Osman Aballa

[Asaassim @Asaassim]

It was wonderful program🤌

[Asaassim @Asaassim]

Had some really good conversations with the Cursor Ambassador for Ghana about tech, creativity, and actually shipping ideas.
This is what building in real time looks like.

https://t.co/VkMCFyfxjG

[Asaassim @Asaassim]

Please don’t forget to leave a comment 💋🤌

https://t.co/2QTZmLMGMA

[Asaassim @Asaassim]

You know that moment when you realize you’re in the right room?
Yeah… this was one of those.
Builders everywhere, ideas flying, and that quiet focus of people actually working.

#cursor #tech

[Osman Aballa @9ragon_nit3s]

@Ishaannnnnnnnnn @lostsec_ @PortSwiggerRes Sure

[Osman Aballa @9ragon_nit3s]

@lostsec_ Recon has been a huge win for me. You made it super simple, and for the last 3 weeks I’ve been pulling in ~$300/week just from recon. Your write-ups and videos helped me build my own method, and it’s working like magic.

[Osman Aballa @9ragon_nit3s]

@Ishaannnnnnnnnn @lostsec_ Start from @PortSwiggerRes platform

[Osman Aballa @9ragon_nit3s]

Nice! The next is really understanding
1. What each vulnerability class is, what implementation causes it, what context it can be found …
2. How each works, this include how the vulnerability is introduced, how to detect a behavior that signals the presence of the issue, how to exploit it …

Then
Practice, practice and practice how to exploit the vulnerabilities in labs. Portswigger is a great platform to help you on this and it’s free

After that …

[Osman Aballa @9ragon_nit3s]

@PortSwigger @hAPI_hacker API’s expert+pro+mentor+all l

[Osman Aballa @9ragon_nit3s]

@lostsec_ There you go ❤️❤️❤️❤️

[Osman Aballa @9ragon_nit3s]

@lostsec_ Notes really makes hunting easier

[Osman Aballa @9ragon_nit3s]

something interesting though

[Osman Aballa @9ragon_nit3s]

@lostsec_ 2

[Osman Aballa @9ragon_nit3s]

Digging through JS files, uncovering the secrets they hide. Found an admin email in index.js, spotted a ‘search user by email’ endpoint, passed the email … boom. Just treasures in plain sight 💎💎💎

[Osman Aballa @9ragon_nit3s]

@lostsec_ Thanks for the heads up

[Osman Aballa @9ragon_nit3s]

@hamza_alna11125 Can I dm you

[Osman Aballa @9ragon_nit3s]

@Wisdom_HQ 9

[Osman Aballa @9ragon_nit3s]

@tamba_jesus Please can I ask you something

[Osman Aballa @9ragon_nit3s]

@ElonMuskNews47 If the house or the car will not generate money, it's not worth buying any

[ReconOne @ReconOne_bk]

Logical Bugs are often invisible to scanners
They live in the assumptions devs make
Want to find them? Think like the app shouldn’t work

Here are 6 strategies to uncover logic bugs (with examples):
#bugbounty #websec #cybersecurity