Noob learner

[Noob learner @HackingL93809]

@TeslaTheGod DDOS the site 💀

[Noob learner @HackingL93809]

@Stenkof200 Nice find. What's the bug here bro?

[obscaries ❘ AppSec @obscaries]

🧵 The Art of Subdomain Permutations

Most hunters stop at subdomain enumeration.

The real recon starts when you begin generating what developers forgot to expose 👀

Here are some of the best permutation tools every bug bounty hunter should know about ↓

[khan mamun @mamunwhh]

Time-Based SQL Injection Is Still Everywhere!🔥

You can fingerprint the backend DB version with

'; IF (SUBSTRING(@@VERSION,1,1) = 'M') WAITFOR DELAY '0:0:10' --

Delay = proof.

Thanks dude

#BugBounty #SQLi #bugbountytips #hackerone

[BRute Logic @BRuteLogic]

SSRF Payloads for LFR/LFD

file:/etc//passwd%3F/
file:/etc%252Fpasswd/
file:/etc%252Fpasswd%3F/
file:///etc/%3F/../passwd
file:${br}/et${u}c%252Fpas${te}swd%3F/
file:$(br)/et$(u)c%252Fpas$(te)swd%3F/

SSRF POLYGLOT
file:///etc/./passwd?/../passwd

#CF403
https://t.co/6xLoSUoI7U

[Noob learner @HackingL93809]

@0xraselrana Lol

[Noob learner @HackingL93809]

@xlsize0bruh @Hacker0x01 they are only giving just a cap. they should also include tshirts and stickers along with it.

[Noob learner @HackingL93809]

@GitHubSecurity And how many reports of them were valid?

[Noob learner @HackingL93809]

@intigriti burp, vscode and python scripts. Although the scripts combine multiple tools.

And I am a beginner !!! 😅

[Noob learner @HackingL93809]

@GodfatherOrwa @Bugcrowd Nothing will be left to report 🤣

[Noob learner @HackingL93809]

@Fabrikat0r @Rohan_Lew @Hacker0x01 😂😂 this gave me a good laugh 😂

[Abdulkadir | Cybersec @cyber__razz]

HOW A MASS ASSIGNMENT VULNERABILITY CAN IMPACT API CALLS

[Aditi Singh @aditi_singghh]

When we decompile an APK and see an unreadable https://t.co/BbQf3H943H.bundle, it could be Hermes bytecode. Using https://t.co/DBonMwpUBM we can make it readable and look for interesting endpoints, keys, or app flows.

#bugbounty

[Noob learner @HackingL93809]

@fattselimi Hi bro. How long you sticked to it until success. And how long it took you for consistent monthly bounties.

[Nav Toor @heynavtoor]

Google has a pirate enemy.

He's one guy. His name is Raymond Hill.

He built uBlock Origin. The world's best ad blocker. 63K stars. GPL-3.0. He literally refuses every dollar you try to send him.

Then Google did the unthinkable.

July 24, 2025. Manifest V2 disabled everywhere. The full uBlock Origin stopped working on Chrome.

The world's biggest ad company nuked the world's biggest ad blocker on its own browser. They called it "security."

Coincidence.

Here's the wildest part:

Raymond didn't fold. Latest release: March 11, 2026.

Still alive on Firefox. Still alive on Edge. Still alive on Brave. Still GPL-3.0. Still refusing every dollar.

One developer vs. the trillion-dollar ad empire.

But DO NOT install it. We should all keep Google richer.

100% Open Source.

(Link in the comments)

[Noob learner @HackingL93809]

@_tabahi @Apple 55 used + 34 cached ~89gb lol

[Noob learner @HackingL93809]

@_tabahi @Apple How tf is that 100GB memory being used 😭

[Noob learner @HackingL93809]

@Itx_Shad0w @TeslaTheGod I just love his energy and voice.

[Noob learner @HackingL93809]

@arth_bajpai That researcher has only 1 valid bug. And he never came back after that

[Noob learner @HackingL93809]

@zack0x01_ This is real but dangerous details of it. MIT research also told us the same. We are losing cognitive abilities