Avinash Kumar

Security Researcher 🇮🇳

[Avinash Kumar @itsAvinash_]

Writeup Published:- https://t.co/8sbY1jTvhE

[Avinash Kumar @itsAvinash_]

Yay, I was awarded a $25,000 bounty on @Hacker0x01! https://t.co/BK2qpDrlUK #TogetherWeHitHarder

[Patrik Grobshäuser @ITSecurityguard]

Stop blaming AI slop for what bug bounty platforms did to themselves.

👇 wrote down some thoughts about the state of triage

https://t.co/0dq1I61YGd

[ROHIT @rohsec]

Great find, @itsAvinash_ !! 🙌

This tweet has reached 8.3K users and gained over 196 likes, making it one of the most liked disclosed report tweets on @h1Disclosed

@Hacker0x01 @jobertabma

#bugbounty #bugbountytips #cybersecurity

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ The /reports/:id.json endpoint discloses potentially sensitive user attributes when reporter summ...
👨🏻‍💻 @itsavinash_ ➟ HackerOne
🆘 Critical
💰 $25,000
🔗 https://t.co/4SUjU5K0Ma
#bugbounty #bugbountytips #cybersecurity #infosec

[Jobert Abma @jobertabma]

This was a great find and had a super interesting root cause: https://t.co/gYbGwLmD4s

[Avinash Kumar @itsAvinash_]

Yay, I was awarded a $25,000 bounty on @Hacker0x01! https://t.co/BK2qpDrlUK #TogetherWeHitHarder

[Avinash Kumar @itsAvinash_]

Yay, I was awarded a $5,000 bounty on @Hacker0x01! https://t.co/L8uWko5yfn #TogetherWeHitHarder

[Joseph Thacker @rez0__]

It's a good time to repost this: https://t.co/jI2VhagMtr

[PortSwigger Research @PortSwiggerRes]

Stealing passwords from infosec Mastodon - without bypassing CSP

https://t.co/kXIqj3tpAU

[Avinash Kumar @itsAvinash_]

Instagram email confirmation bypass,
Bounty:$3000
https://t.co/dP8AUZst2r @fbsecurity @Meta

[Avinash Kumar @itsAvinash_]

@PortSwigger Yes It has been resolved, Thanks for your quick assistance :)

[Somdev Sangwan @s0md3v]

I created a guide to give direction to folks interested in hacking and to talk about mental issues that people often face.

Skim through it and let me know how it can be improved. Thanks.

https://t.co/m7hjnMUKs5

[lcamtuf @lcamtuf]

Thread: over the years, I had countless infosec newcomers ask me how to build a successful career in the field.

I don't have a recipe for success; but there are several things I learned over the years, and they're a bit different from the usual career advice you hear. (Thread)

[Laxman Muthiyah @LaxmanMuthiyah]

Microsoft Account Takeover! 😊😇 Thank you very much @msftsecresponse for the bounty! 🙏🙏🙏
Write up - https://t.co/9ATsxAUfeB

[Sayaan Alam @ehsayaan]

Finally, the Most awaited write-up is here , SSRF (Server Side Request Forgery) worth $4,913 | My Highest Bounty Ever!
Kudos to @TechFenixSec Red team for helping me throughout the research
Retweet if you like it.🙂

#bugbounty

https://t.co/qfLCiAo0sg

[shubs @infosec_au]

I wrote a post on @assetnote's blog about hacking in bug bounties for the last four years. This should give you a good idea on what I've been reporting and how I find bugs and incorporate them back into our platform.

https://t.co/BhL4DiQlaB

[Bhavuk Jain @bhavukjain1]

Zero-day in Sign in with Apple - bounty $100k
https://t.co/9lGeXcni3K

[Avinash Kumar @itsAvinash_]

@achillean @sachincyb @shodanhq Thanks for clarification :)

[Geekboy @emgeekboy]

🎉🎉we are #announcing our long awaited project for the community https://t.co/A39zgR5b5x, it’s a cloud based platform for continuous recon and monitoring, please have a look on product video and blog and give a thought about it.

https://t.co/HZaDQ9MOdr

https://t.co/EG4PqH6Khg