Chand Singh

OSCP | PNPT | BURP Certified
🇮🇳 Speak not because it is safe, but because it is right. 🇨🇦

[Chand Singh @Chand_42]

I just published my first write up of #bugbounty Hope you liked it !
Protonmail Stored - XSS
https://t.co/j92FA53kaX

[Chand Singh @Chand_42]

Don’t Buy this product, not even working for 15min. Just bought one week before.

@SukamIndia #lithium #inverter

[Chand Singh @Chand_42]

I just published ‘CVE-2023–43837: Two-Factor Authentication (x2FA) Bypass Vulnerability in Roundcube Webmail Plugin’.
https://t.co/iva0t1rlSX

[Chand Singh @Chand_42]

It's been a while, but I've finally written another post on how to bypass 2FA.

2FA Bypass Trick! Discover how a CSRF token can open doors without triggering 2-Factor Authentication.

https://t.co/HGSYqBMjbu

#Security #2fa #vulnerability

[Chand Singh @Chand_42]

@airtelindia Still it’s not solved. I will port all my sims to other service provider. Thanks for your service.

[Chand Singh @Chand_42]

@airtelindia I am living in abroad and my one of my family plan number is not working. My family visited many times Airtel office (Ludhiana clock tower) and they are not helping.

[Laxman Muthiyah @LaxmanMuthiyah]

Apple account takeover vulnerability - https://t.co/kNK6mR9kWK

[Chand Singh @Chand_42]

@GateHub Check DM please.

[Chand Singh @Chand_42]

@GateHub I'm facing this error since last month. Support also not helping me to resolve this issue. please check what's going on. I want to withdraw my coins. @enej_p

[Chris Hladczuk @chrishlad]

I've interviewed 5 founders of billion dollar startups.

Here's what I learned:

[Chand Singh @Chand_42]

@HDFCBank_Cares check dm please.

[Chand Singh @Chand_42]

I’ve been using HDFC bank since 2011. However, I recently experienced worst experience while opening corporate account at branch Talwandi Sabo 1322. @HDFCBank_Cares please look into the matter, this branch have worst manager. I suggest please don’t visit this branch. @HDFC_Bank

[Alaa Abdulridha @alaa0x2]

Part two of my article about how I hacked Facebook.

Total bounty: $54,800
Two account takeover and Internal SSRF.

https://t.co/sLRAn175zu

#BugbountyTip #infosec #facebookbugbounty #CyberSec #bugbounty #bugbountytips

[Frans Rosén @fransrosen]

We did some fun tricks with nginx on bug bounties a while back, and made a post about out the configurations being vulnerable
https://t.co/TJ8ma1tKjJ

[Chand Singh @Chand_42]

#supportfarmersinindia
#supportfarmers
#Tractor2Twitter

[Kaushik Basu @kaushikcbasu]

I’ve now studied India’s new farm bills & realize they are flawed & will be detrimental to farmers. Our agriculture regulation needs change but the new laws will end up serving corporate interests more than farmers. Hats off to the sensibility & moral strength of India’s farmers.

[Sam Curry @samwcyo]

New writeup:

"We Hacked Apple for 3 Months: Here’s What We Found"

Featuring...
@bbuerhaus, @NahamSec, @erbbysam, and @_StaticFlow_

https://t.co/XE757tadE9

[Bipin Jitiya @win3zz]

As I previously promised I would publish a writeup on how I managed to find the SSRF bug on the biggest social media website, Facebook.
So I wrote a blog about that finding. I hope you like it. 🍷
#BugBounty #Infosec

https://t.co/98TtgPxbRQ

[Bhavuk Jain @bhavukjain1]

Zero-day in Sign in with Apple - bounty $100k
https://t.co/9lGeXcni3K

[Frans Rosén @fransrosen]

Took more than 2 years, but just released the postMessage-tracker Chrome Extension!
https://t.co/l1HMf1vL0Q

Look at the functions receiving postMessages directly in the extension, look at the messages and sender/receiver window locations and track everything using a log-URL.

[Chand Singh @Chand_42]

Yay, I was awarded a $1,337 bounty on @Hacker0x01!#TogetherWeHitHarder
Issue - Privilege Escalation cc @sappi_13