Abhinav Surya

bug bounty hunter, ethical hacker, Traveller. more to add...

[Abhinav Surya @RuttalaSurya]

@jagsme @intigriti Congratulations you find this in request parameters or url parameters

[Abhinav Surya @RuttalaSurya]

@only01Essential @immunefi Web2 or web3 bug

[Abhinav Surya @RuttalaSurya]

@ReebootToInit5 @aditiraaaj1 😅😅

[Abhinav Surya @RuttalaSurya]

@MrKaLi176442 Information disclosure in js files?

[Abhinav Surya @RuttalaSurya]

@rajeshsagar777 @yeswehack Congratulations 🎉

[Shahro K h @Sharo_k_h]

🚀 New Tool Alert!
Easily parse _buildManifest.js files from Next.js web apps 🔍

���� Try it online: https://t.co/BDxXRCFCn1
💻 Source code: https://t.co/Fxquc0zs6W

#BugBounty #JS #NextJS #WebSecurity

[Abhinav Surya @RuttalaSurya]

@ynsmroztas Thank you

[ryuku @malekmesdour]

When testing DOM XSS in redirection sinks, don't use javascript:alert(1) use javascript://target.com/%E2%80%A8alert(1) instead.

Many targets don't validate the URL scheme, but they do validate the host.

#bugbounty #bugbountytips #xss #bypass

[Abhinav Surya @RuttalaSurya]

@rahul0x01 @ChikuSoni17 Yeah I'm also building one it's taking time but I stopped in middle now I need to start again
Congratulations

[Abhinav Surya @RuttalaSurya]

@YoyoDavelion Did you exploited that key or just reported

[a7madn1 @a7mad__n1]

Simple testing on the login page can lead to easy $$$$ Try these default credentials. (I got 3,4 bounties)

email1:[email protected]
pass1: [email protected]
email2:[email protected]
pass2:[email protected]
email3:[email protected]
pass3:[email protected]

#bugbountytips #hacking #BugBounty

[Abhinav Surya @RuttalaSurya]

@xchopath Is my theory is correct let me know

[Abhinav Surya @RuttalaSurya]

@xchopath So as per this bug the application is not validating the intent before sending the broadcast reciever i.e the notification we receive that is related to that is it. So validations are missing that lead to account take over actually it should validate the account related intent

[Abhinav Surya @RuttalaSurya]

@zseano Congratulations 🎉

[Abhinav Surya @RuttalaSurya]

@_ArtSec_ @Hacker0x01 What was the bug

[Abhinav Surya @RuttalaSurya]

My current Monthly goals are 1 valid a bug reported 5 critical bugs , waiting them for the triage.
#BugBounty #Vulnerability #bugs

[Abhinav Surya @RuttalaSurya]

@_ArtSec_ Congratulations are you full time hunter

[$mit @Fabrikat0r]

🕵️‍♂️ Calling fellow Bug Bounty hunters who consume daily blogs, articles, talks, and research

There’s too much surface-level content out there -finding the meaningful gems is hard.

I’m starting a closed group (currently me & @4osp3l)

Retweet + comment “Interested” if you want in

[Abhinav Surya @RuttalaSurya]

@shivangmauryaa Does this target has WAF

[Abhinav Surya @RuttalaSurya]

@Sai_velde Congratulations