Chetan Kashyap

Security Engineer (Faking it for now)

[Chetan Kashyap @Ch3tan_bug]

@0xAsm0d3us 💪⛈️⛈️

[Chetan Kashyap @Ch3tan_bug]

@bug_vs_me There will be more dupes in future - different people same agents finding the same stuff

Complex and impactful chaining is what will make difference

Ai has made suddenly everyone a JS analysis expert - anybug that works on bruteforce or pattern matching will be gone….

[Chetan Kashyap @Ch3tan_bug]

Man man just got a crazy bug ! Domain was behind SSO gave few JS to claude and found an endpoint that lets you chat with a chatbot.

Fun part that chatbot can literally invoke every action on their deployment pipeline ⚡️⚡️

[Chetan Kashyap @Ch3tan_bug]

@HarshDRanjan1 ⛈️

[Chetan Kashyap @Ch3tan_bug]

@rez0__ My weekend means token maxing 🤙

[Chetan Kashyap @Ch3tan_bug]

@krishnsec This is better

[Chetan Kashyap @Ch3tan_bug]

@0xAsm0d3us https://t.co/lsK646pwDI

[Chetan Kashyap @Ch3tan_bug]

@roohaa_n HBD mate 🤙

[Chetan Kashyap @Ch3tan_bug]

@HarshDRanjan1 @aertrip @AertripS https://t.co/a6g4WQuZqX

Is this even legit ? The only post I see is testing twurl 🤣🤣

[Aertrip Support @AertripS]

Testing twurl

[Chetan Kashyap @Ch3tan_bug]

@thezdi @orange_8361 Goat

[Abhi Varde @varde_abhi]

Going through a tough time. Actively looking for work.

Last 6 months:
→ Merged PRs in @better_auth @appwrite @mintlify @umami_software
→ 150+ GitHub stars, 4K+ npm downloads
→ Shipped 10+ products app

Frontend & Product Engineer. 3+ yrs. Available now.

DM or retweet. 🙏

[Muqsit 𝕏 @mqst_]

Finding Zero-Days With Any Model

Blog: https://t.co/2RJfDW87BO

Author: Niels Provos

[Chetan Kashyap @Ch3tan_bug]

@4osp3l They consider them honest only for the time their reports are being paid out by them

[Chetan Kashyap @Ch3tan_bug]

@rez0__ Mythos level shit

[Chetan Kashyap @Ch3tan_bug]

@hakluke I love these weekly updates by @hakluke

[Chetan Kashyap @Ch3tan_bug]

@krishnsec @Bugcrowd Congrats man

[Chetan Kashyap @Ch3tan_bug]

@krishnsec @yeswehack So wtf they mean by api is ours and bug is not 😂

[Chetan Kashyap @Ch3tan_bug]

@4osp3l Well technically valid but for me I consider this more of a defense in depth issue and would lean towards info

This already requires you to have either the reset password (old) link access or the old email access beofore it was changed

Pretty unrealistic

[Chetan Kashyap @Ch3tan_bug]

@gkhck_ Did you even read the text below what you highlighted ?