Araf Rubayed

[Araf Rubayed @ArafRubayed]

@robertsmith_ai Google

[mrdesoky0 @mrdesoky0]

Just released the Ultimate IDOR Testing Checklist 🧩

I combined techniques from many sources to cover IDOR scenarios.

Know a technique I missed? Drop it in the comments.

Notion:
https://t.co/Sfc0MbrTeX

GitHub:
https://t.co/WrRA6GDodC

#bugbountytips #IDOR #AppSec #InfoSec

[X @TheMsterDoctor1]

🚨 FREE Bug Bounty Course Drop

From Zero → Hero in Bug Bounty Hunting 🐞💻

1️⃣ Follow me
2️⃣ Turn on post notifications 🔔
3️⃣ Retweet this post

https://t.co/2g8JNbcTrn

Let’s build the next wave of bug bounty hunters 👊

[payloadartist @payloadartist]

If you are tired of googling for #BugBounty writeups, I made a little tool that lets you search writeups easily. You can also pull the search data in JSON format if you need it.

https://t.co/r7JhrBuHLr

#cybersecurity #bugbountytips #infosec #100DaysOfCode

[NullSecurityX @NullSecurityX]

How to Exploit an IDOR Vulnerability and gain Privileges
Just published a new video demonstrating how We exploited an IDOR vulnerability to escalate privileges in a web app.

📌 IDOR, privilege escalation

📺 Watch : https://t.co/Nb4d4Hx29c

#IDOR #BugBounty #CyberSecurity

[Araf Rubayed @ArafRubayed]

@Hacker0x01 @zeeagils @hetroublehacker @05__Yash @0xcharan @ThisIsDK999 Congratulations @0x0asif

[HackerOne @Hacker0x01]

HackerOne Clubs across Asia-Pacific are adding fresh energy. Welcome to these new Brand Ambassadors!

🇮🇩 @zeeagils & 🇮🇩 root_geek280 (Indonesia—new club!)

🇮🇳 @hetroublehacker & 🇮🇳 @05__Yash (India North)

🇮🇳 @0xcharan (India South)

🇮🇳 @ThisIsDK999 & snifyak (India East)

🇧🇩 @0x0asif (Bangladesh)

From Bangalore to Bandung, they’ll nurture talent, run CTFs, and keep the region #cyberstrong. 💪

Check out the program: https://t.co/Ryt41dy3Ng

#AppSec #EthicalHacking #H1Club

[Araf Rubayed @ArafRubayed]

Day 2:
🙋‍♂️ Learning : 1 hr
🛠️ Manual Testing: 3 hr 30 mins ✅
🐞 Bug Reported: 0
#BugBounty

[Araf Rubayed @ArafRubayed]

Day 1:
🔎 Recon: 15 mins ✅
🛠️ Manual Testing: 3.5 hrs✅
🐞 Bug Reported: 0 ✅

[Dilly Hussain @DillyHussain88]

“Why have you been silent? Why? You see the scenes of death and people burning alive.”

A Palestinian girl in Gaza condemns the Arab world’s silence and cowardice.

[PALESTINE ONLINE 🇵🇸 @OnlinePalEng]

A human flood in the streets of Bangladesh in support of the people of Gaza

[Pratik Dabhi @impratikdabhi]

��� Bug Bounty Workflow for Beginners

1️⃣ Recon – Gather subdomains & endpoints
2️⃣ Enumeration – Identify tech stack & parameters
3️⃣ Testing – Find vulnerabilities (XSS, IDOR, SSRF, SQLi)
4️⃣ Exploitation – Prove impact responsibly
5️⃣ Report – Clear, detailed, and reproducible

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ Account Takeover via Password Reset without user interactions
👨🏻‍💻 asterion04 ➟ GitLab
🆘 Critical
💰 $35,000
🔗 https://t.co/TZ419P3ADg
#bugbounty #bugbountytips #cybersecurity #infosec

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Quick and dirty way to find parameters vulnerable to LFI & Path Traversal & SSRF & Open Redirect:
Burp Search > Regex
\?.*=(\/\/?\w+|\w+\/|\w+(%3A|:)(\/|%2F)|%2F|[\.\w]+\.\w{2,4}[^\w])

And find potentially vulnerable SSRF params
- https://t.co/6cfBPVn0FM
#SSRF #cybersec

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Open Redirect @PwnFunction ⚔️ !

#infosec #cybersec #bugbountytips

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🔍 Bug Bounty Tips for Smart Hunters 🐞

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[Bug Bounty Community Bangladesh @bbcbd_official]

Let's go hackers! HackerOne BUG HUNT 2024 Powered By BCSI has been finally scheduled to 16 November (Saturday), 2024! 📅

More information will be on it's way soon!

#bughunt2024 #BCSI #hackerone #TheHuntIsOn

[Araf Rubayed @ArafRubayed]

@Logos_network .🥲🙄👍🙄