Achuth V P

Security @ZeptoNow, Google HoF

[Achuth V P @retrymp3]

Finally wrote a proper write up on my stored XSS on Mozilla. Check it out -
https://t.co/iuMPTrwIEt

#bugbounty #codereview #security

[Achuth V P @retrymp3]

@liftplaycode Damn

[Achuth V P @retrymp3]

@liftplaycode The other one you posted, is that available?

[Achuth V P @retrymp3]

@S1r1u5_ $5 you can’t do 3000 sit-ups in one stretch.

[Vikas Wakde @VikasWakde42]

All thanks to @reliancejio for AirFiber

Now I can get access to truly unlimited knowledge at such an affordable price,

Also I became first person in my remote village to have this installed,

I always ran out of data for my remote college, internship and personal projects

[Achuth V P @retrymp3]

Got added to @GoogleVRP’s Hall Of Fame and Honourable mentions list.

#3rd in the Honourable mentions list in India :)

[Achuth V P @retrymp3]

One of my biggest goals since I started in this field was to do something like this.

And after months of recon and hardwork, I finally got it.

And happy to say that my first ever bounty is from @Google :)

Thanks to @GoogleVRP for the very smooth coordination.

[Achuth V P @retrymp3]

High hopes for this one😭💯
@GoogleVRP

[Achuth V P @retrymp3]

Self XSS -> Cloudflare WAF bypass -> unauthenticated reflected XSS.

Payload: <img hrEF="0" sRC="data:0," oNLy=1 oNErrOR​=console.log`1`>

[Achuth V P @retrymp3]

Rust is pretty cool👌.
Published my first crate in https://t.co/Ie94cl0ULB
It’s a simplified version of grep.

Install it with ‘cargo install accio-string’

[RyotaK @ryotkak]

I recently developed and posted about a technique called "First sequence sync", expanding @albinowax's single packet attack.

This technique allowed me to send 10,000 requests in 166ms, which breaks the packet size limitation of the single packet attack.

https://t.co/puM7hZWIlE

[Achuth V P @retrymp3]

@YadhuKrishna_ Congratulations 🥳

[Achuth V P @retrymp3]

Passed eJPT!🥳🥳 https://t.co/d1k2SQSmig via @ine

#eJPT

[Achuth V P @retrymp3]

💀

[Achuth V P @retrymp3]

Submitted an input sanitation vulnerability to @GoogleCloudTech and it got validated 🥳.

[ippsec @ippsec]

One old motto I've thought a lot about recently is "Practice doesn't make perfect, perfect practice makes perfect".

When pursuing a career in video games, I thought about this a lot as if you just grind out games for 12 hours per day. You likely will hit a wall that would quickly be torn down if you just broke the problem apart and "trained". In games, this could mean watching replays to see what you could do better or hyper-focusing on one aspect of the game and accepting you'll lose games in the immediate future but when you play normally you will have become better.

I think this translates a lot into what you see in my videos. I've said it before, but when I started HackTheBox in 2017, I cheated the invite code system to be able to play. I wasn't anywhere near what you see today. One of the main reasons I succeeded is because my videos forced me to.

I often say videos peer pressured me into sticking with HackTheBox. However, they also forced me to reflect on every single machine I was solving. After I did something, I normally spent an equal amount of time (or more) thinking about how to explain it. Which I think was key in "mastering" the material and appearing as this expert whom has done pentesting for countless years.

Even the machines I did not like, I couldn't just trash it. I had to spend time finding aspects I did like, so I could talk about that. The hunting positivity, instead of just saying it was trash I regret doing that, did wonders for keeping me sane and motivated.

Well that was a wall of text. Hope ya'll have a good rest of the week, thanks for reading.

[Achuth V P @retrymp3]

I just completed @Pentesterlab's White Badge!!!

[DreyAnd @dreyand_]

Wrote a little golang utility tonight that can help you figure out who you got a duplicate from on #HackerOne

Special thanks to @0xDexter0us who figured out about this trick in the first place.

Check it out!
https://t.co/aaIyRSxFcR