0x41

[MorningStar @0xMstar]

Bug bounty is boring

[zhero; @zhero___]

قَدْ أَفْلَحَ مَن تَزَكَّىٰ

[0x41 @sodxium]

@elmehdimee 👏👏👏👏

[El Mehdi @elmehdimee]

Found a page with an onmessage tracker that redirects users without scheme validation. It verified messages from a trusted iframe, but missing X-Frame-Options let me iframe the target page, swap the trusted iframe’s location inside it with mine, bypass validation, and achieve XSS

[H4x0r.DZ @h4x0r_dz]

URL validation bypass payload "http.\\https://t.co/meKR6sUgUV"
#bugbountytips

[0x41 @sodxium]

@zhero___ 👏👏👏👏

[zhero; @zhero___]

very pleased to announce the release of my new article based on my research that led to CVE-2024-46982 titled:

Next.js, cache, and chains: the stale elixir

https://t.co/UFndJxNYLI

note: does not cover the latest findings shared in my recent posts

enjoy reading;

[0x41 @sodxium]

@kobi_hk try with different browsers

[H4x0r.DZ @h4x0r_dz]

Use google dork "site:https://t.co/hv8LXswBsa"
you will find tons of exposed invitation links to workspaces.
you can join these workspaces even if the option "Require admin approval" is on.
because these leaked invites are made by the admins it Self

[0x41 @sodxium]

@zack0x01 👏👏👏👏

[0x41 @sodxium]

@elmehdimee @ArmanSameer95 @Bugcrowd 😂😂😂😂

[El Mehdi @elmehdimee]

I earned $65,000 with @ArmanSameer95 for my submission on @bugcrowd #ItTakesACrowd

[0x41 @sodxium]

@say_menn @minometidji bsa7tkoum 😂

[0x41 @sodxium]

@m0uka_Dz @h4x0r_dz @itsbendelladj @minometidji @say_menn 🫡🫡

[0x41 @sodxium]

@minometidji @Hacker0x01 Allah yberk well deserved 🥳🥳🥳

[eye 👁️ @minometidji]

Yay, I was awarded a $ 40,000 bounty +20,000 bonus on @Hacker0x01! https://t.co/ORNEq7VvZF #TogetherWeHitHarder

[0x41 @sodxium]

@minometidji @zhero___ Well done, nch allah fiha khir

[👑 Royal Intel @RoyalIntel_]

#BREAKING🚨

MASSIVE explosions in Tartus, Syria from Israeli airstrike.

Bruh, we’re getting nuked out here tf is that.

[0x41 @sodxium]

@zack0x01 @Hacker0x01 congratsss ! well deserved