Sahil Mehra 🇮🇳

Entrepreneur in the making, Python developer by choice, and Penetration tester by passion. Can't live without coding!

[Sahil Mehra 🇮🇳 @nullr3x]

Just published a new Medium post on a crucial #infosec topic! The post explores unconfigured Sign-in with Google functionality that could lead to unauthorized access to the admin account.

#cybersecurity #pentest #ethicalhacking #vulnerability

Read Now: https://t.co/hpGwGBFEV8

[Sahil Mehra 🇮🇳 @nullr3x]

🌟Mass Account Takeover Vulnerabilities

① IDOR Vulnerability
② Host Header Vulnerability
③ Chaining IDOR & Host Header => Mass Account Takeover

📷 Read Now: https://t.co/dKLTB0fSkH

#ethicalhacking #CyberSecurity #bugbountytip #bugbountytips #bugbounty #infosec

[Anuj @bsachunter]

Go and check out our new blog of one of the finding on @hackerone Full Access to the Production Portal by us @bsachunter & @a_s_h_Hunter .

https://t.co/1HlTiMjJFJ

Tip:- Recon is the Key to Success.

#togetherwehitharder #recon #BugBounty #infosec #infosecurity
#cybersecurity

[Manav Goyal @a_s_h_Hunter]

Yay, I was awarded a $2,000 bounty on @Hacker0x01!
For P1 bug.
Bug type : PII Disclosure of all users. https://t.co/YyFgH0hG51 #TogetherWeHitHarder
Bounty partner: @bsachunter
Special thanks to our
Mentor:@sechunt3r
@nullr3x

@InfoSecComm @bugbounty18

[Sahil Mehra 🇮🇳 @nullr3x]

@a_s_h_Hunter @Hacker0x01 @bsachunter @sechunt3r @InfoSecComm @bugbounty18 Congratulation brothers 👏 💜

[EdikTheFurry @EdikFurry]

Just a quick shout out to @nullr3x - found a possible #securitybreach and gave us the full details for is to fix it.

Keep this gentleman in mind if you need web or #Android application testing or #VAPT security audit.

Cheers!

[Sahil Mehra 🇮🇳 @nullr3x]

@sagaryadav8742 @_smile_hacker_ Congratulation bro 🎉🎉🎉

[Sahil Mehra 🇮🇳 @nullr3x]

@Virdoex_hunter @sechunt3r Thanq bhai

[Sahil Mehra 🇮🇳 @nullr3x]

Acknowledged by Apple Product Team
Thanks @sechunt3r
https://t.co/iVglbwUJJK
#safari #macos #bigsur #security #bugbounty #TogetherWeHitHarder

[Sahil Mehra 🇮🇳 @nullr3x]

@0x01titsec @TheSecopsgroup @Disruptrs_ Congrats Bhai

[Aditya sharma 🇮🇳 @Assass1nmarcos]

Saved A*s of a company from following data leak trend😂
2 billion users PII leaked through endpoint (contains banking details too)
#databreach #securitybreach #bugbounty #hacking #dataleakage #bugbountytips #bugbountytip
@sechunt3r @ADITYASHENDE17
@sratarun

[Sergey Toshin @_bagipro]

A nice way to grab deeplinks on iOS is to just download them :)

Open the "apple-app-site-association" file for the desired domain, and it will contain all the deeplinks

Examples:
- https://t.co/0bPWq2TbAC
- https://t.co/ejPCIxMMbn
- https://t.co/jMHt1DiiCW

[Dave Vieira-Kurz @secalert]

When testing password fields, my preferred password is:
%01%E2%80%AEalert%0D%0A

Let's break it down:
%01 is SOH
%e2%80%ae is RTLO
%0d%0a is CRLF

Test cases on login:
1. can I log in only using %01?
2. without the CRLF in it?
3. is trela accepted instead of alert? (due to RTLO)

[Sahil Mehra 🇮🇳 @nullr3x]

@DattanaMayank @redbull @intigriti @sechunt3r Congo Jr. 🔥🔥

[Mayank Kamboj Dattana @Mayank_hacks]

Thanks @redbull for giving me wings 😈
#swag #bugbounty @intigriti

Special thanks to Big Bad Brothers
@nullr3x @sechunt3r

[Shivam @sechunt3r]

I'm glad that I've become a part of Synack Red Team @synack @SynackRedTeam

Thanks to my Big Brothers & Friends for always supporting me
@nullr3x @avanish46 @h4ckologic @parveen1015 @gauravnarwani97 @Assass1nmarcos @DattanaMayank

[Sahil Mehra 🇮🇳 @nullr3x]

@sechunt3r @synack @SynackRedTeam @avanish46 @h4ckologic @parveen1015 @gauravnarwani97 @Assass1nmarcos @DattanaMayank Congratulations bro 🔥❤️

[Harsh Bothra @harshbothra_]

Doing Recon the right way keeps you a step ahead always and gives you a better attack surface to work on! Here's a snippet from my Recent Talk on Scope Based Recon talking about What to look for during Recon Based on Given Scope.

#bugbountytips #appsec #bugbounty #security

[Shivam @sechunt3r]

P1 Warrior Level 3 @Bugcrowd
Thanks to Big Brother @nullr3x & Jr. @DattanaMayank
✌️😁✌️
#bugbounty #bughunter #bugcrowd #stickerpack

[Shivam @sechunt3r]

MVP Q3 2020 @Bugcrowd
Thanks to Big brother @nullr3x & Jr. @DattanaMayank
✌️😁✌️
#bugbounty #mvp #bughunter #bugcrowd