@GodfatherOrwa Which one is your exactly mean?
GET /attacker.com
Or
GET /https://t.co/I60D0Q74MK
My idea is your meaning is the first one because the second has forward slash which lead to path of main target
@YShahinzadeh I found some routes which need a session but nothing special found till yet .
I think I have to give up after several days of working on it. Your challenge blowed my mind
I created a challenge based on one of my Google bugs worth $12,000. It is an OAuth misconf. I will drop a writeup for it soon, before that, give it a try & practice, it doesn't matter if u r capable of solving it or not, just click and start poking 🙂
https://t.co/lAW53dVyk5
@ctbbpodcast The Big question is what happened to h1 team that they start ban hackers from there platform with no reason. If there is reason so it would acceptable somehow but when ticket said: no further information and steal the bounty of hackers there is no excuses .
@m7arm4n_ قرار نیست حتما چیزی به این کامیونتی اضافه شه حتما که !
همین که ببینی طرف باگی زده از یه سری کمپانی میشه به عنوان انگیزه برای کار کردن ازش استفاده کرد حداقل ب��ای من اینطوریه
@SecWithMoh سینا یگانه و امیر محمد وکیلی نی�� جزو فول تایم باگ هانتر ها هستن که واقعا هم موفق هستن توی کارشون
و واقعا نمیدونم این حرفای شما ناشی از چیه