Moneyinthegrave

Professional bug bounty hunter.
Active researcher on bugcrowd with 100% accuracy with over 100 submissions.
Half of fame- Google,Oracle,Apple,Spotify,Microsoft

[Moneyinthegrave @59darcyshort]

Mission accomplished!!!!! I was awarded $500 for my submission On Google VRP.

[Hip Hop All Day @HipHopAllDay]

Drake becomes the first rapper to receive 100M+ streams in a single day on Spotify in 2025 🔥🦉

The last to achieve this was also Drake, in Oct' 2023.

[Young Thug ひ @youngthug]

That boy back number one 🐐

[Moneyinthegrave @59darcyshort]

@0xMstar I even mailed them and told them that I don't want the service anymore after buying within days but they didn't give any response.

[Moneyinthegrave @59darcyshort]

@0xMstar Bro I have pretty recon and it's not good.
I bought that for a year and it's full of waste.

[Moneyinthegrave @59darcyshort]

@drakedirect @Drake 6god Kings of king Drizzy Drake

[Moneyinthegrave @59darcyshort]

@0xMstar @PrettyRecon Is prettyRecon owned by you?

[Moneyinthegrave @59darcyshort]

@DrakeChart Same like mine jimmy cooks at top

[Moneyinthegrave @59darcyshort]

I earned $800 for my submission on @bugcrowd https://t.co/aMzr66VsGR #ItTakesACrowd

[Moneyinthegrave @59darcyshort]

@0xMstar @Bugcrowd @naglinagli @Abhinav_one

[Moneyinthegrave @59darcyshort]

@0xMstar @Bugcrowd

[Moneyinthegrave @59darcyshort]

@bablusingh964 @Bugcrowd Github Leak
Orgname: password

[Moneyinthegrave @59darcyshort]

I earned $1,000 for my submission on @bugcrowd #ItTakesACrowd

[Moneyinthegrave @59darcyshort]

@0xMstar @Bugcrowd

[Moneyinthegrave @59darcyshort]

@0xMstar @Bugcrowd Talent

[Moneyinthegrave @59darcyshort]

@0xMstar @Bugcrowd

[MR404NTF @M404ntf]

{“id”:111} --> 401 Unauthriozied
{“id”:{“id”:111}} --> 200 OK

POST /api/get customers
Content-Type: application/json {“user_id”:<attacker_id>,”user_id”:<victim’s_id>}

GET /api_v1/messages?user_id=VICTIM_ID --> 401

GET /api_v1/messages?user_id=attack&user_id=VICTIM --> 200 OK

[Friendly @Skeletorkeys]

XSS is one of the top vulns in bug bounties. Learning about it is important to get started. Heard good things about this course and @christophelimp is offering 40% off:
https://t.co/bmcm14P4Tb - Check it out guys!

[Nicolas Krassas @Dinosn]

403Bypasser - Burpsuite Extension To Bypass 403 Restricted Directory https://t.co/7gjiT9YVzr

[RIVER @wugeej]

IBM Maximo Asset Management is vulnerable to Information Disclosure via XXE Vulnerability (CVE-2020-4463)

1. Data Leakage
python3 https://t.co/abCIVJtoOC --url https://10.0.0.1 -d

2. XXE
python3 https://t.co/abCIVJtoOC --url https://10.0.0.1 -x

https://t.co/kcBlZmTIZw