Ibrahim Mohamed

Hacker (Focused on XSS) | Binance Hall of Fame | Follow my journey to $10,000

[Ibrahim Mohamed @ibrascript]

[Journal] - A Beginner's Journey to Making $10,000 From Ethical Hacking (Bug Bounty Hunting) 🧵 👇🏾

[The Spectator Index @spectatorindex]

BREAKING: NVIDIA CEO Jensen Huang resigns

[Ibrahim Mohamed @ibrascript]

Bro 😂

[Frank @jedisct1]

CVE-2026-83844: Remote Code Execution in Microsoft Paint. https://t.co/omoSAcWUS7

[Ibrahim Mohamed @ibrascript]

Hope you enjoyed this update, stay tuned.

#buildinpublic #100DaysOfCode #hacking #cybersecurity #XSS

[Ibrahim Mohamed @ibrascript]

Journey to $10,000 from bug bounty hunting: Update #1

So as always, I was monitoring my mailbox.

An email came through: "Changed from P2 to P1"

A few minutes later...

Another email: Triaged.

👇🏾

[Ibrahim Mohamed @ibrascript]

I went to Claude and created an exclusive, comprehensive, XSS-only bug bounty curriculum (it still covers advanced surfaces like PDF, file upload, markdown, rich text editors, etc.)

So going forward I will focus on hunting only XSS, and see what happens.

👇🏾

[JS0N Haddix @Jhaddix]

Anti bot mitigations block:

Web fetch
Curl
Wget
Puppeteer
Playwright
Chrome devtools mcp

You don’t notice because it’s in a sub agent and your hackbot gives up silently.

Roll your own requester.

[Ibrahim Mohamed @ibrascript]

@redrouterorg You're welcome!

[Ibrahim Mohamed @ibrascript]

Highly recommended! (tried and tested)

[Red Router @redrouterorg]

Red Router Abliterated Benchmarks are live!

This is the first and only continous measurement of Speed, latency, reliability, and listed price across providers. 🧵(1/3) https://t.co/vLNOX5CemB

[Ibrahim Mohamed @ibrascript]

@mdp_sec @Bugcrowd #ittakesacrowd 👏

[Ibrahim Mohamed @ibrascript]

@BugBunny_ai Absolute comedy 😭

Give the social media manager a raise.

[Ibrahim Mohamed @ibrascript]

@WebSecAcademy Let's not forget our friend wiener who's password peter is as common admin:admin.

[Ibrahim Mohamed @ibrascript]

I will also opencode and free-pi, both provide free, limited access to Deepseek v4.1 Flash (used mostly for a first-pass of finding confirmation).

I hope that you will follow along and enjoy the journey.

#100DaysOfCode #buildinpublic #Hacking #cybersecurity

[Ibrahim Mohamed @ibrascript]

[Journal] - A Beginner's Journey to Making $10,000 From Ethical Hacking (Bug Bounty Hunting) 🧵 👇🏾

[Ibrahim Mohamed @ibrascript]

My stack is simple: Burp, Zap, open-source AI pentesting tools, opencode with open-source tools, skills, and MCPs, and for AI APIs, I have 1,000 free requests per day to free models from OpenRouter, and free nararouter access 👇🏾