Berαt Blmz

[Berαt Blmz @Beratblm]

@Mod666f @oyto0 70 kilo adam bunu zıplatır.

[Berαt Blmz @Beratblm]

@rez0__ We need to use less AI and focus more on manual research. It even interprets the word “cyber” as an attack.😂

[Berαt Blmz @Beratblm]

@eh_pavan You should look at every report you send as informative

[Berαt Blmz @Beratblm]

@fkadev @github Teyipe biraz para koklattınmı. 😂😂😂

[Berαt Blmz @Beratblm]

@HTSpor Salah mükemmel futbolcu ama ayın oyuncusu olarak Gift Orban derim.

[Berαt Blmz @Beratblm]

@pusholder yer bulamamış abi güvenle yolculuk yapıyor. 😂

[Berαt Blmz @Beratblm]

@bpthaber Adam kafasını koruyor.

[Berαt Blmz @Beratblm]

@agent4994 @xssdoctor No, I didn’t receive a bounty. But if you find something, let me know. They don’t pay; I tried many times.

[Berαt Blmz @Beratblm]

@xssdoctor Yes, it could become effective with a different perspective.

[Berαt Blmz @Beratblm]

@xssdoctor I hope you find something. I was actually able to run it locally in my own environment using NanoHTTPD on Android. It’s not limited to localhost either; it also works with local IP addresses.

[Berαt Blmz @Beratblm]

@xssdoctor https://t.co/Qdq6iCYTuy

[Berαt Blmz @Beratblm]

@xssdoctor If you find a valid finding, let me know too 😅

[Berαt Blmz @Beratblm]

@xssdoctor After a few organizations marked the same issue as out of scope, I stopped pursuing it, but I still think there are things worth investigating here.

[Berαt Blmz @Beratblm]

@xssdoctor I’ve submitted reports to many organizations, but most of them marked my reports as Informative because the attack required the victim to install a malicious application.

[Berαt Blmz @Beratblm]

@xssdoctor When the mobile application is installed, it can run a local server within the mobile app a mobile local server.

[Berαt Blmz @Beratblm]

@xssdoctor Yes, I agree

[Berαt Blmz @Beratblm]

@xssdoctor Was the report considered valid? I found a very similar vulnerability in a Google OAuth application, but they marked my report as out of scope because the victim had to install a malicious application on their device.

[Berαt Blmz @Beratblm]

@TheDataHubX Why isn't Türkiye on the list?

[Berαt Blmz @Beratblm]

@adilburaksen Aynısı benim bir raporumada olmuştu aynı triager.