Naeem

Cyber Security enthusiast | Bug Hunter 🐞

[Naeem @Naeem7478]

@awais0x1 @claudeai I have tried 3 times and yet been rejected, how did you manage to get this bro? Pls DM

[Naeem @Naeem7478]

@Rolezn @intigriti Could you please DM me, need some ideas for my AI assisted hunting

[Naeem @Naeem7478]

@Rolezn @intigriti Noce one.. congrats 🎉.

[Naeem @Naeem7478]

@kyle_wu @yeswehack Whaaat.. you cant be , will give you 1 week max. :)

[Naeem @Naeem7478]

@Kian_mehrr Oh, how did you manage to get it when safeguards literally fire for even small questions? Any tips?

[Naeem @Naeem7478]

@elma_ios Hi Elma, I'm not able to DM you, can you please DM me once, this is regarding a ywh program.

[Naeem @Naeem7478]

@IRMilitaryMedia @grok what is cluster-warhead missile

[Naeem @Naeem7478]

@Defi_mayor7 @grok Nice

[Naeem @Naeem7478]

@mriky3 @grok what is this place?

[Naeem @Naeem7478]

@SecurityTrybe @grok can you identify

[Naeem @Naeem7478]

@NahamSec Exciting...

[Ben Sadeghipour @NahamSec]

🚨 Doing a giveaway for my Blind XSS Masterclass
Most people think they know XSS, until they meet blind XSS, the kind that fires where you’ll never see it.
Same methods that helped me earn $250K+ from real reports. https://t.co/VL5jwf8alx
🎁 Retweet and reply to enter.

[Naeem @Naeem7478]

@visitorBhuwan @Bugcrowd @Barbarossa404 Use cookie editor extension or browser dev tools

[Naeem @Naeem7478]

We earned $$$$ for our submission on @bugcrowd https://t.co/LxXUE53YMW #ItTakesACrowd
@Barbarossa404

[Naeem @Naeem7478]

@r00t_ak @Bugcrowd @Barbarossa404 Always check if the session/cookie is httponly or not.

[Naeem @Naeem7478]

@sangithinba @Bugcrowd @Barbarossa404 It was just a simple XSS, but the session cookie was not flagged as `HttpOnly`, so the attacker can steal cookies. Always check if the session/cookies is `HttpOnly` or not.

[Naeem @Naeem7478]

@mase289 Okay, so which header was vulnerable to sqli in your case?