kernel Panic

Learning to break things

[kernel Panic @kernelPanic0x01]

Alhamdulillah.

My first bug after about 7 months of grind and confusion

Thanks to all who I benefited from their knowledge in this field

#bugbounty #NASA #cyberscurity

[kernel Panic @kernelPanic0x01]

@Hunt3rboy0x01 @flowdiaryai Gdy nake oga

[Abhishek Meena @aacle_]

Bug bounty talks that are 5+ years old
and still produce bugs nobody else is
finding.

Most hunters watch the latest recon
tool demo and skip the talks that built
the methodology they're using without
knowing it.

Here are 10 forgotten talks 🧵 that still pay

[kernel Panic @kernelPanic0x01]

@Hunt3rboy0x01 Thanks

[kernel Panic @kernelPanic0x01]

First bounty!

After spending around 1,700 hours of strugling and doubting my abilities, I got my first bounty.

I thank everyone who has helped me reached this milestone.

#Firstbounty #Bugcrowd

[lynk @lynk0x]

This is what your soul needs, not Dubai.

[3NVZ | Robert S. @YourFinalSin]

Very helpful video on how to attack complex/hardened systems by @alisaesage, if you didn't see it yet 🧠

This applies to web bug bounty hunting as well!
https://t.co/93V8pvLKHR

[oxflask @oxflask]

كل فتره من فحصك المتواصل لازم تخلي كذا فيه توقف تتعلم شي جديد تقراء شي جديد تسمع شي جديد حتى لو مو لغرض التعلم بقد ما تنمي عقلك على التفكير وتشوف الافكار الجديده

Hackers Vs Triage

https://t.co/oKPlYb8Qp5

[kernel Panic @kernelPanic0x01]

My first bounty on its way. Insha Allah.

[obscaries ❘ AppSec @obscaries]

An absolute goldmine for bug bounty hunters 👀💥

A massive collection of real, disclosed HackerOne reports — organized by vulnerability type, impact, and target 🎯

If you want to go beyond theory and actually understand how real-world exploits work… this is it.

Study patterns. Learn impact. Hack smarter. 🚀

🔗 Source: https://t.co/yMey4fzDbn

#BugBounty #InfoSec #CyberSecurity #EthicalHackin

[The Spearhead @Spearhead_Af]

Nigerians, Wake Up!

Over the last 2 years, a dangerous and divisive narrative has spread across Nigeria, a narrative of religious persecution, of Nigerian Christians being massacred by “Islamic jihadists” and “ISIS terrorists” for their faith in a “Christian genocide”, a narrative which did not originate in Nigeria, but in Washington DC. For the last 2 years, and in recent months most especially, the administration of US President Donald Trump has been relentlessly pushing this narrative.

Why is it doing this, and why should every Nigerian be very concerned?

The answer lies in the history of geopolitics over the last 8 decades, and in this video, YouTubers Sonny Faz and Bek Lover shed light on this answer.

[Yasho @YShahinzadeh]

I published one of the techniques that I've been using against OAuth providers, honetly, it's led me to discover many flaws, and recently I used it to find a 1-click ATO on one of the most widely visited websites,I hope you find it useful :-)

https://t.co/o7OO8Y7e3K

[Secfortress @Secfortress]

https://t.co/PPnnpaEXwb

Got blocked by cloudflare while using burp proxy, this subreddit helped!!

[Ben Sadeghipour @NahamSec]

@hackinghub_io sorry /actuato%72/heapdum%70

[Ben Sadeghipour @NahamSec]

@hackinghub_io /actuator/heapdump

[sin99xx @sin99xx]

Most JWT content is stuck in 2015.
alg=none, weak secrets, basic misconfig screenshots.

That’s not where the interesting bugs are.
I usually keep this stuff private.

This time I’m dropping it publicly ↓
https://t.co/Sm0oiwjyxV

[zack0x01 @zack0x01_]

https://t.co/GLZlGlnyVo is outperforming most recon
tools 🔥🚀:

🔴waybackurls → 10,184
✅recox → 53,030 🔥

🔴subfinder → 896
🔴subd...c99nl → 896
✅recox → 901 ⚡

check it out : https://t.co/GLZlGlnyVo

#bugbounty #bugbountytips

[sin99xx @sin99xx]

This is why reading specs beats reading recycled bug bounty writeups.

I published a real-world auth bug where trusting one OIDC claim the wrong way could let a different user inherit someone else’s account.

Read: https://t.co/wxCZsVmRQM

[sin99xx @sin99xx]

Stop reading recycled Medium writeups. They’re surface-level marketing trash for script kiddies.
If you want actual protocol-level bugs and critical auth bypasses, you read the primary sources. Here’s the reading list that separates actual engineers from scanner monkeys. 🧵👇

[Behi @Behi_Sec]

The more time you spend on a target, the higher your chances of finding bugs.

However, very few people are willing to spend weeks or even months just to understand how an application truly works.

[Behi @Behi_Sec]

@PulkitJangid18 https://t.co/7M9kF98DOg