✨Neha Tariq✨

Don't learn to #hack, Do #hack to learn.

[✨Neha Tariq✨ @nehatarick]

Alhamdulillah, first goal of this year has achieved :)

Leveled up to level 0x05! @SynackRedTeam @synack

[✨Neha Tariq✨ @nehatarick]

Happy New Year everyone! I hope the past year was wonderful for you and this one will be even more amazing.

#Welcome2024

[✨Neha Tariq✨ @nehatarick]

Thanks a lot @synack @SynackRedTeam for sending this amazing jacket 🔥🔥🔥

#synack #redteam #BugBounty

[✨Neha Tariq✨ @nehatarick]

@ShawarkOFFICIAL @SynackRedTeam Congrats btw did you get the coin holder as well?

[Peter M @pmnh_]

New blog post on a recent collab with @UsmanMansha420 where I bypassed Akamai WAF to get RCE on a Java application with Spring EL injection. Spent some time writing about the process of constructing the custom payload. Hope you enjoy! https://t.co/hsuRmM3fx6

[✨Neha Tariq✨ @nehatarick]

Au pays des rêves.

#HappyNewYear2023

[shubs @infosec_au]

I just published a blog post for the people that want to get into bug bounties. I hope it helps people that are thinking about doing bug bounties, but haven't started yet. It explains what to expect and how to deal with common problems / situations: https://t.co/V9CKTpJzPT

[l0cpd @l0cpd]

I earned $2,500 for my submission on @bugcrowd https://t.co/QpdfQ5CfqM #ItTakesACrowd

SQL to RCE
Thanks for the post below that gave me the idea.
https://t.co/odmQiZFkb1

[Kuldeep Pandya @kuldeepdotexe]

Got my first ever XXE accepted on @SynackRedTeam.

Here's a writeup on how I did it: https://t.co/83vw5JgCOx

[✨Neha Tariq✨ @nehatarick]

Thank you @synack and @SynackRedTeam for the amazing gifts

#swag #redteam

[✨Neha Tariq✨ @nehatarick]

@Mdhsan19 @0x1int The lowest impact is Reflected XSS which can be done with the following payload:

<domain>/docpicker/internal_proxy/http/brutelogic.com.br/poc.svg

[Corben Leo @hacker_]

I hacked a gaming company this year.

Here's how I did it:

[Nicolas Krassas @Dinosn]

Bypassing WAF to Weaponize a Stored XSS https://t.co/490BQd3Jcs

[Harsh Bothra @harshbothra_]

6 Free Labs to master XXE attack

🧵

[✨Neha Tariq✨ @nehatarick]

@phyr3wall Not decided yet!

[✨Neha Tariq✨ @nehatarick]

Got my full collection of coins today. Thank you @synack for this amazing gift.

[✨Neha Tariq✨ @nehatarick]

@Spy0x7 @SynackRedTeam @synack no, 2021

[Preetham Bomma @cyber01_]

Blogged about a fun SSRF I found last month on @SynackRedTeam
#bugbounty #bugbountytips
https://t.co/4lpB68V0Zu

[Stealthy @stealthybugs]

Check out my vulnerability write up about critical bugs in Apple infrastructure worth 36,000 in bounties.

https://t.co/lT59uEGNZi

#BugBounty #exploit #infosec #whitehat #bugbountytips #ethicalhacking

[The Bug Bounty Hunter @tbbhunter]

Exploiting DOM Based XSS via Misconfigured postMessage() Function

https://t.co/DedMYDutFG

[✨Neha Tariq✨ @nehatarick]

@HannanHaseeb11 @SynackRedTeam @synack Congrats 🎉