Ayoub

Im a cybersecurity consultant who hack & troll 💜
[email protected]

[Ayoub @ayoub0x1]

@Happykira00x1 @HappyKira9 @Bugcrowd its all Allah's plan, keep going brother

[Ayoub @ayoub0x1]

@keiyuva Keep fighting, soldier🙏💜

[Ayoub @ayoub0x1]

@marouane53 had weld l9hba khaso l7ebs, SALINA

[Ayoub @ayoub0x1]

@Yassineaboukir @OriginalSicksec @Hacker0x01 Finally!! less goo 🇲🇦💜

[Ayoub @ayoub0x1]

@Hacker0x01PD well well well, we all know who is going to be the most blocked triager👀👀

[Ayoub @ayoub0x1]

@Kei0x gauche droite, nchrbek l9ehwa

[Ayoub @ayoub0x1]

@intigriti Gave it away to all my family, all I got for myself is 2$, I bought a coffee from the coffee shop 💜🌷

[Justin Gardner @Rhynorater]

If you're not finding a way to enumerate UUIDs for UUID-based IDORs then you're leaving money on the table.

Here are some ways I've done this in the past:

[Ayoub @ayoub0x1]

🔥🔥

[Justin Gardner @Rhynorater]

I've made over 100k on SSRF vulnerabilities.

They aren't always as simple as pointing it at localhost or AWS Metadata service.

Here are some tricks I've picked up over the past 5 years of web app testing:

[Ayoub @ayoub0x1]

??

[Ayoub @ayoub0x1]

@Medo_Kll @wld_basha Over the past year, I've been fully focused on penetration testing and learning new things as an offensive security consultant. I'm still doing bug bounties, but now I'm part of the Synack Red team. I'll also be returning to hunting on HackerOne soon. Thanks for asking about me!

[Ayoub @ayoub0x1]

@Mikassa53 lesson learned, always record a Poc video

[Ayoub @ayoub0x1]

Hello @tryhackme, can you please improve your delivery process? I wanna wear my T-shirt this summer.

[Ayoub @ayoub0x1]

@HappyKira9 Anytime brother🙏💜

[Ayoub @ayoub0x1]

@HappyKira9 Machaellah brother, congratulations, keep going man 🙏🙏

[Ayoub @ayoub0x1]

@yesiamdollar 👀👀👀👀👀👀👀👀👀

[Ayoub @ayoub0x1]

shout out to the guy who codes this tool 😂