T3po

I hack stuff (legally)

[T3po @T3PO0]

@LoganOpSec just watched the video and honestly the filter i adopted to figure out impact is the CIA triad if the bug in question doesn't attack confidentiality, intergrity or accessability then i do not report it and i try to chain it.

[T3po @T3PO0]

just yesterday i thought that any digit change would result in a 401 for example:
Yesterday:
attacker user ID:
X-user-ID: 123 (200 STATUS OK)
victim ID:
X-User-ID: 124 (401)
NOW:
Attacker user ID:
X-User-ID: 123e0 (200 status) Victim ID X-User-ID: 124e0 (401 status code)

[T3po @T3PO0]

DAY 2:
I learned that the API i've tested was secure but the only noteable result was numerical coercion by adding "e0" at the end of my user ID in the X-User-ID header it resulted in the backend showing my own user informatio...

[T3po @T3PO0]

Plan for following day is research some Header bypasses to try and achieve an IDOR

[T3po @T3PO0]

Day 1: TESTING
What did you learn about the program ?
I learned that my tests so far on the endpoint results in multiple 401 codes and the only thing left to test is the header to try and bypass this and get a valid bug. the header in question does not accept any character...

[T3po @T3PO0]

other then a number at the start and changes to the last digit are what trigger a 401 or 200 status code:
1. normal ID format but victim ID X-User-ID:123 (401)
2. special character ID (array bypass) X-User-ID: [123,124] (401)
3. capitalization of header (401 ) and other tests

[T3po @T3PO0]

DAY 3: I have started working on the graphQL endpoints and found nothing of value hit a road block but after some consultation with AI it deduced it would be a time waste to continue on queries that lead to that road block

DAY 4 Plans: Recon on new domain

[T3po @T3PO0]

DAY: 2 so far i completed the reconissence and all the cataloging required for the API all that is needed now for DAY 3 is to start testing all the API i have found.

TIP: create a booklet command which extracts JS files that contain certain key words like "admin" "/api" etc etc

[T3po @T3PO0]

#BugBounty #bugbountytip #hackerone #bugcrowd

[T3po @T3PO0]

DAY 1: on a new bug bounty program so far the work for today consisted of

Recon: subdomains , parameters and API endpoints

goal for day 2:

1. read JS files
2. catalog APIs

TIP: Try manual subdomain search on GOOGLE,BING and YANDEX it has lead me to unique subdomains.

[T3po @T3PO0]

@hetmehtaa hi

[T3po @T3PO0]

what are your tasks that you preform?

#bugbountytips #BugBounty #securityreasearch #cybersecurity

[T3po @T3PO0]

> currently waiting for a support ticket related to a program
> understood it was a quiet day due to time constraints
> realized that i have such a narrow work load that i do not have other tasks to complete which move the needle related to the program to complete

[T3po @T3PO0]

i am looking for tasks i can preform that fit into two catogories.
1. skill deepening tasks
2. program understanding tasks

e.g skill deepening tasks can be reconissence technique research, writeups etc
e.g program understanidng could be api doc reading etc

[IT Unprofessional @it_unprofession]

We take phishing seriously here.

Last month, 40% of our company clicked on a fake link I sent them promising "Free Pizza."

Disappointing.

So I leveled up the simulation.

This morning, I went to the sales department wearing a ski mask.

I physically stole three laptops and threw them out the window.

When they screamed, "Who are you?", I didn't answer.

Because hackers don't answer questions.

Now everyone is locking their workstations.

Sometimes the best training is lived experience.

[T3po @T3PO0]

@Fabrikat0r i am interested

[Md Ismail Šojal 🕷️ @0x0SojalSec]

39 Cybersecurity News Resources that will Keep You Updated 💻

https://t.co/2JY3hzVp2H

#infosec #cybersecurity #bugbountytip

[T3po @T3PO0]

Really good extractor tool for Bug Bounty what extentions do you guys use?

[T3po @T3PO0]

@Fabrikat0r IDOR