karsec

I dabble in software development,being a nerd, cybersecurity.

[karsec @karsec3]

I earned $1,500 for my submission on @bugcrowd https://t.co/Kee2fZwkeT #ItTakesACrowd

[ᗩᒪETᕼE @AletheDenis]

How to Build a Bulletproof Pretext is live - https://t.co/kalh7LHxEI

[karsec @karsec3]

@arth_bajpai Seems like they were setting up the new spinoff series rather than focusing on finishing the final season on a high.🙃

[karsec @karsec3]

@HusseiN98D Happy birthday bro 🎂

[the_IDORminator @the_IDORminator]

🚨
As of tomorrow I am permanently reducing my course cost by 50% to $100 so more people have access to it and can get those bounties while they are still hot. And yes, they are still hot. The internet is still full of stupid problems waiting to be found for those looking, at least for now...

https://t.co/ZQDJvWYVZb

I suspect we have about 2 years of decent #bugbounty hunting left before most companies have access to and properly leverage the tools like Mythos that effectively replace "most" hackers.

Using the EXACT methods in this course, I found 20+ critical bugs on a target in a matter of hours the other day. Nothing fancy. The internet is just too dang big to fix and patch in a small amount of time, even if AI is finding the bugs. Internal legacy human processes with 500 steps are still bottle-necking remediation.

What the bug bounty world becomes next is anyone's guess. My suspicions, hackers will be paid flat rates for hacking and/or patching targets any way they can (be it AI, manually, or both). So, here's to the next evolution of hacking, which is hopefully round-table LHE's where we all work together on targets to harden them as best as possible, instead of working against each other to try to "be the best hacker".

Re-post for a chance to win 1 of 5 course coupons for a give away on May 14th. I'll have Grok pick the winners.

[karsec @karsec3]

@h4x0r_dz Wtf 😂

[karsec @karsec3]

@ryotkak Cool Finding!

[karsec @karsec3]

@ITSecurityguard Congrats 🎉

[Sharik Khan @4non_Hunter]

I just published a new #article on Medium.

How I Earned $76,000 Bounty From a Single Program on @Bugcrowd .

#BugBounty #Bugcrowd #CyberSecurity #EthicalHacking @Hacker0x01 @yeswehack @intigriti

https://t.co/pQelmwcQLQ

[Renwa @RenwaX23]

I think I have completed client-side security , just one report:

Self-XSS -> Drag-Drop Payload -> Scroll-To-Fragment -> Unchecked postMessage Listener -> Text Injection -> DOM-XSS -> OAuth State Misconfiguration -> Cookie Bomb -> Account Takeover

https://t.co/xQmtZE5At0

[castilho @castilho101]

Stealing Salesforce OAuth Tokens via the WAF: A write-up on SFRA context and escalating XSS to Account Takeover using the WAF as a gadget. Hope you enjoy it

https://t.co/vUNKbjUeWk

[karsec @karsec3]

@galnagli 🔥

[JS0N Haddix @Jhaddix]

Day TWO of FIVE days of celebrating our 2 year ARCANUM-VERSARY! @arcanuminfosec

3rd Giveaway = FOUR seats to our new course by @the_IDORminator "Zero to [BAC] Hero" !

👍 1 Like = 1 Entry!
♻️ 1 Share = 2 Entries!

Winners announced 1/21! Syllabus link below 👇

[karsec @karsec3]

@saur1n hey bro, can you check dm?

[Root-Me @rootme_org]

🎄 Root-XMAS is back! 🎅

Every day, from 1 to 24 December, come and enjoy not chocolates but a new challenge ⚡️

🔥 Level: all
🎁 Prizes to be won for the fastest, the brightest, the most... determined

👉 Register now: https://t.co/isM22ldnaT

[karsec @karsec3]

@NahamSec Bundle 2

[Ben Sadeghipour @NahamSec]

Giveaway and new course 🚨

I just released a nuclei course and we have made it a part of our Black Friday bundle. You can get all of our courses for the price of one.

🎁I’ll give some away. All you gotta do is RT & reply with which bundle you want!

https://t.co/U3ijsLW98N

[karsec @karsec3]

I earned $800 for my submission on @bugcrowd https://t.co/Kee2fZwkeT #ItTakesACrowd

[karsec @karsec3]

@v1d239root @Bugcrowd Thanks!

[karsec @karsec3]

I earned $100 for my submission on @bugcrowd https://t.co/Kee2fZwkeT #ItTakesACrowd

[Sam Curry @samwcyo]

Earlier this year, @infosec_au and I discovered multiple vulnerabilities that allowed us to access the back office admin panel of ClubWPT Gold (the World Poker Tour's website) where we could manage customer data, KYC, and more.

Read the writeup here:
https://t.co/K2402UPWYk