Ojas Bisariya

24 y/o | InfoSec | Security Analyst | Bug Hunter at @bugcrowd & @hackerone

[Ojas Bisariya @ojasbisariya]

@udit_thakkur @Bugcrowd @Kritikasingh06 Congratulations bro🎉
Well deserved 👍

[Ojas Bisariya @ojasbisariya]

@udit_thakkur Dope🔥🔥

[Ojas Bisariya @ojasbisariya]

@intigriti @securinti @StijnJans Cert

[Ojas Bisariya @ojasbisariya]

Found an RCE on an external program.
Reported them the issue via mail with PGP encryption.
It's been a month since, but never heard back from them.

It seems like they weren't able to decrypt the mail 😛.

#PrettyGoodPrivacy #infosec

[Ojas Bisariya @ojasbisariya]

Check this out!!!

[Udit Bhadauria @udit_thakkur]

Easiest BAC:

1. gau https://t.co/6967VDPSFo
2. Got a URI having path /admino/confidential/billingID=[num]
3. Open the Link & Invoice got downloaded.
4. Changed the value of param ID & got thousands of invoices having PII data.

#hackcura #infosec #bugbounty #hacking

[Ojas Bisariya @ojasbisariya]

Who does not love private invites?
Follow the Steps to avail one:
1. Go to https://t.co/NI0YRL1xrn
2. Click on Submit Flag
3. Copy and Paste the following and hit submit.

flag{EnjoyTheFreeInvite}

Kudos🎉
Thanks to @Hacker0x01

#infosec #bugbountytip #TogetherWeHitHarder

[Ojas Bisariya @ojasbisariya]

@KrishnanAbhiraj @Bugcrowd @udit_thakkur Thanks bruh😀

[Ojas Bisariya @ojasbisariya]

Finally gained some Hall of Fames on @Bugcrowd 🎉

Thanks @udit_thakkur for the guidance.

#bugcrowd #HallOfFame #infosec

[Ojas Bisariya @ojasbisariya]

@iamrobot321 Sure!!!

[Ojas Bisariya @ojasbisariya]

@udit_thakkur @Bugcrowd Thanks bro... ✌️

[Ojas Bisariya @ojasbisariya]

@0ktavandi @Bugcrowd @udit_thakkur It's westjet

[Akhil Renikunta @akhilreni_hs]

Also I encourage all Indian security researchers to report bugs directly to @Arogyasetu

It's for a good cause and we are all in this together.

[Ojas Bisariya @ojasbisariya]

@blaisemcrowly @akhilreni_hs @fs0c131y @prateek_0490 The news channels are already reporting the number of people infected in CRPF and army headquarters. Didn't felt like any vulnerability.

[Ojas Bisariya @ojasbisariya]

@fs0c131y @SetuAarogya You are mentioning the features of the app. This is what the app do. It gives you the information about the cases in your area.
Even a noob will mark this bug as Won't fix😬.

[Ojas Bisariya @ojasbisariya]

@trippy_bhaiya @lakshmi_tanwar1 @fs0c131y @SetuAarogya Sach me bhaii😂

[Ojas Bisariya @ojasbisariya]

@BovadaOfficial @AmericanMensa @elonmusk 136

[Ojas Bisariya @ojasbisariya]

@TomNomNom The talk was Awesome. Demoo timeeee :)

[Ojas Bisariya @ojasbisariya]

@udit_thakkur @Bugcrowd @PentesterLab Congrats broo..

[Ojas Bisariya @ojasbisariya]

@Bugcrowd @PentesterLab @udit_thakkur Introduced me to the world of hacking and bug bounty. Learned most of the things from him. Glad to have him as a friend✌️

[Laurie Mercer @NoMeNoMy]

Good vibrations from @nullcon. Too many people to mention. The energy and enthusiasm in this community is our strength! #togetherwehitharder #hackforgood