Root Vuln

•Cyber security student
•Bug bounty hunter part time

[Root Vuln @rootvuln]

@nhyy_SA @oxxxssh Okay bro .

[Root Vuln @rootvuln]

Testing an API parameter for SQLi and got some interesting results--time-based delays scaling with injected sleep values, plus a boolean true/false differential in the response.Not 100% sure this confirms SQLi or if there's another explanation. Thoughts? Screenshots below 🧵
#bug

[Root Vuln @rootvuln]

@nhyy_SA @oxxxssh For 15 sec I got the response in 30 sec

[Root Vuln @rootvuln]

@nhyy_SA @oxxxssh With a 25-second payload, I'm getting 504 Gateway Timeout

[Root Vuln @rootvuln]

@nhyy_SA @oxxxssh Exactly but is it enough or not ?

[Root Vuln @rootvuln]

@SaiKira44050513 No cache oracle was available, so I couldn't verify whether it was a cache HIT or MISS.

[Root Vuln @rootvuln]

Small win from today's bug hunting session ✨.

Found a Host Header Injection where the application trusts the X-Forwarded-Host header and reflects it in the Location response header.
I wasn't able to escalate it beyond a redirect
#AppSec #WebSecurity #Pentesting #bugbounty #bug

[Root Vuln @rootvuln]

@NetNinja_Vee I usually share what I learn, so hopefully my posts help and Feel free to ask questions!

[Root Vuln @rootvuln]

@cyberritzzz Only the job endpoint is affected.

[Root Vuln @rootvuln]

@noshitpwn Yep . It only trusts the header on the job endpoint

[Root Vuln @rootvuln]

@Mhiztabjay Thanks bro !

[Root Vuln @rootvuln]

Found my first Reflected XSS today 🎯

It blocked all the generic tags like <script>, <svg>, <img> — so I tried onmouseover instead and it worked 😄

Reported responsibly, fix pending.

#XSS #bugbounty #infosec

[Root Vuln @rootvuln]

@PhineasX Thanks bro !

[Root Vuln @rootvuln]

@secsystemd Thanks bro!

[Root Vuln @rootvuln]

@mhdagusprbdi I'll definitely share a write-up once the issue is resolved. 😊

[Root Vuln @rootvuln]

Found my first Reflected XSS today 🎯

It blocked all the generic tags like <script>, <svg>, <img> — so I tried onmouseover instead and it worked 😄

Reported responsibly, fix pending.

#XSS #bugbounty #infosec

[Root Vuln @rootvuln]

If you're learning bug bounty, don’t miss this write-up on HubSpot Full Account Takeover.
Shows how deep testing of auth flows can lead to critical findings.
Great learning resource 👇
https://t.co/XF8ZlpQvUd

[Root Vuln @rootvuln]

@4osp3l @yeswehack I’d love to learn this — could you please share how to do it?

[Root Vuln @rootvuln]

@zack0x01 Manual and Tools-Based Bug Bounty Methodology .

[Root Vuln @rootvuln]

@abhitwt Temp mail