Code_13x ( Jelison Fernandes )

Security Researcher || Bug Hunter || H1 Clear Verified || CVE-2025-20258

[Code_13x ( Jelison Fernandes ) @code_13x]

Yay, I was awarded a $25,000 bounty on @HackerOx01! #TogetherWeHitHarder

Severity: Critical

#hackerone #BugBounty #bugbountytips #bugbountytip #infosec #CyberSec #bughunter #API #apisecurity #cybersecuritytips #ethicalhacking #Pentester #Hacking

[Code_13x ( Jelison Fernandes ) @code_13x]

@furkan0x01 Welcome to HSP 🥳🥳

[Code_13x ( Jelison Fernandes ) @code_13x]

@0trusts Will Publish in write up soon

[Code_13x ( Jelison Fernandes ) @code_13x]

Yay, I was awarded a $20,000 bounty on @HackerOx01! for a critical bug exposing Secret private conversation files of all users.

Severity: Critical

For more: https://t.co/Gdn3AfoCAe

#TogetherWeHitHarder #hackerone #bugbounty #bugbountytips #bugbountytip #infosec #Hacking

[Code_13x ( Jelison Fernandes ) @code_13x]

@Codefly_42 Private program bro

[Code_13x ( Jelison Fernandes ) @code_13x]

@08xDof20784 Private bro

[Code_13x ( Jelison Fernandes ) @code_13x]

Ranked #45 on the HackerOne Leaderboard for Highest Critical Reputation! Excited to keep hunting and making an impact in the bug bounty community

#hackerone #BugBounty #bugbountytips #bugbountytip #infosec #CyberSec #bughunter #API #cybersecuritytips #ethicalhacking

[Code_13x ( Jelison Fernandes ) @code_13x]

@domainjobcom Thanks ☺️

[Code_13x ( Jelison Fernandes ) @code_13x]

Yay, I was awarded a $25,000 bounty on @HackerOx01! #TogetherWeHitHarder

Severity: Critical

#hackerone #BugBounty #bugbountytips #bugbountytip #infosec #CyberSec #bughunter #API #apisecurity #cybersecuritytips #ethicalhacking #Pentester #Hacking

[Code_13x ( Jelison Fernandes ) @code_13x]

@GodfatherOrwa Thanks 🤩

[Code_13x ( Jelison Fernandes ) @code_13x]

@wadgamaraldeen Thanks 😊

[Code_13x ( Jelison Fernandes ) @code_13x]

@amanmahendra_ Code_13x

[Code_13x ( Jelison Fernandes ) @code_13x]

@Cachorroexausto If logged in user get affected directly then they should accept the bug. But it depends on the type of application you are testing on. And showing the impact.

[Code_13x ( Jelison Fernandes ) @code_13x]

@_2os5 Attacker just need victim account id which are easy guess

[Code_13x ( Jelison Fernandes ) @code_13x]

@QWERTYRBG Soon..

[Code_13x ( Jelison Fernandes ) @code_13x]

@Blackstone0123 Depends on impact bro

[Code_13x ( Jelison Fernandes ) @code_13x]

@Nick980076 Thanks bro

[Code_13x ( Jelison Fernandes ) @code_13x]

Yay, I was awarded a $2,500 bounty on @HackerOx01!
#TogetherWeHitHarder

Severity: Medium

#bugbounty #infosec #CyberSecurity #bughunting #hackerone #bugbountytips #cybersecuritytips #bugbountytip

Tip: check every user inputs

[Code_13x ( Jelison Fernandes ) @code_13x]

@Dedrknex Yes, most programs don’t accept it, but it depends on the impact. In my case, I couldn’t chain it, so it remained at medium severity

[Code_13x ( Jelison Fernandes ) @code_13x]

Got my @Hacker0x01 swag for hitting 750 & 1500 reputation

#bugbounty #hackerone #bugbountytips

[Code_13x ( Jelison Fernandes ) @code_13x]

@bhaveshdewasii Tip: Try to increase the hunting time to 8 hours. Dont look for bugs try to understand the functionalities how it works. And stick with one program until you find something