Jirosec

Security Research | BUG BOUNTY HUNTER | OFFENSIVE SECURITY

[Yasho @YShahinzadeh]

I created a challenge based on one of my Google bugs worth $12,000. It is an OAuth misconf. I will drop a writeup for it soon, before that, give it a try & practice, it doesn't matter if u r capable of solving it or not, just click and start poking 🙂

https://t.co/lAW53dVyk5

[Jirosec @ig_ftw]

@HusseiN98D Happy Birthday 🎂🎂

[⚡🌌🌌teslatheg0d🌌🌌⚡ @TeslaTheGod]

"Life creates problems to see if you will fight through or quit."

[Jirosec @ig_ftw]

I just published Reverse Engineering Web Apps & APIs 101 https://t.co/UxuN8EuHlY

[Jirosec @ig_ftw]

@Itx_Shad0w @tabaahi_ Happy Birthday 🎂🎂🎂

[Mh~Jafar @52_Hz_h1]

My first write-up about a vulnerability I found in a private HackerOne program, with a $3,000 bounty.

Read here:
https://t.co/jzarQnSHWO
#BugBounty #HackerOne

[Jirosec @ig_ftw]

@Yassineaboukir @0xacb @Hacker0x01 Congratulations 🎉🎉

[Jirosec @ig_ftw]

I earned $800 for my submission on @bugcrowd https://t.co/YvS1VeG0ME{id: "jirosec"} #ItTakesACrowd

[Pingiskok @pingiskok]

Every JWT writeup online covers 2–3 attacks and stops.
I got tired of jumping between 40 blog posts, so I wrote the whole thing. All in one place.
https://t.co/iCSzQ4GjcS

#infosec #appsec #bugbounty #websec #jwt

[Benedict Yorston @BMJYorston]

If your probability of success is 1/100 and you try 100 times you have a 63.4% chance of success

(1-0.99^100)

[Luke Stephens (hakluke) @hakluke]

🚨 We're hiring at HackerContent.

We're looking for an Operations Manager who can keep the engine running while we continue to grow.

We create technical cybersecurity content, so you'll need to actually understand the space, preferably with technical experience. You'll be reviewing blogs, whitepapers, and social media posts for technical accuracy and quality.

Here's what the role looks like day-to-day:

→ Managing client relationships and communications
→ Reviewing technically oriented blogs, whitepapers and social media posts
→ Managing and coordinating staff
→ Keeping multiple projects on track simultaneously
→ Building and improving internal processes

What I'm looking for:

✅ A background in cybersecurity (hands-on experience a big plus)
✅ Proven ops or project management experience
✅ Obsessively organised and task-oriented
✅ A strong communicator who can hold clients and teams accountable
✅ Someone who thrives in a fast-moving, multi-project environment

If you're a technical person who's also a sharp operator, or an ops professional who's deep in the security world, I'd love to hear from you.

Drop me a DM or tag someone who'd be a great fit. 👇

[Jirosec @ig_ftw]

@Anh084879445581 @Hacker0x01 Congrats 👏🏻👏🏻

[Jirosec @ig_ftw]

@shreerajaput @Bugcrowd Congratulations 🎉🎉👏🏻👏🏻

[Jirosec @ig_ftw]

@rudradas01 Congratulations 🎉🎉

[obscaries ❘ AppSec @obscaries]

POV: You’re trying to survive in a top-tier bug bounty program while highly experienced hackers are hunting the same targets.

Anxiety level at its peak.💀

#BugBounty #Infosec

[Behi @Behi_Sec]

https://t.co/K8gZsopzNg

[Mohsin Khan @tabaahi_]

I asked 10+ top bug hunters who made over $500k+ about their secrets.

Here’s what they said:

1. They work insanely hard (280+ hrs/month) even after earning millions.
2. They master 1–3 programs deeply.
3. Speed matters. Never break your momentum.

1/n

[Jirosec @ig_ftw]

@Behi_Sec Hackerone

[Jirosec @ig_ftw]

@Behi_Sec I am not able to handle it. I face this issue a lot. It’s not about money for me, but I have to show that to my parents. I can live life with this. It’s all about doing what you love. For me, it’s about understanding the system and how it works

[Behi @Behi_Sec]

@_jensec That's it for the thread. If you liked it, give it a retweet so others can use it, too.

And follow me for more content like this: @Behi_Sec

Here's another thread you might like:
https://t.co/YvRZqyQiKR