Dev Rawal

Hunting bounties, not Bitches. 💦 Hacker at dawn, cyber sleuth at dusk. 💀

[OffSec @offsectraining]

Attention @kalilinux users! In the coming day(s), apt update is going to fail for pretty much everyone.

The reason? We had to roll a new signing key for the Kali repository. You need to download and install the new key manually: https://t.co/Lrx05NhcOx

[VAIDIK PANDYA @h4x0r_fr34k]

RCE ?
Here are few blogs to learn more about it!

1. https://t.co/NG6zVsq48g

2. https://t.co/KQzf9C0x2W

3. https://t.co/hT8podRk43

4. https://t.co/UmmAm10flH

5. https://t.co/c6lS1YhTBt

6. https://t.co/vDwnNrYP2a

7. https://t.co/Lq9gSC4wc6

8. https://t.co/7fVMUe2A9k

9. https://t.co/vfILVb4baS

10. https://t.co/NMrKdEMq72

Explore Our Trainings!
Bug Bounty Mastercourse : https://t.co/58Vwa118A5
Web3 and Smart Contracts : https://t.co/7hxNLveEqB

[Arsen @arsen_bt]

Everyone can earn min. $50.000 per year in a Web3 Security.

Sadly, most people are lost before they even begin.

Here’s the guide how to earn your first 50k$ as an auditor.

[Dev Rawal @DevRawa0143]

In my latest blog, I dive into a unique rate limit bypass finding, exploring server behaviour and uncovering flaws that highlight the importance of paying attention to details like error messages.

https://t.co/rVKoI9HFRY

#BugBounty #bughunting #RateLimitBypass #hackerone #bug

[VAIDIK PANDYA @h4x0r_fr34k]

XSS on 403 Page
Few Blogs about 403 XSS

1. https://t.co/zqcsWaDfB9

2. https://t.co/98wSwdhQsU

3. https://t.co/4qPHqekPVw

4. https://t.co/K7e7EfRgoT

5. https://t.co/67Ah0FcPdu

[Dev Rawal @DevRawa0143]

@ThisIsDK999 From where can I learn AEM Hacking?
Any resources would be greatly appreciated. ☮️

[Dev Rawal @DevRawa0143]

@tx_shengxia @sidharthas8962 Any tips, techniques, blogs on how to forward the mail ?

[Dev Rawal @DevRawa0143]

Some cool "CAPTCHA BYPASS TECHNIQUES !" you should definitely know.

https://t.co/kYHtpJjhS2

[Suryesh 🇮🇳 @Suryesh_92]

Hii guys if you're free then look once this report 🥴🥴😂

https://t.co/NNZcao7ry4

#hackerone #BugBounty #TogetherWeHitHarder

[BLACKBIRD.EU | Pentesting Tools @blackbird_eu]

Introducing BLACKBIRD Burpsuite Integration Extension

https://t.co/ph6pYYe8io

[Abhi Sharma 𝕏 @a13h1_]

Stop wasting time on labs/CTFs with pre-packaged problems/solutions! Why not focus on real-life targets instead?

Labs are designed to teach you specific bugs or problems, but they limit your creativity and problem-solving skills. Plus, when you get stuck, it’s too easy to just give up and check the solution. While CTFs are great for learning at a certain level, even the best of them still restrict you to finding a particular vulnerability.

In a real hunt, there’s no “cheat sheet” —you’re not limited to a specific type of bug. You get to explore, brainstorm, and push yourself to find different kinds of vulnerabilities. This is where you truly develop your own techniques and methods. It’s challenging, but it’s where the real growth happens. a real target gives you room to find more and test your abilities.

In the real target, you’re not boxed in by predefined problems or solutions—you have the freedom to explore uncharted territory, uncover hidden or unique vulnerabilities, and develop your own unique approach to hacking. It’s about thinking outside the box and discovering bugs that no one else has found.

Use labs for learning, but if you want real growth, spend 30% on labs and 70% on real targets. That’s where the real challenge—and the real rewards—are!

Use the dorks from my Quoted tweet to find small or simple programs for beginners

#BugBountyTips #BugBounty #CTF #HTB #Labs #Vulnerability #Bugs

[Jenish Sojitra @_jensec]

#bugbountytips #bugbounty
How I was able to find multiple critical vulnerabilities to get Full Account Takeover with the help of PlayStore and AppStore region settings.

[Dev Rawal @DevRawa0143]

@bugoverfl0w I don't really share my findings/methodology. As these are my own way of finding bugs.

[Dev Rawal @DevRawa0143]

What a way to kick off the month! 😤
I have more to report, but I'm out of signals. 😭

#bugbounty #bughunter #bug #hackerone #cybersecurity #pentest #webapp #android #ios

[Dev Rawal @DevRawa0143]

@Omkumar_13 Thanks boii... But ig I'm fine waiting to regain my signals 🥱😜

[Dev Rawal @DevRawa0143]

@00iamma00 Trust me bro I was stuck at the same place where you are. To come out of that place you just need to be unique... stop finding the vulnerabilities others are also finding...

I would only suggest you to test functionalities of the application rather than spraying and praying.

[Dev Rawal @DevRawa0143]

@urno1hacker Yess I'm... but not really active there.

[Dev Rawal @DevRawa0143]

@00iamma00 Overview of ?

[Dev Rawal @DevRawa0143]

@Omkumar_13 Nice try buddy 😂. Unfortunately all of them are private programs.

[Dev Rawal @DevRawa0143]

@bugoverfl0w Most of them are. Usually my findings affect all types of assets.