𝙆𝙍𝘼𝙆𝙀𝙉⚡️

Bug hunter • Security researcher • Pentester • BSCP • eWPTXv2 • eJPT

[𝙆𝙍𝘼𝙆𝙀𝙉⚡️ @Rootxkraken17]

Happy to secure.

Bug : HTTP Parameter Pollution

#cybersecurity #bugbounty

[𝙆𝙍𝘼𝙆𝙀𝙉⚡️ @Rootxkraken17]

@ott3rly Its blocking anything while testing?

[𝙆𝙍𝘼𝙆𝙀𝙉⚡️ @Rootxkraken17]

@bug_vs_me @zomato Congratulations 🔥🎉

[𝙆𝙍𝘼𝙆𝙀𝙉⚡️ @Rootxkraken17]

@WebSecAcademy Would love go get them!
These looks dope :)

[𝙆𝙍𝘼𝙆𝙀𝙉⚡️ @Rootxkraken17]

@tabaahi_ @nnwakelam Bro long time no see, how are u doing

[JS0N Haddix @Jhaddix]

Want to learn AI / LLM Security Assessment? Don't have the money for a training?

Here are 🎯SEVENTY ONE🎯 FREE LLM security labs that we have curated for you!

Like and share! (Link Below)

<3 from @arcanuminfosec

[ArtSec @_ArtSec_]

Finally got to post some writeups. Here is a $3,000 super admin IDOR and a $500 admin panel self signup.

https://t.co/N4n9kWKXO5

[𝙆𝙍𝘼𝙆𝙀𝙉⚡️ @Rootxkraken17]

@RootxRavi @Bugcrowd Congrats bhai🔥

[𝙆𝙍𝘼𝙆𝙀𝙉⚡️ @Rootxkraken17]

@A0xTrojan @Hacker0x01 @Bugcrowd @NASA strings.xml?

[𝙆𝙍𝘼𝙆𝙀𝙉⚡️ @Rootxkraken17]

@Athul_m_s Congrats for the find man!
so you found one endpoint on default IIS page where on the POST request you got SQLi right?

[termireum @termireum]

From 403 Forbidden to a €1,500 Bounty
https://t.co/uwD4qPcxM4

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

https://t.co/KsbArbQgRt

[Avi @_naaash_]

Found a 1-click account takeover via postMessage. No phishing, no fake login page, just one click and a full-access token.

Wrote up the full breakdown and also gave the whole site a little revamp while I was at it.

https://t.co/piH3rZg9LN

[𝙆𝙍𝘼𝙆𝙀𝙉⚡️ @Rootxkraken17]

@BugBountyDEFCON @chain_Zangetsu @Kevin_George101 @AnonY0gi
Hoping for the best!🤞

[Bug Bounty Village @BugBountyDEFCON]

IT'S GIVEAWAY SEASON!

We will pick 6 winners to win one of the following:

1x Annual VIP Hack The Box Licence
5x Pentesterlab 3 Month Licences

To enter:
1️⃣ Follow us @BugBountyDefcon
2️⃣ Like this post ❤️
3️⃣ Tag 3 hacker friends in the comments
4️⃣ Retweet this post 🔁

Giveaway open until Thursday May 14th!

GOOD LUCK!

[Altered Security @AlteredSecurity]

Congratulations to @Rootxkraken17 for clearing our Certified by Altered Security Red Team Professional for Azure exam!
#CARTP #AlteredSecurity cc @nikhil_mitt
https://t.co/Afk4v094hg

[𝙆𝙍𝘼𝙆𝙀𝙉⚡️ @Rootxkraken17]

@niraj1mahajan @secbughunter @msftsecresponse Congratulations Bhau!

[Griffin @aussinfosec]

I have been doing bug bounty since 2011 and ran a program for a multinational bank. Put everything I've learned into https://t.co/78z1JfSzmr. Target selection, recon pipelines, chain patterns, report templates, the business side. Free, no paywall, no course upsell.

[𝙆𝙍𝘼𝙆𝙀𝙉⚡️ @Rootxkraken17]

@0xsnpaii Nice catch man!

[San @0xsnpaii]

https://t.co/KXMT0sFKbq