madhuson

takeover by mango

[madhuson @BybitArabia]

@GrapeCityUS where can i report a security vulnerbilityt oon your domain for bug bounty?

[madhuson @BybitArabia]

@binance allow everything after everyone sell thier old and new luna and when it worth $0. lost my money and found a great reason not to use binance anymore.

[madhuson @BybitArabia]

@binance binance is such a shit. they are enabling luna classic on 30 may till that time luna classic will be 0. and also they are listing luna 2.0 on 31 when the luna 2.0 price will be almost 0 as well. modaf**k*ng scammers. fuck you binance.

[Nagli @galnagli]

The new @Grafana CVE-2022-21703, is actually a 1 Click Authentication Bypass and full read SSRF via CSRF, all you need is XSS/TKO on Same site host and the CVSS bumps to 9.3 - Critical.

All @Grafana versions are VULNERABLE 🙃

Read more at https://t.co/abqEX9oidS

#BugBounty

[madhuson @BybitArabia]

@Bugcrowd I remember getting invited for bugcrowd pentester certification which i was wondering coz i was new on platform and dont have much points.
the researcher success team is awesome as they told me that hackers get selected on their performance basis. for ex. bounty amount they get.

[bugcrowd @Bugcrowd]

🎉 100k Giveaway 🎉

Hackers walked so Bugcrowd could run. Thank you for being part of our community! 🏃 💯

To show our appreciation, we're giving away swag all day! 😎

To enter 🎟️ ⤵️
🔁 RETWEET
🧡 LIKE
✅ Drop your fave Bugcrowd memory below👇

#ItTakesACrowd

[madhuson @BybitArabia]

@Bugcrowd web

[madhuson @BybitArabia]

@Bugcrowd Stored XSS

[madhuson @BybitArabia]

@Bugcrowd @caseyjohnellis Do not underestimate manual testing. nowadays evey newcomer want to automate everything but lacking manual testing will throw more duplicates and disappointment.
finding idors and misconfigurations is the only way to stay unique in this crowd.

[Basavaraj Banakar🇮🇳 @basu_banakar]

If you ever found ssrf & failed to access internally hosted web services then always search localhost & 127.0.0.1 in main.js or in app.js , you may end up in accessing internal web resources.

#bugbountytips #bugbounty #cybersecurity #ssrf #infosec

[Osama Sadoqi @Osaqii]

Alhamdolilah ..
How i was able to find it :

1- collect live subdomains using reconftw
2- run gospider -S subs -d 2 -o output (deepth of 2 is important)
3- then gf s3-buckets
#BugBounty
#bugbountytip #bughuntingtips

[madhuson @BybitArabia]

@Bugcrowd randomelfy_bugcrowd 😅

[bugcrowd @Bugcrowd]

Keep these two parameters in mind to get more invites to private programs 👀 👇

1️⃣ Proven skills that are specific to the program targets
2️⃣ Dollars earned on the platform

#Hackers #BugBounty
https://t.co/SMGhyjfuoE

[shenetworks @shenetworks]

Burnout is so brutal and incredibly difficult to recover from.

[bugcrowd @Bugcrowd]

Learn the mobile #hacking basics with our resources kit 👇👇👇

#bugbountytips

[madhuson @BybitArabia]

@SherlockSecure @Poshmarkapp @Bugcrowd @Hacker0x01 @yeswehack @HackenProof @SynackRedTeam please check your dm :)

[bugcrowd @Bugcrowd]

When you encounter a 403 Forbidden page 🚫 , try adding an "X-Client-IP" header with the value "127.0.0.1" #bugbountytips ✌🏽