Syed Mushfik Hasan Tahsin

Cyber Security Enthusiast | Learner | Free Time Bug Bounty Hunter | Ambitious | eWPTX, CRTO, ASCP | 21 Y/O | @bbcbd_official🇧🇩

[Syed Mushfik Hasan Tahsin @SMHTahsin33]

Hello,
If you are just getting started into bug bounties and can't find enough resources, this thread might help you to find a way 👇

[Gareth Heyes \u2028 @garethheyes]

You may have noticed I've been a bit quiet on social media recently, this is why...I'm going to present at @BlackHatEvents #BHUSA

[Orange Tsai 🍊 @orange_8361]

And this one is human insight w/ LLM-assisted research. Took about one week to finish everything. The AI really rescued me from a lot of tedious work

— excluding the part where it changed the Domain Admin password, locked me out, and claimed it got RCE 🤦

[Syed Mushfik Hasan Tahsin @SMHTahsin33]

@nowaskyjr Nice, onstalled can also be called with incomplete domain in video src like, <video src=https://a onstalled=alert()> :p

https://t.co/bvAV8zx3V4

[zseano @zseano]

i'm taking a pause from hacking to resume building https://t.co/H7tDJivomZ. i regret closing it down and I shouldn't of done it. everything will be back online EXACTLY as it was very soon and i've got some big plans for the future. and yes, that includes zseano methodology v2 ;)

[Syed Mushfik Hasan Tahsin @SMHTahsin33]

Alhamdulillah, I am Proud to share that I’ve officially achieved the Certified Red Team Operator (CRTO) certification by @_ZeroPointSec 🔥

[Syed Mushfik Hasan Tahsin @SMHTahsin33]

@hetmehtaa Just a custom activity, nothing else

[Syed Mushfik Hasan Tahsin @SMHTahsin33]

Alhamdulillah, Done & Dusted! I have successfully completed all of the three @apisecu Certifications - API Security Certified Professional (ASCP), APISEC Certified Practitioner (ACP) & Certified API Security Analyst (CASA) ⚡

[Syed Mushfik Hasan Tahsin @SMHTahsin33]

Thank you @Hacker0x01 🙌

[Bug Bounty Community Bangladesh @bbcbd_official]

The Official AfterMovie for @Hacker0x01 BUG HUNT 2026 is out! Watch and let us know how was it! 🧑‍💻
#hackerone #bughunt2026 #thehuntison #bbcbd

[Bug Bounty Community Bangladesh @bbcbd_official]

Let's welcome Mohammad Abdullah (@m_abdul1ah) as our Guest Speaker for HackerOne BUG HUNT 2026 🛠️

🎤 Talk: "Security at the Edge: A High-Level Perspective on IoT and Hardware Security"
------------------------

[Bug Bounty Community Bangladesh @bbcbd_official]

Let's Welcome Syed Faraz Abrar (@farazsth98) as our Guest Speaker for HackerOne BUG HUNT 2026 👑

🎤 Talk: "From Zero to 0-day - Linux Kernel Edition"

[Web Security Academy @WebSecAcademy]

Sometimes I feel bad for Carlos.

[Bug Bounty Community Bangladesh @bbcbd_official]

We’re thrilled to announce our club partners for the @Hacker0x01 BUG HUNT 2026 🇧🇩🔥

Together, we’re building the next generation of ethical hackers. Stronger, Smarter, and United. ⚔️🔐

#HackerOne #BBCBD #BugHunt2026 #TheHuntIsOn

[Intigriti @intigriti]

Just getting started with bug bounty? Learn 4 vulnerability types in 400 seconds! 🤠

A thread! 🧵 👇

[Web Security Academy @WebSecAcademy]

The Ultimate XSS Cheat Sheet!

This XSS cheat-sheet lists vectors (filterable by event, tag, or browser) that can bypass WAFs and filters!

Each entry even includes a proof-of-concept.

Bookmark this 👉 https://t.co/S8U29jUFP8

[Bug Bounty Community Bangladesh @bbcbd_official]

🚨 Registration Open – @Hacker0x01 Bug Hunt 2026 (Qualifiers Round) 🇧🇩

The wait is over! Registration for the HackerOne Bug Hunt 2026 – Qualifiers Round is now live and will remain open till 25th October.

🔗 Register here: https://t.co/TfXnHe5HYa

#HackerOne #BugHunt2026

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

Exploiting an IMPOSSIBLE Cache Deception with CSPT

[Mustafa Can İPEKÇİ @mcipekci]

https://t.co/8ViXJLjgiV

[blasty @bl4sty]

the jump scare of the morning award goes to @J0R1AN (it even adapts to different native calculators using UA-based OS detection :))

[Syed Mushfik Hasan Tahsin @SMHTahsin33]

@BuildHackSecure James Cuddle