HackerPlus

The only official Twitter account for HackerPlus

[HackerPlus @HackerPllus]

Stored XSS Via https://t.co/EgRjRRmQWR

Today, the HackerPlus team discovered an XSS stored in Gitlab and reported and accepted the report.

Thank You Gitlab Team @Hacker0x01
Thank You HackerOne Team @gitlab

Waiting For Reward Review $$$

HackerPlus Team 🛡

[HackerPlus @HackerPllus]

CSRF Injection Via Goldman Sachs

Target : @GoldmanSachs | @Hacker0x01
Report : Triaged
Bounty : $1,615

Anyone who would like to join the Telegram group, please send us a private message. Thank you.

[HackerPlus @HackerPllus]

CSRF in TikTok Signup Oauth load to one-click Sensitive Data Exposure .

Target : TikTok : HackerOne
Report : Accepted
Bounty : $5,000
Photo POC :

HackerPlus Team 🛡

[HackerPlus @HackerPllus]

Video POC Programs On HackerOne.

. CSRF Injection POC
. Account Takeover Zero Click POC
. HTML Injection POC

Anyone who wants to join the group, send us a private message. Thank you.

@Hacker0x01
@Bugcrowd
@telegram

[HackerPlus @HackerPllus]

Account TakeOver Zero Click Via https://t.co/ig1xpGt7oh

The HackerPlus+ team has received a $20,000 reward from PayPal today

Thank You For Bounty @PayPal
Thank You @Hacker0x01

[HackerPlus @HackerPllus]

There is a Telegram Channel where all the WriteUps of the HackerPlus+ team reports are posted, and POC videos are posted on it. Whoever wants to join should send us a message.

[HackerPlus @HackerPllus]

All Report PayPal - HackerOne

. Account TakeOver - With Login PayPal $2000
. IDOR / Account TakeOver $3500
. UI Redressing (Clickjacking) $3200
. Open Redirect / TakeOver Vulnerability $5500
. HTML Injection Email $300
. OTP Verification Bypass on Email $100

All Bounty $14,600

[HackerPlus @HackerPllus]

@amirpayamani @_SecurityAttack Lol

[HackerPlus @HackerPllus]

@HemantSolo @Apple Hello @HemantSolo

If you get the first reward, contact me and I will help you skip the correction and submit the report again, but on one condition: I will take 50% of the reward from you.

[HackerOne @Hacker0x01]

28 researchers. 9 days. 45 valid critical or high severity issues uncovered.

@amazon's first-ever In-Person Challenge brought together top security researchers to test its systems.

A HackerOne Challenge is more than just a bug bounty—it’s an invite-only, time-bound offensive testing program focused on finding high-impact vulnerabilities fast.
Here’s what this one produced:

👀 222 vulnerability submissions triaged by a dedicated HackerOne pod
💪 129 valid issues: ~60% of all submissions!
💥 12 critical & 33 high-severity findings
🧠 The opportunity for in-house teams to observe researchers’ reconnaissance & attack methodologies firsthand—gaining a deeper understanding of potential security issues

This is what modern, proactive security looks like.

[HackerPlus @HackerPllus]

@darkshadow2bd This is fake because this is my report and this is the original

[HackerPlus @HackerPllus]

Through external programs that create music podcasts on Spotify and Apple Podcasts, we found iDOR creating podcasts within users’ accounts.

WriteUps Comming Soon

@Apple @Spotify @Hacker0x01 @Bugcrowd @yeswehack @TCMSecurity @hackthebox_eu

[HackerPlus @HackerPllus]

Congratulations to the young people who graduated from the HackerPlus training camp Bug Bounty. Good luck to you.

[HackerPlus @HackerPllus]

Account TakeOver Zero Click

Video POC Telegram : https://t.co/TrwV6Sg3v9

Target HackerOne Program

@yeswehack
@Hacker0x01
@hackthebox_eu
@Bugcrowd
@TCMSecurity

[HackerPlus @HackerPllus]

Apple Bug Bounty

Stored XSS Vulnerability on https://t.co/EMfKFFY4LG. Report submitted under the #AppleBugBounty program for security review. Encouraging continued efforts to strengthen security standards #Infosec #BugBounty #Security

@Apple @Hacker0x01 @Bugcrowd
@yeswehack

[HackerPlus @HackerPllus]

@namcoder_com @PayPal Hello my friend, congratulations on the reward. Contact me and we will send you the same loophole again, but in a way that has a bypass, so that you can be accepted again and get the same reward, but on the condition that you will get 50% of the bounty.

[HackerPlus @HackerPllus]

the line with the company employees, I will delete the page and delete all the information. We do not ask anything from you and we do not take anything in return for dealing with us in an aggressive manner. We publish knowledge without compensation. Please respect and appreciate

[HackerPlus @HackerPllus]

The HackerPlus+ team is proud to announce that 10% of every reward we receive will be donated to charitable organizations. This decision aligns with the team's core mission to contribute meaningfully to humanitarian and developmental causes.

@Hacker0x01 @Bugcrowd @yeswehack

[HackerPlus @HackerPllus]

Subdomain TakeOver Programs BugCrowd $2100 Bounty

HackerPlus+ | Writeups
Link : https://t.co/YHtHWjJrkK

The HackerPlus team has created a training camp that will teach you the field from scratch to professionalism. Send us here on Twitter

@Hacker0x01 @Bugcrowd @yeswehack

[HackerPlus @HackerPllus]

ATM | Penetration Testing

HackerPlus+ | Writeups
Link : https://t.co/KttT19KZzc

The HackerPlus team has created a training camp that will teach you the field from scratch to professionalism. Send us here on Twitter

@Hacker0x01 @yeswehack @Bugcrowd