Vikaran101

17 | Nocturnal | Infosec Enthusiast | Wannabe Kickboxer

[Vikaran101 @vikaran101]

This one was painful, submitted 16 bugs but 15 were duplicates.
Finally found this SQLi and @Cambridge_Uni awarded me with this! #infosec #bugbounty #hacking (1/2)

Thank you: @DebshubraC @HackerGautam @IamRenganathan @remonsec @ADITYASHENDE17 @GodfatherOrwa @ss0x00 @Hac10101

[Aman Mahendra @amanmahendra_]

“Uber closed your report #123456 Social engineering in uber./com as N/A. Want to improve your reporting and hacking skills? Download your free copy of the book Web Hacking 101”
🤣
Attacker: okay here is the POC 🤣
#uber #uberhack #infosec #hackerone

[Boschko @olivier_boschko]

In light of recent & unfortunate events

[Vikaran101 @vikaran101]

@IamRenganathan @gowtham_ponnana @LexiLominite Who he though? Why no mention him?

[Renganathan @IamRenganathan]

We shared the vibe ❤️🔥

From left: @vikaran101, @gowtham_ponnana, @LexiLominite, Me :)

#NullconGoa2022

[Prashant Bhattarai @g0ndaAr]

And its a wrap. Met amazing people at Nullcon GOA. Thank you so much for everything.

#NullconGoa2022 #Nullcon #hacking #infosec

@dhakal__bibek @IamRenganathan @gowtham_ponnana @dhakal_ananda @anangsha_ @vikaran101 @LexiLominite @bishal0x01

[Gowtham Naidu Ponnana🇮🇳 @gowtham_ponnana]

Last Pic at #Nullcon @nullcon
@vikaran101 @dhakal__bibek @gowtham_ponnana @g0ndaAr @dhakal_ananda @PrashanthBodepu @IamRenganathan @LexiLominite We really had the fun and people are so lovely❣️...🇳🇵🇮🇳

[Vikaran101 @vikaran101]

Will be attending Nullcon tomorrow, ping if you want to meet. #infosec #NullconGoa2022

[KJS DHILLON🇮🇳 @TinyDhillon]

KARGIL VIJAY DIVAS

Salute the grit, determination & steely nerves of the Soldiers of Indian Army @adgpi

With Prayers on Lips & Pride in Hearts, Remember the Bravehearts Who Made the Supreme Sacrifice

Jai Hind 🇮🇳

[Louis Nyffenegger @snyff]

People drop 0dayz every day.

What they don’t know is how to responsibly disclose them...

Here are 13 ways to responsibly disclose your 0dayz you won’t be able to live without 👇

[Vikaran101 @vikaran101]

@scoutpankaj @ZydTech @nokia 😭

[Vikaran101 @vikaran101]

@AkashHamal0x01 @nokia Would’ve worked for a multi line comment but in this case going to the next like was the only way to breakout of the comment.

[Vikaran101 @vikaran101]

@gowtham_ponnana @IamRenganathan @nokia 😂

[Vikaran101 @vikaran101]

@IamRenganathan @nokia November last year

[Vikaran101 @vikaran101]

@mukund_natvar @IncomeTaxIndia No way for me to find out on this domain as I do not have an employee account to test on. Atleast in all the domains of the Indian gov I’ve seen, HttpOnly is false. Even if it was enabled, it wouldn’t be able to completely mitigate XSS.

[Vikaran101 @vikaran101]

XSS in @IncomeTaxIndia

Payload: lookhere');});</script><img src=x onerror=alert('XSS')>

1)the keyword “lookhere” was used to detect all the places the input was reflected
2)The rest is responsible for balancing the payload

#infosec #bugbountytips #xss

[Vikaran101 @vikaran101]

@BountyOverflow @IncomeTaxIndia Yes, patched within 2 days of reporting

[Vikaran101 @vikaran101]

Just #networking things with @gowtham_ponnana. High time I give CCNA! #infosec

[Vikaran101 @vikaran101]

@rajshamani Cyber Security

[Vikaran101 @vikaran101]

@pranav__9 @IncomeTaxIndia First thing I did

[Vikaran101 @vikaran101]

@mkgsonu1987 @IncomeTaxIndia Govt doesn’t pay