M7arm4n

Hello World 🌍

[M7arm4n @M7arm4n]

Have you ever thought about exploiting an IDOR without any ID!? Returns sensitive data without any specific ID!?

https://t.co/vY23Xq83Xr

#bugbountytips #bugbountytip #infosecurity

[M7arm4n @M7arm4n]

5. The following Rack code takes the request protocol from the X-Forwarded-Scheme header, sending the http value for this header will returns 301 response... If this response is stored by the CDN, it will become a loop and DOS attack
#bugbountytip

[M7arm4n @M7arm4n]

4. Using favicon hashes to reach interesting data, just use below shodan dork:
#bugbountytip

[M7arm4n @M7arm4n]

@nnwakelam Thanks man♥️

[M7arm4n @M7arm4n]

@tabaahi_ Thank you ♥️ if admin doesn't invited you into circle you can not access comments. But if you join to the circle and then admin removes you, you have unauthorized access to comments. And the circle id wasn't uuid and attacker able to find the id of circle by exploring.

[M7arm4n @M7arm4n]

Some endpoints are hidden and to reach these endpoints should spend a good time on assets as a normal user! in this write-up, I will show you a sample of these scenarios!!
#bugbountytips #bugbountytip #infosecurity
https://t.co/f0FugmYJlI

[M7arm4n @M7arm4n]

I just published an attack vector which allow attacker to use logic of reset password function to locking victim's account. Hope you enjoyed ❤️
#bugbountytips #bugbountytip #bugbounty

https://t.co/dtZ1F5lQwm

[M7arm4n @M7arm4n]

@RelentlessT7 But why always change my report from P1 to P3?😂 e.g i reported a IDOR with read/edit/delete impact and triaged on p3 or one time i can sent custom sms from company number to anyone and triaged on p3 and company paid p3 reward. It's happening most of the time. LOL

[M7arm4n @M7arm4n]

@Erfix_Hunter @voorivex Keep pushing 🔥😎 I believe you ♥️

[M7arm4n @M7arm4n]

@MatinNouryan @BugcrowdSupport @Bugcrowd

[Call me matitanium @MatinNouryan]

I submitted a valid p1 bug on the @BugcrowdSupport but they reviewed my report after 5 days when the report not reproduce and subdomain was down.!!!

I gave them all data and all things to prove my report.
but they closed my report as N/A!

Please someone help me in this section

[M7arm4n @M7arm4n]

4. Using favicon hashes to reach interesting data, just use below shodan dork:
#bugbountytip

[M7arm4n @M7arm4n]

3. While developing an application, It's may the developer define some series of default UUIDs. If the programmer forgets to remove them before launching, may reveal sensitive information. Usually, these UUIDs are defined with values ​​of 0 or 1 and
#bugbountytip

[M7arm4n @M7arm4n]

3. While developing an application, It's may the developer define some series of default UUIDs. If the programmer forgets to remove them before launching, may reveal sensitive information. Usually, these UUIDs are defined with values ​​of 0 or 1 and
#bugbountytip

[M7arm4n @M7arm4n]

2. For OTP bypass while sending the OTP code to the victim, the attacker sets their phone number in the "country_isd" parameter and the victim's phone in the "phone_number" parameter. If the website is vulnerable, the victim's OTP code will sent to the attackers
#bugbountytips

[M7arm4n @M7arm4n]

2. For OTP bypass while sending the OTP code to the victim, the attacker sets their phone number in the "country_isd" parameter and the victim's phone in the "phone_number" parameter. If the website is vulnerable, the victim's OTP code will sent to the attackers
#bugbountytips

[M7arm4n @M7arm4n]

1. If you find a parameter in the GET request that was vulnerable to IDOR, but the value was UUID or unguessable, just look for leaked data in https://t.co/H2JJOwyWCx

#bugbountytip

[M7arm4n @M7arm4n]

1. If you find a parameter in the GET request that was vulnerable to IDOR, but the value was UUID or unguessable, just look for leaked data in https://t.co/H2JJOwyWCx

#bugbountytip

[M7arm4n @M7arm4n]

When you reported a P4 vulnerability and you are waiting @sh_timmy or @codingo_ or @RelentlessT7 triaging it under an hour and company pay reward under 24 hours

#BugBounty #infosec

[M7arm4n @M7arm4n]

@Bhavinology https://t.co/4k1xhUdwOL

[M7arm4n @M7arm4n]

I earned $2,500 for my submission on @Bugcrowd #ItTakesACrowd

[M7arm4n @M7arm4n]

I really should get some sleep 💤 😢

#BugBounty #infosec

[M7arm4n @M7arm4n]

@0xNaeem Here is another SQLi (same scenario)
Yep, something like yo said

https://t.co/4k1xhUdwOL

[M7arm4n @M7arm4n]

I earned $2,500 for my submission on @Bugcrowd #ItTakesACrowd

[M7arm4n @M7arm4n]

@kazem721 I saw xxe rewards on Twitter after 20 minutes they marked unresolved😂😂

[M7arm4n @M7arm4n]

@krishnsec Yes, I noticed that we work on same program 😂 you almost found 5 Authentication bypass on one of domains.

[M7arm4n @M7arm4n]

@Moblig_ 😂😂🤕