Arqam

Security Researcher | BugBounty Hunter | CAPIE

[Arqam @ArqamSec]

Check out the new video about a critical severity race condition bug I found recently!
https://t.co/VuZbkYR6KP

[Arqam @ArqamSec]

You can take a closer look here:
https://t.co/ZQGpQUpvHL

[Arqam @ArqamSec]

Built another milestone today:

I just completed TryHackMe’s Web Application Pentesting Path and earned the certificate.

Still learning, still improving, still chasing real skill in web security and bug bounty🔥

#TryHackMe #WebPentesting #CyberSecurity

[Arqam @ArqamSec]

Day 10 Bug Bounty💻

Tested user account settings page and validated some potential xss bug

also read alot of writeups

Total reports= 0
Hunted= 5hrs
Earning: 0$

[Arqam @ArqamSec]

@WebSecAcademy true to some extent... there's slight nuance on it, nowadays those "classic" ever lasting vulnerabilities are more obfuscated and harder to find

[Arqam @ArqamSec]

@adilburaksen waiting for writeups bro

[Arqam @ArqamSec]

@Roninxgh writeup please buddy🙌

[Arqam @ArqamSec]

@HMohit07 @krishnsec tell me bro

[Arqam @ArqamSec]

Day 9 Bug Bounty💻

Tested profile settings and oauth signup implementation for bugs, but still didn't found any impactful vulnerability

wish me luck🤞

Total reports= 0
Hunted= 6hrs
Earning: 0$

[Arqam @ArqamSec]

WDYT😂

[Arqam @ArqamSec]

Day 7-8 Bug Bounty💻

Hunted for a potential reflected xss on one of the subdomains, but no succcess till now

Mapped the entire oauth workflow of target for finding vulnerabilities in it

Lets see what happens in future😗

Total reports= 0
Hunted= 5hrs
Earning: 0$

[Arqam @ArqamSec]

@Yassineaboukir @Hacker0x01 Hope i can achieve that one day!

[sudo @rootsud0]

exactly this

[Arqam @ArqamSec]

@HackerOn2Wheels @ledz1996 @coinbase @JLunglhofer I feel so bad for you after hearing that, hope things get better..

@coinbase please show some respect to the hardwork of security researchers who are trying to protect you🙂

[Arqam @ArqamSec]

First time I've seen that kinda thing😂

[Joseph Thacker @rez0__]

506 Variant Also Negotiates

[Arqam @ArqamSec]

Day 5-6 Bug Bounty

Hunted on random urls from katana and waybackurls

Found some interesting subdomains, but got hit by a 403😑

Currently working on bypassing that😗

Wish me luck🤞

Total reports= 0
Hunted= 5hrs
Earning: 0$

[Arqam @ArqamSec]

@0xazanul do you have the paid plan of codex?

[Arqam @ArqamSec]

@rez0__ @brutecat now got a worthy opponent😂

[Arqam @ArqamSec]

@noshitpwn @Darkry741 yeah, otherwise they don't email you personally