SLash0x

[SLash0x @SLash0x4]

https://t.co/3kA7uR5zJZ

[SLash0x @SLash0x4]

@kkhaledd97 انا ثانوية ٢٠٢٣

[SLash0x @SLash0x4]

@kkhaledd97 لو حد عنده رأي ف السريع

[رزه @ahmeddramzyy]

لا أبكِي على صديق غادر
ولا على شيء ابتليت به
ولا على طريق أتعبنِي
ولا حتى على حبيب لم يُحبنِي.
أبكي على نفسِي وعلى ما فعلته أنا بي.

[Bug Bounty Insights 🪄 @bbr_bug]

Recon pipeline for a new target:

1. subfinder -all -recursive
2. dnsx -resp-only
3. httpx -title -tech-detect
3. katana -jc
4. nuclei -t cves/
5. ffuf -w dirs.txt

Run in order. Each step feeds the next.

[Kanishk Dadhich @whotfbunny]

🎯 Advanced Bug Bounty Tip: Hunt Web Cache Poisoning via Unkeyed Inputs

CDNs/caches often key on the URL + a few headers — while ignoring others like:

→ "X-Forwarded-Host"
→ "X-Original-URL"
→ "Accept-Language"

If the origin reflects an unkeyed input into the response, you may be able to poison the cached response for other visitors.

🔎 Workflow:
1️⃣ Find a reflected/unkeyed input with Param Miner
2️⃣ Confirm it’s unkeyed using random cache-busters
3️⃣ Inject a controlled payload, e.g. "X-Forwarded-Host"
4️⃣ Test for impact such as poisoned redirects or XSS
5️⃣ Verify the poisoned response is served to subsequent requests sharing the cache key

One overlooked header can turn a low-impact reflection into a mass-impact vulnerability.

#BugBounty #AppSec #WebCache #WebSecurity #CyberSecurity

[𝕄 𝔸 𝔻 𝔸  @Ahmed_Semisem]

الراحة في الدنيا دي وهم .. سراب ،
بس إحنا مش قادرين نبطل ..

[Ahmed @ahmd3ssam]

متفق معاه يا مصر بتعملي ايه

الواحد حاسس ان الي بيحكم البلد هو اكتر حد بيكره البلد.

[يوكابد🪽 @godfavgrl]

النية لا تعني الإمكانية

[جيسي بينكمان☭ @JesseePinkman14]

الفيديو دة بيزعل أوي بعد 12

[محمد مكاوي‏🇵🇸𓂆 @mekaw9]

عايز تشوف حال المصريين اركب المترو.

[Muhab @Muhabbz]

Finding an SQL Database without SQL Injection ?

Tips:

1-Enumerate all subdomains u can.
2- Collect URLs using tools like:
katana,gau,waybackurls,urlfinder
3-Merge and deduplicate all discovered URLs.
4-Search for sensitive files and keywords such as:
.sql .db .bak .zip .env

[𝗗𝘀𝗼𝗸𝗲𝗩🧑‍💻 @DsokeyyV]

Real-world scenario [1]: (JWT Led to 2FA Bypass)
#CTF #bugbounty #bugbountytips #bugbountytip

[SLash0x @SLash0x4]

@luckyykarim Pls tell me

[Nitin Gavhane @NitinGavhane_]

JavaScript Recon → Valid HTML Injection

1/7
Most bug bounty hunters stop after finding interesting JavaScript files.

Here's the methodology I followed. 👇

#BugBounty #JavaScript #AppSec

[Professor Larry Densel @luckyhacker43]

$1,500 CSP Bypass — https://t.co/W9Ngd0mXiQ

Johan Carlsson

Google Recaptcha script loads Angular. Nonce + whitelist but no strict-dynamic → stole nonce via JS → injected arbitrary script.

🔗 h1/2279346

---

🔗 https://t.co/pJWHoCMDix

[‎Houda @_Houda_00]

ما وراء الكواليس ..
مُؤلم للغاية ، سُبحانك يا ربّ
وحدك تعلم ما نُكابِدهُ .

[Bug Bounty Insights 🪄 @bbr_bug]

SSRF filter bypass via NAT64 IPv6 prefix:

Source: #3634400 (63 upvotes).

[SLash0x @SLash0x4]

@kareemwalid17 معاك يا هندسه