Mustafa

Pentester | BugBountyHunter | OSCP | Security Enthusiast

[Mustafa @d3sca]

@0x_rood @fattselimi @badcrack3r Reconing external surfaces 🤣🔥

[Mustafa @d3sca]

@sibusisosishi @msftsecresponse Nice , congrats 🎊🎉, you should definitely write about it

[Mustafa @d3sca]

Got invited by @msftsecresponse to an exclusive, invite-only researcher experience at Black Hat USA 2026 in Las Vegas.

Honored to be part of the security research community and excited to connect with top researchers and the MSRC team.

#CyberSecurity #BugBounty #MSRC #BlackHat

[Mustafa @d3sca]

@D0rkerDevil @msftsecresponse Congratulations man , see you in vegas 🫡

[Mustafa @d3sca]

@Raihan35169899 @msftsecresponse Thanks @Raihan35169899

[Mustafa @d3sca]

Huge thanks to @msftsecresponse for the bounty

Had found a reeeeeaaalllllyyy coool bug in Microsoft. The chain on this one was wild.
Can’t wait for the responsible disclosure to clear so I can drop the writeup. Get ready for the deep dive.

#msrc #BugBounty #infosec #Microsoft

[Mustafa @d3sca]

@bug_vs_me @msftsecresponse Thank you ❤️ , It was a high. buecause of the chain I enjoyed this one more than crits.

[Mustafa @d3sca]

@drkshdw47 @msftsecresponse Thanks @drkshdw47

[Mustafa @d3sca]

@KiPos_info @msftsecresponse I have done it before , it took like a week

https://t.co/2r60e1W7XU

[Mustafa @d3sca]

@msftsecresponse Thank you! Appreciate the recognition, more to come

[Mustafa @d3sca]

How to enumerate salesforce instances

https://t.co/GOeCSjrSui

[أذكار @i1rules]

• أدعية ليلة ٢٧ لعلها تكون ليلة القدر ..

[د.أحمد،علي،عبدالقادر 🇸🇩 @AhmedA_Official]

لأول مرة شيخ #الزين_محمد_أحمد يتلو بمقام خليجي و عراقي بديع من سورة النمل 💚🇸🇩

[Mustafa @d3sca]

@asen_sec more surprising, the one you get paid for is the one you never thought you would.

[Mustafa @d3sca]

@intigriti ?userid=

[Mustafa @d3sca]

@rcx86 Pretty convenient as the url says bugs

[Mustafa @d3sca]

الحمدلله حمدا كثيرا
و ما توفيقي الا بالله عليه توكلت و اليه انيب

Just got $$$$ from @EpicGames via @Hacker0x01. 💵🎉🎊
their team handled it fast and clean.
#bugbounty #HackerOne #EpicGames

[obscaries ❘ AppSec @obscaries]

https://t.co/GQJxtswJfF

[PentesterLand @PentesterLandEn]

A Broken Access Control scenario no one has talked about before.
Not a recycled bug. Not a misconfiguration.
A new access control logic pattern with real exploitation impact. 🔥
Watch: https://t.co/Qola76vOdr

#bugbountytips
#bugbountytip
#bugbounty

[Ark @arkark_]

Cross-Site ETag Length Leak
https://t.co/RYofmHVh6T

I just posted the author writeup for impossible-leak in SECCON CTF 14 Quals. As far as I know, this is a new XS-Leak technique! The ETag header can become a side channel :)