jonjos11

Trial and Error

[sagitz @sagitz_]

This is the bug:
https://t.co/dT0gbyj6g1

[jonjos11 @jon_jos11]

Alhamdulillah, secure google

[James Kettle @albinowax]

When HTTP/1.1 Must Die lands at DEFCON we’ll publish a @WebSecAcademy lab with a new class of desync attack. One week later, I’ll livestream the solution on air with @offby1security! You’re invited :)
https://t.co/BPt0h0YiN2

[jonjos11 @jon_jos11]

@PSGindonesia Tembakau dan kopi min #PSGBanggaBatik #HariBatikNasional

[jonjos11 @jon_jos11]

Alhamdulillah, focus on one program and get another vulnerability again :
1 high
1 medium
1 low

bounty : $$$$
Tips : check every endpoint on admin and try in low level user

[jonjos11 @jon_jos11]

@Bugcrowd 🤩

[bugcrowd @Bugcrowd]

⏰ Time for a #GIVEAWAY!
💬 We want to hear from you.

How to win swag?
📣 Retweet
📣 Like
📣 Complete the survey
📣 Drop an emoji once completed

Click here to get started: ⤵
https://t.co/2d0aKaCH6z

[jonjos11 @jon_jos11]

@mfadhlims Muridnya grownkowski tu

[jonjos11 @jon_jos11]

Alhamdulillah, finally I found a security vulnerability in Apple, one of my goal is finally achieved, seeing this push me to try more harder and keep learning!

#bugbounty

[jonjos11 @jon_jos11]

@mhrdhikadityaX7 Ayo login wkwk ben dino wes tak ajak login ngunu kok

[jonjos11 @jon_jos11]

@bilaalsp Wkwk bejo iku lal

[jonjos11 @jon_jos11]

Alhamdulillah, I was awarded a $250 bounty on @Hacker0x01! https://t.co/MkVhLubOoi #TogetherWeHitHarder

[Neh Patel 🇮🇳 @thecyberneh]

New Writeup:-
$6000 with Microsoft Hall of Fame | Microsoft Firewall Bypass | CRLF to XSS | Microsoft Bug Bounty

https://t.co/rsVtkipcR2
#bugbountytips #cybersecuritytips #bugbounty #writeup

[jonjos11 @jon_jos11]

Alhamdulillah, Microsoft Hall of Fame :)

[Mohsin Khan @tabaahi_]

Thread about hunting on the main application 🧵
1. Check the login process
- Do they allow signup with email or Google etc
- Do they allow you to signup with the @company email
- what is the content-type of the signup/login page
- when you enter valid cred, on which page you

[jonjos11 @jon_jos11]

@mfadhlims Sini ke kapal

[jonjos11 @jon_jos11]

Alhamdulillah, get my first P1.
bug: Graphql vulnerable to IDOR -> lead to information disclosure.

#bugbounty #bugbountytips

[jonjos11 @jon_jos11]

@mhrdhikadityaX7 @WebSecAcademy GG pol cah iki🤣

[jonjos11 @jon_jos11]

@mfadhlims @Hacker0x01 @harrmahar Bismillah dli bentar lagi kamu ni dapet bug juga👍

[jonjos11 @jon_jos11]

Yay, I was awarded a $500 bounty on @Hacker0x01!
Alhamdulillah, Tips from @harrmahar
Always check request API in mobile apps:)
#TogetherWeHitHarder

[jonjos11 @jon_jos11]

@galihwwm @Hacker0x01 @harrmahar Alhamdulillah makasih wen, gas kumpul omega😅