Ha$h1m

Jr Pentester @BuguardLLC - Bug Bounty Hunter

[Ha$h1m @mrhashimamin]

@hatab0x مين قال الكلمه دي قدامك

[Ha$h1m @mrhashimamin]

@no_zidan @Bugcrowd يا ريس هما حولوها resolved بالغلط علشان كده دفعوا
لكن مش هيدفعوا تالت مرة مش مغفلين للدرجه😆

[Ha$h1m @mrhashimamin]

I love @Bugcrowd tbh <3

A year ago, I reported my first bug to a public BBP on BC. A month ago, it got "resolved"...
I reproduced it again with the same steps xD and BC paid me twice for it

[Ha$h1m @mrhashimamin]

@Shari7a0X كفاية يسطا دوبلكيت
اخر مرة والله

[Ha$h1m @mrhashimamin]

بجاية فكرتها بسيطه جبتها من فترة
Org Owner: disables feedbacks
Atkr: crafts (POST then PUT) request

```
POST /v3/group_channels/<chat_url>/messages/<bot_message_id>/feedbacks HTTP/2
....

{"rating":"bad", "comment":"attacker message"}
```
--
#BugBounty #bugbountytips #bugcrowd

[Ha$h1m @mrhashimamin]

A simple P3 PrivEsc.

- Docs: u can't convert private chats to public
- Using the app: `P` > private, `O` > Public
- convert public chats to private (feature)
- Modify the `privacy` to `O`
- Done

https://t.co/fgPdKEVCb8
---
#bugbountytips #privesc #infosec #bugbountytip

[Ha$h1m @mrhashimamin]

Bug: Logic flaw led to PrivEsc
Severity: P3 aka $$$

- Adding new user to chat -> 403
- Attacker use a feature No.1
- Attacker turns on a feature No.2
- User2 (Attacker2) has been added (Automatically while using Feature No.2)

https://t.co/OhMuATJgnR

#bugbountytips #Infosec

[Ha$h1m @mrhashimamin]

Add a comment
Delete it -> 200 ok -> deleted
Delete it again -> 200 ok -> next comment deleted
User adds a new comment -> old comments restored
Send it every 2 seconds with python -> comments deleted again -> useless comment function
https://t.co/pm0UCqxvgJ

#BugBounty #infosec

[Ha$h1m @mrhashimamin]

1. `/createuncommittedpurchaseorder` has an IDOR, but it's a 32-character UUID.

2. Complete the purchasing process and there's another IDOR, which is used to retrieve this long UUID xD

For more details: https://t.co/lwhiCGC6eo

#BugBounty #bugbountytips #hackerone

[zein @elze1n]

الواد العيبط اللي زعلان انه معرفش يطلع bug من اول مره يجرب program حقيقي(انا)

[Who Am I ? 🇪🇬 🇵🇸 @19whoami19]

Today I reached the 400th report submitted to @Hacker0x01 , 140 out of them is Duplicate + 109 is informative , Just keep Going and chase ur dreams everywhere , U have to keep walking to arrive 😄

[Ha$h1m @mrhashimamin]

Can i block you from accessing your account? 🚫👾
Bug: Business logic error
write-up: https://t.co/HznEBwwkWp

-----
#cyber_security #bugbountytips #bugbounty #hacking #bugcrowd #bughunting #cybersecurity

[Ha$h1m @mrhashimamin]

RACE CONDITION in a photo-sharing app that lead me to increase my points 👾🆙
--
Write-up: https://t.co/kQfmxwSxx9
--
#bugbountytips #cybersecurity #bugcrowd #informationsecurity #infosec #infosecurity