scarx01

[scarx01 @scar7c]

Just got a reward for a critical vulnerability submitted on @yeswehack -- Cross-site Scripting (XSS) - Stored (CWE-79). #YesWeRHackers

[scarx01 @scar7c]

@AnshhBohara Manual or Ai?

[scarx01 @scar7c]

@Wadera52 @intigriti idor

[scarx01 @scar7c]

Just scored a reward @intigriti https://t.co/hhkqsrQ4Jf #HackWithIntigriti

[scarx01 @scar7c]

@FroztNova127 Do you usually focus on one program at a time, or do you hunt on multiple programs at the same time?

[scarx01 @scar7c]

@Mhiztabjay ssrf one

[scarx01 @scar7c]

@N_ambush 🙏🙏

[scarx01 @scar7c]

@luckyhacker43 How much time did they took to respond?

[scarx01 @scar7c]

@BankyT3ch @intigriti thank you brother

[scarx01 @scar7c]

Found a 2FA bypass, but it was out of scope since the SaaS provider doesn't control auth. Still, they were nice enough to award a €150 bonus on @intigriti . 🙌

[scarx01 @scar7c]

@0xCazurii it's zoho bug bounty

[scarx01 @scar7c]

Found a BAC allowing low-priv user to impersonate admin + cross-org impact.
#bugbounty

[scarx01 @scar7c]

@silenz404 it's zoho bug bounty

[scarx01 @scar7c]

@08xDof20784 @intigriti what does pending mean is it valid? 🤔

[scarx01 @scar7c]

@akbar_omim do u prefer mac over windows for bug bounty? 🤔

[scarx01 @scar7c]

@intigriti I’ll wait for them to check it from their side. Thank you 🙏

[scarx01 @scar7c]

First accepted report on @intigriti ! 🙌
Really appreciate the quick triage, fast resolution, and payout.

[scarx01 @scar7c]

@intigriti Thanks for the response! I already cross-checked my payout/bank details and they appear to be correct, but I’m still getting the withdrawal error. Also, there doesn’t seem to be an option to retry/re-withdraw it looks stuck in the error state.

[scarx01 @scar7c]

@aman46836 @intigriti I found the same issue described in this write-up: https://t.co/0QImdOUabl

[scarx01 @scar7c]

@Mirainull @intigriti thank you brother

[scarx01 @scar7c]

@Manozchy514 congrats brother 🙌