Black Beard

Build by day | Break by night 🌙
Programmer 💻 | Bug-Hunter 🕵️‍♂️

[Black Beard @Sec_BlackBeard]

ladies and gentlemen
After 41 informative reports, 2 duplicates, and 4 months since I started, today I found my first valid bug! 😎🔥

Tip : No tips just continue. 💪

#BugBounty
#BugBountyTips

[Black Beard @Sec_BlackBeard]

@SalhiMahdi72759 can't wait 🔥

[Black Beard @Sec_BlackBeard]

@itx_l0b0 @Itx_Shad0w Congrats bro, that's insane!🔥

[Black Beard @Sec_BlackBeard]

@Rudr_03_ Thanks bro

[Black Beard @Sec_BlackBeard]

After a long journey with VDP programs, my first BBP report has finally been triggered! 😎🔥

No AI, no Burp — just exploring the application as a regular user and I found an interesting authorization vulnerability

Write-up coming soon!
#bugbountytips #BugBounty #bugbountytip

[Black Beard @Sec_BlackBeard]

@MartinPoor29209 I'm still learning too, but I'm focusing more on business logic issues

[Black Beard @Sec_BlackBeard]

@MartinPoor29209 Dm here

[Black Beard @Sec_BlackBeard]

@real_Kiwi_1 Thanks man

[Black Beard @Sec_BlackBeard]

@MartinPoor29209 Thanks bro

[Black Beard @Sec_BlackBeard]

@0xPrayers DEV: Make sure it's secure 😌

[Black Beard @Sec_BlackBeard]

@Edx103 @Masonhck3571 @Bugcrowd Agreed, better than pasting one template for every duplicate report,At least this tells u that he actually read the report

[Black Beard @Sec_BlackBeard]

@rushikasec keep going bro 🔥🔥

[Black Beard @Sec_BlackBeard]

@ZeroxFive Congrats bro 👏

[Black Beard @Sec_BlackBeard]

@Rhynorater Added it. Now mine "write it “colloquially” and make it sound like me" 😂

[Black Beard @Sec_BlackBeard]

@aiwithanu booking systems and software in general

[Black Beard @Sec_BlackBeard]

Another IDOR🔥
Tip: If the GET API isn’t vulnerable, try the UPDATE API.

#bugbountytips #BugBounty #bugbountytip

[Black Beard @Sec_BlackBeard]

@aiwithanu Bro, sometimes it doesn’t have to be sequential it can be random, but if you find an ID that’s only numbers and can brute-force , it’ll be valid 🙃

[Black Beard @Sec_BlackBeard]

@0xm1racle i mean the endpoint for updating the booking informaion was vulnerable.
POST /api/updateBooking/<booking_id>

[Black Beard @Sec_BlackBeard]

@suslu7616 @Hacker0x01 Congrats man🔥

[Black Beard @Sec_BlackBeard]

@mosab_4_u yeah man, soon 🫡

[Black Beard @Sec_BlackBeard]

@noshitpwn Public