Mayank Malaviya

[Mayank Malaviya @AIwolfie_]

@Zaddyzaddy @Bugcrowd @BugBunny_ai Last month I submitted 2 source code vulns and after 27 days they replied me that it's not reproducible and deducted 2 points

[Mayank Malaviya @AIwolfie_]

fuck you @discord_support @discord

[Mayank Malaviya @AIwolfie_]

I am also the owner of an active Discord server with approximately 2,000 members. Because I cannot access my account, I am unable to manage the community or transfer ownership. I would appreciate assistance restoring access or guidance on how ownership can be recovered.

[Mayank Malaviya @AIwolfie_]

@discord @discord_support

My account was suspended and I was told to submit an appeal through the Discord app. However, I cannot access the account because Discord is rejecting my Google Authenticator 2FA codes as invalid.

[Mayank Malaviya @AIwolfie_]

I've opened support tickets and keep receiving automated responses directing me back to the in-app appeal process, which I cannot access.

Ticket: #67080037

Could someone please review this manually?

[Mayank Malaviya @AIwolfie_]

@FenceForDog @Medium @RobertMitch_ Sure, thanks!

[Mayank Malaviya @AIwolfie_]

My @Medium account got suspended, anyone please tell me if there's any way to recover.

[Mayank Malaviya @AIwolfie_]

@hamidonsolo @itsmeNxSTY @0xHun73r @ide9x Maybe I saw your tweet earlier or someone else's, i honestly don't know anymore 😕 I'm deleting this comment before I embarrass myself further

[Mayank Malaviya @AIwolfie_]

@itsmeNxSTY @0xHun73r @ide9x @hamidonsolo Bro I actually tried finding that tweet again in my feed but failed 😭
I was even thinking of deleting my comment, but then you replied

[Mayank Malaviya @AIwolfie_]

@karticme @YouTube Haha! @YouTube did you know you can skip “non-skippable” ads by adding `/s=12s` at the end of the URL?

[Mayank Malaviya @AIwolfie_]

@Zaddyzaddy @oppo @Hacker0x01 Can confirm this from personal experience. A while ago I reported an information disclosure issue that exposed confidential documents and internal deal-related data. The report was marked as N/A, but the issue still got patched afterward. That honestly says enough.

[Mayank Malaviya @AIwolfie_]

@lostsec_ What the f is this 😭

[Mayank Malaviya @AIwolfie_]

she needs some good sleep 😂

[Hahaha Hahaha @HahahaHaha70057]

She is literally nodding off in parliament during important discussions."

[Mayank Malaviya @AIwolfie_]

Found a Pre-Account Takeover (Pre-Hijacking) via missing email verification + OAuth linking → leads to 0-click account takeover.

Marked duplicate but still got +5 pts
Duplicates = hunting in the right spot
#BugBounty #AppSec

[Mayank Malaviya @AIwolfie_]

Hey @coffinxp7 quick q — I reported a punycode email trick (0-click ATO) to a self-hosted program but they replied it’s invalid, saying SMTP shows reset mail goes to [email protected].[chars].oastify.com (victim) not my homoglyph gmàil. They call it “no impact”. Thoughts?

[Mayank Malaviya @AIwolfie_]

@coffinxp7 You can post blank space on X 😂

[Mayank Malaviya @AIwolfie_]

@coffinxp7 ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀

[Mayank Malaviya @AIwolfie_]

@damnGruz https://t.co/92uiQbNGdW

[Mayank Malaviya @AIwolfie_]

@coffinxp7

[Mayank Malaviya @AIwolfie_]

@UglyBoyAlpha @coffinxp7 S3 bucket