akrem

Eat shit for 1 year, so you can eat caviar for the rest of your life

[akrem @hungrybytes]

@TrunksInu u mean fb ?

[akrem @hungrybytes]

@AndySkraga FB

[Arsen @arsen_bt]

I just turned 24.

I quit boxing after 8 years, got into Web3 Security with no tech background, earned $0 for 210 days, then made $100K+ hunting bugs.

11 lessons I wish I knew earlier:

[Hacking Team @HackingTeam77]

Bug Bounty Methodology with OpenCode CLI – Step by Step
1. Install OpenCode

curl -fsSL https://t.co/c9IOYvtVSN | bash

2. Clone the Bug Bounty Skills

git clone https://t.co/SIAaTKNd6I
cd Agentic-Bug-Hunter
./install_tools.sh
./install.sh --opencode

3. Start OpenCode and Check Skills
Run opencode then type:
do you have bug bounty skills?
4. Core Workflow
• Scope (never go out of bounds)
• Recon
• Hunt
• Validate
• Report
5. Run Recon

recon https://t.co/yM8s8wg5ju

(It handles subdomains, live hosts, crawling, and nuclei)
6. Hunt for Bugs
It covers IDOR, Auth Bypass, XSS, SSRF, Business Logic, SQLi, File Upload, GraphQL, and more.
7. Autopilot Mode (Optional)

autopilot https://t.co/yM8s8wg5ju --normal
8. Generate Reports
After validating a finding,

type report to get a clean, professional report with CVSS, PoC, and impact.

Repo: https://t.co/SIAaTKNd6I

[akrem @hungrybytes]

@h4x0r_dz @Wise Same her DM I can help you

[akrem @hungrybytes]

@h4x0r_dz Same here I had to use some Google chrome extensions to stop freez tabs

[K2S @k2sbhai]

Cursor Pro is FREE 😳

- no student ID needed
- open to everyone worldwide
- normally $20/month
- claim your code through MLH

ends October 15

claim here: https://t.co/IugBkZlViW

[Killed by Google @killedbygoogle]

Never use “Sign In with Google.”

[akrem @hungrybytes]

@h4x0r_dz He's hiding like a bitch

[H4x0r.DZ @h4x0r_dz]

No one hates these Israelites' motherf**kers more than me.

[𝐤𝐣𝐮𝐥𝐢𝐮𝐬 @ethical_h4ck3r_]

.env leaks

How to find : /FUZZ all Endpoints to find leaks. 🔥

Wordlist: https://t.co/E8NMMgwjdn

Tool: https://t.co/OKpyf9qUYD

Command: ffuf -u https://target[.]com/FUZZ -w wordlist.txt -mc all -e .env, .bak, .db, .7z, .zip, .md, .txt, .tar.gz

#bugbountytips #bugbountytip

[DJ SOUNDVIBEZ 🎵🎵 @JeremiahAl64612]

@NitinGavhane_ Thanks for this

[zack0x01 @zack0x01_]

Recon is EVERYTHING in bug bounty 🎯

Before you run a single tool, understand the app:
1️⃣ Check the business. What does it actually do?
2️⃣ Google it, browse the app like a user
3️⃣ Watch videos, read Reddit posts
4️⃣ Learn the app in and out

Then bring the tools:
- Subdomain enum: subfinder, assetfinder, findomain, https://t.co/OUKa7k6rzJ, https://t.co/N9xpqrlKOM
- Live hosts: httpx
- URLs: waybackurls, waymore
- Full chain: reconftw, or build your own pipeline

[akrem @hungrybytes]

@Reddit Please take another look at my ban appeal. My account was banned for spam by mistake, and I believe the decision was incorrect. I’ve submitted an appeal and would really appreciate it if someone could review my case. Thank you 🙏

[Exploit Database @ExploitDB]

[webapps] Joomla 2.9.99.4 - Unauthenticated Remote Code Execution https://t.co/4kyke4Q7YF

[H4x0r.DZ @h4x0r_dz]

It's Friday, the best day of the week to drop 0-days.

@pwn_ai dropped XSS2Shell WordPress Core preauth XSS → RCE. 🫥

[Nitin Gavhane @NitinGavhane_]

Bug Bounty Methodology with OpenCode CLI

1/10
Turn your terminal into an AI-powered bug bounty machine.

Recon → Hunt → Validate → Report — all inside OpenCode.

No more context-switching. Just pure hunting flow.

#BugBounty #OpenCode #CyberSecurity #WebAppSec

[I'M H4CK3R 42 @luckyhacker43]

$12,500 IDOR - Delete all Licenses and certifications from users account using CreateOrUpdateHackerCertification GraphQL query on HackerOne by Harsh D Ranjan (harshdranjan) 🤯

🔗 https://t.co/2TLLEXpOWJ
Join team 👉https://t.co/pJWHoCMDix

[Intigriti @intigriti]

Performing recon can take hours of your time... 😅

Recon-skills by @uphiago packages 169 offensive security skills into an AI-ready toolkit, covering everything from subdomain enumeration and vhost discovery to JS analysis and GitHub secrets, all tested across 600+ real targets in 45+ sectors! 🤠

Check it out! 👇
https://t.co/1zEMvDU47e

[Abhishek @aacle_]

Bug bounty talks that are 5+ years old
and still produce bugs nobody else is
finding.

Most hunters watch the latest recon
tool demo and skip the talks that built
the methodology they're using without
knowing it.

Here are 10 forgotten talks 🧵 that still pay