Saeed Hashem

Cyber Security Enthusiast

[Saeed Hashem @SaeedHashem4]

@XHackerx007 Type Juggling, classic! Great work man👏

[Saeed Hashem @SaeedHashem4]

@NahamSec @Bugcrowd I saw this a couple of days ago and knew you're gonna submit and FIS bug. Didn't bother racing 😂

[Saeed Hashem @SaeedHashem4]

@ArchAngelDDay @Hacker0x01 @salesforce @Michael1026H1 @shm0ul @MtnBer @0xacb was nice meeting you man!

[Saeed Hashem @SaeedHashem4]

@nnwakelam @TMobile @Jhaddix https://t.co/3zhkIVIAIn

[Saeed Hashem @SaeedHashem4]

@ajxchapman @joaxcar I'm curious about what the original use case or ultimate goal here was. Because for anything involving client-side decryption, there's often a more agile solution using existing or custom Burp extensions. It's pretty cool playing with the DOM that way but it could be troublesome.

[Saeed Hashem @SaeedHashem4]

@Joejou10 @Hacker0x01 Congrats pinkmeimei 🥳🥳

[Saeed Hashem @SaeedHashem4]

@nnwakelam Then you realize you missed --tamper=between

[Saeed Hashem @SaeedHashem4]

@nnwakelam @fasthm00 Does CONVERT, CAST and CASE WHEN work? Is there any indication of errors or statements evaluation as true vs false?

[Saeed Hashem @SaeedHashem4]

@InsiderPhD Idk! An organization having a private event where they can invite whoever they wish. The fact that some are feeling entitled to it is just beyond me! It's kinda similar to feeling entitled to an invitation to someone's birthday party smh

[Saeed Hashem @SaeedHashem4]

@irsdl It is quite common. It comes down to companies' objective behind launching a bb program. A lot of programs follow the mindset of "if you can't do it, a malicious attacker can't do it either". If that's really in line with their objective, I usually don't mind it.

[Saeed Hashem @SaeedHashem4]

@nav1n0x Those days eventually balance out. Keep it up!
Btw, I've sent you a DM, appreciate if you could have a look when you get a chance 🙌

[Saeed Hashem @SaeedHashem4]

@troyhunt "get a foothold there" - I don't like the sound of that 😬

[Saeed Hashem @SaeedHashem4]

@infosec_au I'm recently falling in love with reviewing Java code. From Spring to Struts, it's been a wild ride. Had some success with less known frameworks and ERP applications, will be moving to more popular stuff next. Could use some suggestions actually, I'd be happy to collaborate too!

[Saeed Hashem @SaeedHashem4]

@Joejou10 @Hacker0x01 Wow! Way to go, Jou! Congratulations 🎉🔥

[Saeed Hashem @SaeedHashem4]

@0x4148 Congrats ya Sultan! 🎉🔥

[Saeed Hashem @SaeedHashem4]

@Joejou10 @tryhackme Congrats! 🎉 Well deserved! 👏

[Saeed Hashem @SaeedHashem4]

@malcolmx0x Fire bro! 🔥

[Saeed Hashem @SaeedHashem4]

@L3onid1s @SynackRedTeam Dorking

[Saeed Hashem @SaeedHashem4]

Finally having some time (or will?) for bug hunting again! Had a decent Q1 on the @SynackRedTeam

Anything that isn't an SQLi was stumbled upon while hunting for SQLi. Also almost all are CVE applicable "0days", but products aren't so widely used. Who's got time for CVEs anyways

[Saeed Hashem @SaeedHashem4]

@malcolmx0x @SynackRedTeam Habibi teslam! Missing our early hunting days dude! 🐞🤝