Chef.

BugHunter 💻🥷🇨🇴

[mrdesoky0 @mrdesoky0]

Just released the Ultimate IDOR Testing Checklist 🧩

I combined techniques from many sources to cover IDOR scenarios.

Know a technique I missed? Drop it in the comments.

Notion:
https://t.co/Sfc0MbrTeX

GitHub:
https://t.co/WrRA6GDodC

#bugbountytips #IDOR #AppSec #InfoSec

[JJ. Curly @Hi_Im_Curly]

Trump everytime he gets low approval ratings

[bugcrowd @Bugcrowd]

8 minutes after submitting a P4

[Chef. @Chef52002]

@Anaya_sharma876 1. Usar un sistema de Linux que sea menos mierda que Kali Linux.
2. Reinstalar Windows y usar Ubuntu en WSL.

[Chef. @Chef52002]

@zack0x01_ Siempre dicen que su agente IA encontró un crítico pero nunca muestran el resultado real del reporte después de revisión.

[bugcrowd @Bugcrowd]

AI agents are increasingly being used by some users to create a huge volume of low-quality, unverified submissions. We call this “sloptimism,” overly optimistic submissions driving large volumes of speculative or AI-generated reports.

[zseano @zseano]

bug bounty programs don't care if you focus on them
bug bounty programs don't care if you stop focusing on them
you are easily replaced.

[Chef. @Chef52002]

@Behi_Sec JAJAJJAJAJAJAJAJ

[sw33tLie @sw33tLie]

bbscope v2 is out & https://t.co/SiQbDjz6Rk is live!

A free #bugbounty tool to pull scope from HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi.
Store it all in PostgreSQL, track changes, query it, pipe it into your tools

Thread on what's new👇

[Chef. @Chef52002]

@Tania_Tagle La gente de extrema derecha, siempre que hacen una acusación, es una confesión.

[Chef. @Chef52002]

@1Iucas Una máquina 🔥

[Chef. @Chef52002]

@Masonhck3571 P0.99 Obvio que es crítico.
No sabes nada amiguito.

[Chef. @Chef52002]

@Gabo_Magus Se convirtió en un chiste y todos los remates los está haciendo la esposa.

[Chef. @Chef52002]

@MONALI4T Está mal que la paliza fue frente a sus hijos pero también está mal ser racista frente a sus hijos.

[ali alhassoun @deepvvm]

Insane IDOR Technique🔥

IDOR may fail not because it doesn’t exist but due to a different ID format.

My account ID started with 14, while the victim’s started with 15. After creating accounts to match the 15 prefix, I was able to access another user’s data.

#BugBountyTips