MaTaRyA

Intigriti:

[MaTaRyA @h_hussein11]

Breaking the same Stored XSS twice — before and after the fix. A story about not stopping at “Resolved.”

New write-up 🔗 [https://t.co/rr1GZB4vdZ]

#bugbounty #bugbountytips #bugbountytip #cybersecuritytips #cybersecurityawareness #hacker

[MaTaRyA @h_hussein11]

يالك من صديق شرير 😡

[skymig0 @skymig0]

@h_hussein11 Duplicate

[MaTaRyA @h_hussein11]

@skymig0 Work hard and get money.

[MaTaRyA @h_hussein11]

Breaking the same Stored XSS twice — before and after the fix. A story about not stopping at “Resolved.”

New write-up 🔗 [https://t.co/rr1GZB4vdZ]

#bugbounty #bugbountytips #bugbountytip #cybersecuritytips #cybersecurityawareness #hacker

[MaTaRyA @h_hussein11]

@Soo000ly بث عشان بتكثف..

[MaTaRyA @h_hussein11]

@blackess_saif https://t.co/dwLiwjgnn2
هتلاقي الطريقة هنا

[MaTaRyA @h_hussein11]

ادخل سجل باكونت Github على Agent Router وهتاخد حوالي 150$
فيه موديلز حلوة زي Claude و GLM
ده اللينك:
https://t.co/NHqSv0mEMV

[MaTaRyA @h_hussein11]

@secfathy https://t.co/PeL6T0XiI4

[GitHub @github]

1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories.

Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.

[MaTaRyA @h_hussein11]

@secfathy شعبولي الدنيا 😂

[MaTaRyA @h_hussein11]

@saidox1910 جرب onlinesim بس الارقام free محدودة https://t.co/yh8Q75lC6Q

[MaTaRyA @h_hussein11]

ادخل سجل باكونت Github على Agent Router وهتاخد حوالي 150$
فيه موديلز حلوة زي Claude و GLM
ده اللينك:
https://t.co/NHqSv0mEMV

[bugcrowd @Bugcrowd]

8 minutes after submitting a P4

[Fun At All X @Ishita_Sharma42]

Literally everyone 💀

[Godfather Orwa 🇯🇴 @GodfatherOrwa]

Big #Bugbountytip / #bugbountytips
Google Services Hunting
Google services are amazing, and for bug hunters, it's amazing as well. In some cases, you can get some P1-P2-P3 from these services, such as
Workspaces / Sheets / Groups / Drives / Etc...

In groups: you can access emails / internal data/ credentials
In Sheets, you can access PIIs / Edit access
In Drive: you can access backups/ PII / Etc...

still hard to find and
It was an issue how to make good and at the same time fresh dorks for bug bounty programs

Then I found out that a lot of links have the same path, and it was like this
All Google resources I've found
https://t.co/2SixYDAKvE
https://t.co/tbE8WaX9CX
https://t.co/5D7Clds9cH
https://t.co/OfodYVKOk0
https://t.co/ZyA0JFkax4
https://t.co/mhIbyMF03b
https://t.co/QwByRWofh8
https://t.co/vAwAEX8KxI
https://t.co/4y1UMeZdq7
https://t.co/u7mOVPnus3
https://t.co/V9ALsFoqP9
https://t.co/2eLIaEPCGm
https://t.co/VxllqvwT6n
https://t.co/c1vkp8YrBt
https://t.co/2EkMSEUpIt

UrlScan Dorking:
page.url:"https://t.co/qb3s3f8koJ*"
page.url:"https://t.co/BNLIA1rXht*"
You can replace * => the program domain

Google Dorking:

site:https://t.co/qb3s3f8koJ* "inurl:/a/"
Or for specific domain
site:https://t.co/qb3s3f8koJ* "inurl:/a/domain.com"

GitHub Dorking:
"https://t.co/qb3s3f8koJ"
Or for a specific domain
"https://t.co/FKHqr19e0o"

Shodan Dorking:
"https://t.co/3vQLeWEs54"

Web Archive
https://t.co/c8tGyvVlH7

Don't forget:
It's not just https://t.co/pbqxKC9P4s
still you have to look for docs/groups/mail/drive/spreadsheetsX

still working in Google Research and will add more and more soon ......

Happy Hunting♥

#bugbounty

[MaTaRyA @h_hussein11]

@YnoofAssiri اعتمدت خلاص 😂🫰

[MaTaRyA @h_hussein11]

@YnoofAssiri ده يلا بينا بجد 😂

[MaTaRyA @h_hussein11]

@MohamedAmr_forX جرب root me

[MaTaRyA @h_hussein11]

@sudo_a7med انت بتذاكر الثغره نفسها مش payload بس انت في حاجات مش هتفهمها في الاول وهتاخد وقت منك كبير جدا لو حاجه تستاهل قسمها واديها وقت ولو حاجه متستهلش اسكيب وحطها نوت وارجعلها بعدين وبنسبه كبيره لما هترجعلها تاني هتفهمها اسرع