vampire01

Bug Bounty Hunter

[vampire01 @vampire01_]

Thank you @intigriti for choosing me as the 2024 Champion!

I know it’s been a while, but I’m finally posting this :D

[vampire01 @vampire01_]

1000 Valid Submissions! 🎉

Thank you @intigriti for the recognition and the gift.

[vampire01 @vampire01_]

@ironCardSec That's a broad question. There isn't a specific timeframe because each target varies — it can range from minutes to days.

[vampire01 @vampire01_]

Tip:
Always double-check fixed vulnerabilities and try to bypass them. Sometimes you get interesting results.

Happy Hunting⚡️

#bugbountytips #bugbounty

[vampire01 @vampire01_]

Tip: Open Redirect ⚠️
- Use invalid URL-encoded bytes (%96 , %97) to bypass validation; they decode to (?)

evil[.]com?@ target[.]com ❌

evil[.]com%97@target[.]com ✅

#bugbountytips #bugbounty

[vampire01 @vampire01_]

1/2
Has the old login page been removed?

No worries, go a step further and try the login form endpoint:
https://t.co/0VTnYBwQRf => 404 => copy/send the login form from https://t.co/BFHvqZZGBf => https://t.co/jBk1kBaPse => 200

[vampire01 @vampire01_]

Pro tip: 2FA Bypass 🔥
1/1
- Look for old login pages in https://t.co/47K6QCeQMS , Sometimes they are not protected.
- This can also lead to finding some XSS, Open Redirects.
#bugbountytips #bugbounty

[vampire01 @vampire01_]

Hello World.
@intigriti