]

@dhakal_ananda Writeup G

[Bero @4b0dx]

@vxunderground @nikhil_mitt @struppigel I would like a CRTE ty!

[Bero @4b0dx]

@vxunderground @nikhil_mitt

[Bero @4b0dx]

@vxunderground @nikhil_mitt Thanks vxy

[Bero @4b0dx]

@4osp3l @AatankBadb16659 for real I still can't understand how it works, but a writeup will do the job. good luck man waiting for the writeup

[Bero @4b0dx]

@4osp3l You can create multiple accounts with the same email by using this technique and as you said update email to a victim email, but how can this be an information exposure? I don't see how you did exploit it. maybe the bug in the picture has no link to the information you provided

[Bero @4b0dx]

@Dior100x Thanks

[Bero @4b0dx]

@AlteredSecurity CRTP, It's a really good course!

[Altered Security @AlteredSecurity]

Altered Security Black Friday Giveaway + Mega Sale!

Win free access to two of our most popular certifications:
• 1 CRTP seat
• 1 CARTP seat

How to participate:
• Like this post
• Comment which course you’re interested in and why
• Repost

Winners will be selected randomly and announced on November 21, 2025.
If you've already taken advantage of our Black Friday offer, you're still eligible.

Black Friday Sale Highlights:
• Up to 25% off Red Team Labs and Bootcamps
• Up to 15% off AltSecCON 2025 tickets
• No coupon code needed
• Use anytime within 6 months

More details: https://t.co/hp0GLwqSIz

[vx-underground @vxunderground]

In the mid-2000's I played a lot of video games. Most notably Halo 2 and Halo 3. I had achieved the highest ranks possible in many playlists.

For my Halo nerds, I was a 50 in Lone Wolf, Doubles, Team Slayer, Team Sniper, and SWAT. I was a 47 in MLG.

As I became more and more competitive it was semi-common to encounter cheaters. It was primarily people abusing the P2P networking system they implemented (as the kids called it, lag switching). It eventually transformed into people doing DdoS attacks (Distributed Denial of Service Attacks) using popular tools at the time like Cain & Abel (for getting computer addresses in the game lobby) and silly botnet stuff like "XR Booter" and "Biozombie".

I became enamored with the concept of DdoS attacks. I eventually had a small little botnet (I was very dangerous, I had over 20 infected machines) and was cheating in Halo as well. However, while many of the degenerate filth I associated with at the time continued to do DdoS attacks and lame shit, I became much more interested in the internals of botnets and computer networking.

As a teenager I then took the initiative to self-teach myself introductory computer networking stuff. I mostly focused on the TCP/IP stack. I thought it was fascinating. Eventually however, I became more curious on the "booters" themselves and how they fundamentally operated.

After reading through forums and conversing with hundreds of noobs, such as myself, I eventually came to the realization I would need to learn to code to truly understand how these "booters" worked. On FreeNode someone convinced me to grab a physical copy of C Primer Plus ... so, I did.

I got the book and suffered. It was insanely boring. I fucking hated it. I hated the "exercises". I hated debugging. The if-else and while-loop conditional statements annoyed me. Data structures seemed intense. The entire concept of the stack and dynamic memory allocation seemed like alien technology.

However, I persisted because I was determined to understand what the fuck this "booter" stuff was doing.

Was I good at coding? No.
Did I learn fast? No.
Am I high-IQ 1337? No.

Eventually after struggling, kicking my feet, and being self-dragged through the mud I actually finished the book. During this time StackOverflow didn't exist. ChatGPT didn't exist. My only help was forums and schizos on IRC.

When I finished my book I decided to lock in and dive into malware. My goal (initially) was to make my own "booter". Yeah, I struggled unironically for like, 2 years, self-teaching myself networking and C to make a shit fucking DdoS botnet.

I did some web searching and found a place called "VxHeaven". On there I found tons of papers and source code for malware. I was blown away. Everyday after school I went to VxHeaven and read papers on malware. I took notes, I read papers, I tried copy-pasting source code to understand how it worked.

After more struggling I completed some small malware projects. They were never released into the wild because as I learned more I stopped caring about the applicability of malware. I instead exclusively wanted to focus on the "potential" of malware. I wanted to explore malware and ... just do weird stuff on the computer. I didn't want to hurt people. I didn't want to play video games anymore. All I wanted to do was code weird stuff and learn more. Many of my "peers" at the time thought I was lame for this.

Anyway, I was a super hardcore loser and stopped writing malware and instead switched up to just regular programming. I didn't think it was possible to do malware stuff as a career.

Around 2018, or 2019, I decided to make a website that archived malware source code, samples, and papers. I did it for myself because I wanted to emulate what VxHeaven did. I didn't expect anyone to give a fuck about me or my project. However, much to my surprise, it has exploded in popularity.

Am I a faster learner? No.
Do I have a good memory? No.

I have to re-read stuff like 300 times. I suck at stuff. My only saving grace is, despite being ridiculously dumb, I am absurdly persistent in things I am interested in. This persistence and willingness to fail over and over, yet continue trying, has some how lead me to having a relatively successful career and relatively success website and social media presence

tldr video games, tried hard, failed, I'm dumb, kept doing stuff, some how success. Mostly luck and failing a bunch

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Static analysis for Android apps based on the OWASP MASVS framework 🌟

- https://t.co/3coBYQJ8iX

#infosec #cybersec #bugbountytips

[DarkShadow @darkshadow2bd]

❎WAF block: whoami
✅WAF bypass: $'\x77\x68\x6f\x61\x6d\x69'

Join my BugBounty Telegram Channel: https://t.co/LeJHHPweci
bash script:

#!/bin/bash
str="$1"
out=""
for ((i=0; i<${#str}; i++)); do
char="${str:i:1}"
ascii=$(printf '%d' "'$char")
hex=$(printf '%02x' "$ascii")
out="${out}\\x${hex}"
done
echo "$'$out'"