Amir

CS - Bughunter - Pentester 🇬🇧🇪🇸

[Amir @RfFadaei]

We are in a new era, from "can you solve this" to "can your hackbot solve this".

[Yasho @YShahinzadeh]

I created a challenge based on one of my Google bugs worth $12,000. It is an OAuth misconf. I will drop a writeup for it soon, before that, give it a try & practice, it doesn't matter if u r capable of solving it or not, just click and start poking 🙂

https://t.co/lAW53dVyk5

[James Kettle @albinowax]

CVSS' Attack Complexity metric is the bane of bug bounty hunters: "you tried really hard to find that bug, so we'll pay you less".

[NetworkChuck @NetworkChuck]

I kind of hate AI...and it almost made me quit youtube -----> https://t.co/MFdMwfY70l

[Amir @RfFadaei]

@Random_Robbie I don’t think so this is the full picture tho!
Do you need admin privilege to craft the exploit? Yes (PR:H) , no (PR:N)
Tricking the admin come under UI and AC, only if admin clicks the exploit will work then and organization has only few admins then (UI:R & AC:H)

[Amir @RfFadaei]

It took me a while but it was fun!
Great Challenge! @AmirMSafari

[AmirMohammad Safari @AmirMSafari]

Can you spot the XSS vulnerability? 👀
Test it out live at: https://t.co/vRpgo8PTBE

[Amir @RfFadaei]

@sabber_dev Tenía lo mismo problema pero antes de los IAs 💀. Te lo enseño, si quieres. No es tan difícil, te lo prometo 😁

[Amir @RfFadaei]

@j_zere 🔥🔥🔥

[𝕵𝖔𝖙𝖆 | jotita3 @sec_jota]

Spain is going through one of the biggest disasters in recent years.

Some Spanish bug hunters are coming together to create collaborative reports and donate the bounties. We need to stay united.

Anyone interested, please reach out to me! 🙏🏼

#dana #valencia #bugbounty

[Amir @RfFadaei]

@sec_jota Me encanta la idea, me avisa por fa 🙌

[Luke Stephens (hakluke) @hakluke]

Someone DMd me asking for bug bounty advice. They said they've only found 1 valid bug in 5 years.

I asked whether they have any other income sources.

They said "yes, I teach bug bounty hunting".

That, my friends, is the state of bug bounty education.

[Amir @RfFadaei]

@voorivex همه پروگرم های یس وی هک رنج دارن. یعنی یک مدیوم ۶/۹ با یک های ۷/۱ خیلی تفاوتی نداره تا با های ۸/۹. توی همه پروگرم هاشون هم همین شکلیه و کاملا مشخص تو پالیسی نوشته. معمولا بر اساس تجربه، یک کلیک اکانت تیک اور هارو روی ۷.۱ میبندن هر کاری بکنی متاسفانه :/

[Amir @RfFadaei]

@MiniMjStar Thank you 🙌

[Amir @RfFadaei]

Does any one know in which part of hackerone can I block a trigger from reading my reports? I saw the announcements of the feature but can’t seem to find it?

Seems like h1_analyst_layla is out to find us all and ruin our reports!
#bugbounty

[Amir @RfFadaei]

🚶‍♂️🚬

[Amir @RfFadaei]

🤝🔥🥷

[Amir @RfFadaei]

Spanish tourist just passing for WorldCup and getting arrested for two years

[Teegra 🧝‍♀️𝕏 @Teeegra]

دولت رئیسی در موضوع توریسم فهمیده که وضعیت خرابه و باید درها را باز گذاشت، حتی راه سفر برای پورن‌استارها برای تزریق و تفریح باز شده

تازگی‌ها هم دیدم آدم شدید در فرودگاه مزاحم مردم نمیشوید و سوال جواب نمیکنید که کجا بودی، جاسوس و مسافر الان همگی با هم رد میشه، خاک تو سرتون 😂

[Amir @RfFadaei]

#NightHunters