HK

Cybersecurity Engineer || Bug Bounty Hunter || 404 Not Found

[HK @Harsh66071]

@GodfatherOrwa @bsidesahmedabad Bugbountyexplained

[HK @Harsh66071]

@RISEKING123 @siappaa_

[HK @Harsh66071]

@siappaa_

[HK @Harsh66071]

@siappaa_ @RISEKING123 Iska 1 month ka income tumko full job offer dei saktha hai

[HK @Harsh66071]

@Bugcrowd @Bugcrowd I have a submission pending from 2 months and there is a blocker for more than 1 month now and your support is not even responding properly what is going on here ?

[HK @Harsh66071]

@jayesh25 But it allows to put guest orders with the same email addresses where account was created and there is no email verification on creating the account

[HK @Harsh66071]

@jayesh25 What if we take a scenario where the account is created and the victim chooses an option to checkout as a guest will it be considered a vulnerability, Right now I came across a scenario in the application that the application is not allowing to sign up with the guest email use

[HK @Harsh66071]

@myonlylovers1 I think you should delete X as soon as possible ⚠️

[HK @Harsh66071]

@ananyacodesigns Working on to break your code down and get paid 😂

[HK @Harsh66071]

@areybaskarbhai

[HK @Harsh66071]

What if it doesn’t workout - NA/duplicate

What if does - Resolved

#BugBounty #bugbountytip #bugcrowd
#CyberSecurity #Systumm

[HK @Harsh66071]

@bxmbn @bxmbn does it work on user id ?

I was able to grab the token by changing the user id and was successfully able to login into victim account

[HK @Harsh66071]

Morning like this 💫

#BugBounty #bugcrowd #infosec #CyberSecurity

[HK @Harsh66071]

@bxmbn I can feel your pain

My reporting is denied and set to NA just because blocked account was able to see all the content for user Company policy clearly states that if account is blocked we will hide all of your information :)

[HK @Harsh66071]

@samm0uda I am facing the same issue on my current submission

Triager be like “can you demonstrate why save button is not working on our end”.😂🥲

[HK @Harsh66071]

Reported first time triaged in 2 hours ✅
Also thank you @GodfatherOrwa one of your tweet help me out to find this 🙏

#bugbountytips #bug #bugounty m

[HK @Harsh66071]

@GodfatherOrwa @GodfatherOrwa I found this doesn't know what to do When I click on the Twitter link the account doesn't exist and on GitLab, I can see the user project activity, etc can you help?

[HK @Harsh66071]

@InfoSecComm RCE and LFI 🙂

[HK @Harsh66071]

@ShwetaKukreja_ As a bug bounty hunter we get $$$$ in single day 😉

[HK @Harsh66071]

@ur_ishanii