Oki

OSCP | InfoSec Enthusiast

[Oki @oshackx]

https://t.co/pnkvgGeiun

[Oki @oshackx]

Protecting personnel from harm should always be the most important goal of any security.

[Oki @oshackx]

Lesson learned :
- If you want consistent income, bug bounty might not be the best fit (in my opinion).
- Don’t take it personally. Even if you’re sure your report has a security impact, the final decision is up to the program owner.
- Just submit it, move on, and forget it!

[Oki @oshackx]

Bug bounty is unpredictable.
Here’s my real story:

2023:
- Submitted the report
- Closed as “Informative”

2026:
- Reopened 🙂 (I almost forgot what the report even looked like)
- Triaged
- Received a bounty reward

[Oki @oshackx]

Thanks pak.. 👍🏻

[Oki @oshackx]

Dont let me in... 😁

[Oki @oshackx]

From rate-limit to ATO.

TLDR; Broken authentication - exploiting reset passwd endpoint.

Tips: Coloring your POC script to looks like 1337 hackrzzz and showing the greater impact for client. 😅😊

[Oki @oshackx]

I'm using projectdiscovery data to built bounty search target test with typesense.
Here are some of the things i'm interested in
- lightning fast
- search-as-you-type
- highlighting
- auto-correction
✌️

[Oki @oshackx]

who said "there is no free lunch"? i gave this critical bug for free.. 😉
Payload: '%20or%20sleep(10)%3d'

[Oki @oshackx]

No boring alert() anymore, just cat!

[Oki @oshackx]

2022 will end, and its still there.. 😅 Valid SQLi, and see so many interesting tables.. What will you do next..?

[Oki @oshackx]

- Directory bruteforcing
- Found .zip file, containing backup apps.
- Found credentials in config.php file.
- Try to login admin panel with it. Success! Apps compromised!
Escalating:
- Try to login creds for ssh also works! and it has root priv.
Game over!

[Oki @oshackx]

Bismillah,

Pentest story : How i fully compromise server with root access. Easy way!

TLDR; its like play vulnhub / CTF machine but in real world :)

[Oki @oshackx]

Adding cookie path restriction.

[Oki @oshackx]

Bismillah.. Extracting some informations from Web Application Hacker Handbook, Chapter 7 - Attacking Session Management. I hope this is useful

[Oki @oshackx]

Easy ATO!

[bugcrowd @Bugcrowd]

My mom when I told her to chews a secure password... #ItTakesACrowd