Tony

Bug bounty hunter

[Tony @tonyysec]

@BlueberryFunded Done @BlueberryFunded

[Tony @tonyysec]

@joeymoose @grok Yessir

[Tony @tonyysec]

@shodanhq @RemindMe_OfThis in 4 days

[xnwup @xnwup]

Today, Hackerone took $25k from me, because I am a belarusian citizen. 1/9

[Ynoof @YnoofAssiri]

Account takeover due to unicode normalization issue.

- Victim account: [email protected]
- Attacker account: ynoⓞ[email protected]

Due to no validation send to the email and some unicode issues , this leads to account takeover.
Thanks @HusseiN98D for the idea.
#bugbountytips

[Benchmarkkk @heybenchmarkkk]

Spent some time to hunt XSS but the application gave an error stating "The requested URL was rejected. Please contact with your administrator".
Almost gave up and then tried this payload and boom 💥, XSS popped up.
#bugbounty #bugbountytip #XSS #wafbypass #Cloudflare

[Omar Ωr Santos @santosomar]

Geowifi - Search WiFi Geolocation Data By BSSID And SSID On Different Public Databases https://t.co/4yjBduMaNP #cybersecurity #bugbountytips #hacking #tools

[Hossein NafisiAsl @MeAsHacker_HNA]

#Secret1
Top 10 Automatic Recon Tools

#Recon #BugBounty
#100BugBountySecrets
🧵👇

[Tony @tonyysec]

@NahamSec Good luck everyone 😃

[Tony @tonyysec]

@NahamSec @shodanhq ssl:"https://t.co/LkPY1LLJ1h" "Index of /" 200

:)

[Ben Sadeghipour @NahamSec]

Alright - Lots of you really wanted @shodanhq Subscriptions. Reply with your favorite shodan search query and I'll pick 5 winners to get a free Shodan voucher :).

[TheMayor - Joe Helle @joehelle]

It's time to look beyond Offensive Security in this industry. Training diversity matters when building diverse teams, and that applies to any field.

If you're a hiring manager, take note of some of these alternatives you may see on resumes and accept them. A thread 🧵

[Kathan Patel @KathanP19]

Here are my SAML Notes; I will be gradually updating HowToHunt; please enjoy. 😊

https://t.co/KBHlwQjLWN

#bugbounty #bugbountytips #cybersecurity