👾🕸️hackdartstorm🕸️👾

We work in the darkness, but protect the light👾 | Bug 🐛 Bounty Hunter

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

Do you actually hack, or just claim the title?

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

@AttriUpend68452 @gregxsunday What happen dude?

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

Starting today, I’m taking on a new challenge: 100 hours of hunting on Basecamp’s program on HackerOne.. It doesn’t matter if I find anything or not. I’m committed to the process! #hackdartstorm

#BBRE100CHALLENGE

Hey @gregxsunday , I’m in

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

I just completed SSRF room on TryHackMe!

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

I just earned the System Sniffer on TryHackMe! #hackdartstorm

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

Solved Walking An Application #hackdartstorm

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

Once again 🫣

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

@Shahiniram I will do it then

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

🕸️ Day 8/100 — Documenting the Journey 👾

🎯 Submitted: 0
ℹ️ Informatives: 2
🕊️ Triaged: 1
👾 Hunted: 1hr
📚 Writeups Read: 1

Didn’t spend much time hunting, but add some new attack vectors to test.
#BugBounty #hackdartstorm

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

🕸️ Day 7/100 — Documenting the Journey 👾

🎯 Submitted: 0
ℹ️ Informatives: 2
🕊️ Triaged: 1
👾 Hunted: 2hr 10min
📚 Writeups Read: 4

Nothing crazy today just spend 2hrs on firefox and burp😅
#BugBounty #hackdartstorm

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

🕸️ Day 6/100 of documenting my journey 👾

▫️ Submitted: 4
▫️ Pending review : 0
▫️ Informatives: 3 + 1 NA
▫️ Hunted : 2hrs
▫️ Writeups Read: 4

Nothing much just find a lead

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

One gets dup and one not-applicable 🥲

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

🕸️ Day 5/100 of documenting my journey 👾

▫️ Submitted: 4
▫️ Pending review : 2
▫️ Informatives: 2
▫️ Hunted : around 2hrs
▫️ Writeups Read: 1

Found 2 bugs today — one high severity and one medium severity. Reported both, so hopefully they get triaged
#hackdartstorm #bugbounty

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

They consider the lack of input validation on the profile ***** fields to be a best-practice gap rather than an exploitable security vulnerability, and therefore closed the report as Informative.

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

🕸️ Day 4/100 of documenting my journey 👾

▫️ Submitted: 2
▫️ Pending review : 1
▫️ Informatives: 1
▫️ Hunted : more than 4hrs
▫️ Writeups Read: 1

Found 3 bugs today, but 2 were out of scope. Reported the remaining one—hopefully it gets triaged!

#hackdartstorm #bugbounty

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

@LoganOpSec Hey @LoganOpSec, I have a question: roughly how many hours did you have to put in before finding your first valid, paid bug?

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

🕸️ Day 3/100 of documenting my journey 👾

▫️ Submitted: 1
▫️ Triaged: 0
▫️ Informatives: 1
▫️ Hunted: 2hrs
▫️ Writeups Read: 0

Understand the authentication flow, and done some fuzzing on the target

#hackdartstorm #bugbounty

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

🕸️ Day 2/100 of documenting my journey 👾

▫️ Submitted: 1
▫️ Triaged: 0
▫️ Informatives: 1
▫️ Hunted: 2.5hrs
▫️ Writeups Read: 2

Learned a lot, felt really good getting back into the flow today. See you tomorrow for Day 3

#hackdartstorm #bugbounty

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

@hilbertspaess btw are you guys real hackers or just black hoodie script kiddle 😂 https://t.co/0ikFG0vCq3

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

🕸️ Day 1/100 of documenting my journey 👾

▫️ Submitted: 1
▫️ Triaged: 0
▫️ Informative: 1
▫️ Paid: $0
▫️ Hunted: 2hrs

Found a rate-limit bypass… turned out to be a dupe 🥲

#bugbounty #hackdartstorm

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

@LoganOpSec btw which type of bug is this

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

@NahamSec Are you a real hacker or an script kiddie with a team of ai agents 🫣https://t.co/jJLOTDTHmo

[👾🕸️hackdartstorm🕸️👾 @hackdartstorm]

Do you actually hack, or just claim the title?