Mohsin Khan

26 | Bug Bounty Hunter @bugcrowd & Pentester at @inspectiv

[Mohsin Khan @tabaahi_]

Thank you @Bugcrowd @inspectiv @Hacker0x01 ❤️‍🔥

This video is for those who think their life can’t change from where they are.

[Mohsin Khan @tabaahi_]

So tired of reporting bugs! I’m exhausted.

[Marius du Preez @mdp_sec]

hunters who got paid this week 👇

[Mohsin Khan @tabaahi_]

@bug_vs_me @tabaahi_

[Mohsin Khan @tabaahi_]

Never let your January decide what your December will look like. You still have time to change your story.

[Mohsin Khan @tabaahi_]

237 Engagements scanning for P1's. 🤞

[Mohd Farhan Khan @mfrhnkhn]

There wasn't a single moment when my mind wasn't being blown by what he's built.

Multiple harnesses complementing each other. I can't say much more, but it's just so beautiful, complex, and CRAZY.

And the result speaks for itself.

[Mohsin Khan @tabaahi_]

1 Hour - Masterclass on How to Build a Great Hackbot — because bhai ne dahej mein fortune dene ka wada kiya hai... 😂

@mfrhnkhn

[Mohsin Khan @tabaahi_]

Best time to print money in bug bounty. If you aren't printing, trust me, you aren't doing the right things.

[Mohsin Khan @tabaahi_]

@WebSecAcademy @Bugcrowd OMG Thank you so much for this sir :)

[Mohsin Khan @tabaahi_]

I was awarded $8,150.00 Today on @Bugcrowd

Last Two Bounties

P1 - $3500
P1 - $1500
P3 - $500

[Web Security Academy @WebSecAcademy]

@tabaahi_ @Bugcrowd nice work

[Mohsin Khan @tabaahi_]

momo_bugcrowd one of the best triager. Thanks for 3x P1 triage🔥

[Mohsin Khan @tabaahi_]

@GodfatherOrwa @Bugcrowd Thanks brother :)

[Mohsin Khan @tabaahi_]

@HackmeRitik @Bugcrowd claude will help just give it a prompt it will make for you

[zonduu @zonduu1]

In October, I submitted 599 vulnerabilities to 134 programs on @Hacker0x01. #TogetherWeHitHarder https://t.co/JvJhDS8Qzn

[Mohsin Khan @tabaahi_]

$2650 Earned for 4 Submissions - Single Program.

[Mohsin Khan @tabaahi_]

Earned $750 and $900 for:

SQLi – P2
All-users ATO + privilege escalation to admin – P2

According to customer: Both were rated P2 because authentication was required. For the ATO, they also argued that I only demonstrated it on my own test account, not a real user's account.

[Mohsin Khan @tabaahi_]

@Itx_Shad0w I already sent them version, table name etc in report! Its ok i wont work on this target

[Mohsin Khan @tabaahi_]

Earned $750 and $900 for:

SQLi – P2
All-users ATO + privilege escalation to admin – P2

According to customer: Both were rated P2 because authentication was required. For the ATO, they also argued that I only demonstrated it on my own test account, not a real user's account.

[Shariq @sharqasticc]

"Why should we hire you?"

[Mohsin Khan @tabaahi_]

@ReebootToInit5 @Assass1nmarcos 12 bje raat me call krta hu 😅😂😂😂🤣🤣

[Mohsin Khan @tabaahi_]

Thanks to @Assass1nmarcos for the guidance on building a custom harness. Cheap models are performing significantly better now!