Mahmoud Omar

Hacker

[Mahmoud Omar @nullthrix]

lots of people asked me for my recon methodology

HYG:
https://t.co/KtYEXs0iJk

soon will publish my full WAP methodology...
#BugBounty #hacking #security #hackerone #bugcrowd #integrity #yeswehack

[Mahmoud Omar @nullthrix]

updated file:

https://t.co/xSsIR0A5gH

[Mahmoud Omar @nullthrix]

lots of people asked me for my recon methodology

HYG:
https://t.co/KtYEXs0iJk

soon will publish my full WAP methodology...
#BugBounty #hacking #security #hackerone #bugcrowd #integrity #yeswehack

[Mahmoud Omar @nullthrix]

Would have been a nice RCE 🙂‍↕️

[Mahmoud Omar @nullthrix]

Well, if was only 7 hours earlier 😭❤️🙏

[Mahmoud Omar @nullthrix]

@destro4evr Half an hour 😂

[Mahmoud Omar @nullthrix]

polishing off my recon methodology.... https://t.co/xSsIR0A5gH

#BugBounty #hacking #security #hackerone #bugcrowd #integrity #yeswehack #methodology #cybersecurity

[Mahmoud Omar @nullthrix]

@IchCakes @GodfatherOrwa مبسوط اني مش الوحيد اللي بيستخدم cherrytree 😂

[Mahmoud Omar @nullthrix]

@fattselimi @grok I know, just missing with you XD

[Mahmoud Omar @nullthrix]

@fattselimi @grok Did he use grock type of agent ir what subscription? @grok

[Mahmoud Omar @nullthrix]

@lightx0yagumi عادي للاسف مرة ردو عليا بعدها ب ٦ شهور و الباونتي شهرين بعدها

[Mahmoud Omar @nullthrix]

@NahamSec Comoooooon ♥️🎉

[Ben Sadeghipour @NahamSec]

Let’s go 🇪🇬

[Mahmoud Omar @nullthrix]

@m19o__ @grok Is this true @grok

[Mahmoud Omar @nullthrix]

@m19o__ @grok 😭

[Mahmoud Omar @nullthrix]

@m19o__ Is this true? @grok

[Mahmoud Omar @nullthrix]

lots of people asked me for my recon methodology

HYG:
https://t.co/KtYEXs0iJk

soon will publish my full WAP methodology...
#BugBounty #hacking #security #hackerone #bugcrowd #integrity #yeswehack

[Mahmoud Omar @nullthrix]

Not reinventing the wheel — but something more practical than generic lists.

focused on:-
• OAuth
• MFA/OTP bypass
• ATO chains
• IDOR
• session/auth flaws
• real implementation mistakes

https://t.co/yhLICB9G0e

#BugBounty #AppSec #hacking #CyberSecurity #KnowledgeIsFree

[Mahmoud Omar @nullthrix]

@inspector_amb That's huge.. congrats!

[Mahmoud Omar @nullthrix]

Just found this in my archive 🙂‍↕️
Good old days. It was domain take over on a VDP program, but felt good as first crit

[Mahmoud Omar @nullthrix]

@krishnsec @yeswehack Who is supposed to act and defend hacker's rights here?
Or is it a one way entitlement for companies only?
One might think to dump all DB and then report sqli lol

[Mahmoud Omar @nullthrix]

@hakluke Vibe coding is stirring the way to bug hunters advantage, as developers are getting lazier and less OG