Inaam Shabir

16y/o Security researcher, Full stack Web Dev. Author of a programming book. You know I have interest in every damn thing like 3D modelling, Coding, Drawing etc

[Inaam Shabir @InaamShabir]

There was debate b/w horse and a donkey when donkey said "sky is 🟢" and horse opposed. It was put forward to lion & he gave punishment to horse. When questioned ,lion replied that he was debating with donkey and that was his fault.
Same here, don't debate with uneducated people.

[Inaam Shabir @InaamShabir]

+that's why you see mobile size screenshots

[Inaam Shabir @InaamShabir]

This is still my most severe bug I found on an ecommerce site. It leaked every customer PII that had made a review on their site. It was a VDP so no payment but got acknowledgement from CERT-In.
Dated:- 21 Jan 2026
#bughunting #hacking #vdp #pii

Plus I do bug hunting on phone

[Inaam Shabir @InaamShabir]

@Shabosec @Hacker0x01 @GoldmanSachs @yandex @Olamdeen @sachin_pandey98 @ladebw @badcrack3r @fattselimi @GodfatherOrwa @XHackerx007 @zseano Mashallah that's great.. what was the criteria they choose you for this

[Inaam Shabir @InaamShabir]

@GouravMHC55 @takeUforward_ Yeah exactly it is always the low level code

[Inaam Shabir @InaamShabir]

This was my first report on hackerone (i had sent 11 vulnerabilities through email before) and got validated too. It was a subdomain takeover of a government website
#hackerone #bugbounty #vdp
Date 29 April 2026

[Inaam Shabir @InaamShabir]

@HerbDeal @tom_doerr Lmfao it runs inside Termux actually . The repo has so much misinformation in it.

[Inaam Shabir @InaamShabir]

@fidgepee Me too actually. I had used it for the "Copyright Inaam [currentYear]" too lol

[Smukx.E @5mukx]

Nothing happened here. It just decrypted a local file which we can even do using CyberChef. Stop the AI hype, please.

[Inaam Shabir @InaamShabir]

@ausiwownsoan I was in pcmb too but got lesser. Btw congrats 🎉

[Inaam Shabir @InaamShabir]

@Nabb_kak So soothing wallah

[Inaam Shabir @InaamShabir]

@0xSabir Gonna try this one

[Inaam Shabir @InaamShabir]

@_smile_hacker_ Similar kinda thing happened to me when i reported 2 apis one leaking piii and one leaking payment credentials in plain. They fixed the pii leak but for credential leaks they said they will make new site now 😭🥀

[Inaam Shabir @InaamShabir]

@Shabosec Ignore the noise bro. I have been liking your posts , you are great hunter. Dorking is great , i found many subdomain takeovers in a month.

[Inaam Shabir @InaamShabir]

@Vansh_95a @hackerspider1 @Hacker0x01 That's massive. How you even collaborate in bb. Like is it off platform or on hackerone itself. I can't understand how you find bugs in collaboration. Sorry for ignorance I am new too

[Inaam Shabir @InaamShabir]

@gradypb .@sequoia @Alfred_Lin @gradypb: 900+ founders ask you to fire Shaun Maguire for Islamophobic hate speech. Your partnership rules require action when conduct harms Sequoia’s name. @PIF_en @Mubadala, please demand accountability.

[Inaam Shabir @InaamShabir]

@cyber__razz Sorry i use zoxide 😅
Just type z with the incomplete file name and you cd to it

[Inaam Shabir @InaamShabir]

@4osp3l @DorkixAI That's really cool. How much is the dorkixai subscription though

[Inaam Shabir @InaamShabir]

@manas_muduli Lmao yeah the print on demand services are great and cheap . I use them too to get the printouts of my notes

[AVWEROSUOGHENE @Akinjoshua2017]

Uno reverse 😂😂😂😂

[Inaam Shabir @InaamShabir]

@jun_song @OpenAI Lmfao they also did this to me recently lmao no idea why