Arslan Mahmood

Bugs are there you just have to uncover them

[Intigriti @intigriti]

12 #bugbountytips you NEED to know about! 🧵

A #bugbountytip is a short trick that can help you find your next bug!

Here are some quick wins you can start implementing today to become a better hunter 👇

[JS0N Haddix @Jhaddix]

(a LONG thread) 🧵

Inspired by @infosec_au & @hacker_ here's one of my fun hacker stories:

= The complete compromise of a password manager company =

Here's how I did it (so you can learn):

I was given the project to pentest a password manager company: *.redacted.com

(1/16)

[Arslan Mahmood @ArzlanMahmood]

@intigriti 0

[Arslan Mahmood @ArzlanMahmood]

@intigriti phish

[Arslan Mahmood @ArzlanMahmood]

@intigriti @InsiderPhD @intigriti

[Arslan Mahmood @ArzlanMahmood]

@intigriti CVSS

[BSides Islamabad @BsidesIslamabad]

🎤🔊

Alongside some incredible speakers at #BSidesIslamabad2020, @ArzlanMahmood will be presenting on “Molding the web application in your way to hunt the business logic bugs.”

To register for this fabulous event, Click https://t.co/hpzagl9nv1

#cybersec #securitybsides

[Arslan Mahmood @ArzlanMahmood]

@Josexv1 @hackerscrolls @cherboff Any similar tool for windows?

[Arslan Mahmood @ArzlanMahmood]

@LisaForteUK @WH_Y @danjconn @UK_Daniel_Card @cybergeekgirl @cybersecstu @SarahASmith75 @dropped_packets @murphsecguy @christiantoon @RoseSecOps @Jake_MooreUK @cirrius_tech @RayRedacted admin:admin

[Arslan Mahmood @ArzlanMahmood]

@zprytka Checkout this talk of Phillip Wylie on Red Team village Defcon of this year https://t.co/lInIu5btLx

[MarcoFigueroa @MarcoFigueroa]

Post #Defcon28 the special guest to close out this weekend is @Jhaddix and the primiere of #TheBugBountyGame https://t.co/dLYPvLJ8mI

[Arslan Mahmood @ArzlanMahmood]

@NahamSec @eLearnSecurity Hopeful to get course.Let's see, whether I get.

[Michiel Prins @michielprins]

Today @Hacker0x01 is proudly announcing the public availability of our latest product offering, HackerOne Pentest - https://t.co/ZkUTWyRS7i. A fully hacker-powered pentest. Read on for a thread about pentesting. 👇

[Arslan Mahmood @ArzlanMahmood]

@jobertabma Great .... thanks.

[Ben Sadeghipour @NahamSec]

We are celebrating 10K+ followers on twitch today with a special interview with @albinowax!

I also created a puzzle (with prizes) thanks to @bbuerhaus, @leemsparks, and @JTobcat! Use !puzzle in my twitch chat for more info!

Going live at 11:00AM PDT on https://t.co/J7ZpQDHEqX

[Intigriti @intigriti]

NEED SOME INSPIRATION? 🤯 We've bundled all #BugBountyTips of the past year by the intigriti community into 1 blogpost. Rediscover these #BugBounty gems💎now!
https://t.co/vyEMroALFY

[James Kettle @albinowax]

Following months of research, I've just submitted to Black Hat USA! This talk will feature my feature my messiest, highest-risk attack-technique yet. #BHUSA

[Ben Sadeghipour @NahamSec]

We are officially a little less than a week away from #VirSecCon2020! Here's the registration/schedule with talks from @stokfredrik, @Jhaddix, @TomNomNom, @zseano, @dawnisabel, @ethicalhacker, @niden, @B3nac, @uraniumhacker, @ChloeMessdaghi, & @erbbysam! https://t.co/0UPjgGGIfg