Vishaal Kumar Anandan

Chess player

[Vishaal Kumar Anandan @Vishaal__Kumar]

@nitesh_singh5 Interested

[Vishaal Kumar Anandan @Vishaal__Kumar]

@Akshtjain You have enough bank roll to play poker. You can earn lot more

[Vishaal Kumar Anandan @Vishaal__Kumar]

@SuiInsiders Do you guys hire from India

[Arshad Kazmi @arshadkazmi42]

Two bounties on @intigriti. $3000 + $100

Both bypasses of previously resolved reports

1 year ago: ChatGPT + a lot of manual work to find one of these
Today: gave the old reports to Claude Code, it confirmed the fixes and found bypasses for both. Fully automated

Workflow has changed completely

Old writeup: https://t.co/IpJMqhxlLY
Old tweet: https://t.co/H9IjYOzNAW

[Arour_mohamed @Arourmohamed01]

This extension got me bounty don't forget to install it
#bugbounty #hack #security

[Vishaal Kumar Anandan @Vishaal__Kumar]

@shazcodes Guys if you feel smart. Good at reading people and good at maths and you are working in IT without interest. Then leave IT and start playing poker. I earn 2L minimum per month using 5k to 10k

[Vishaal Kumar Anandan @Vishaal__Kumar]

@everymovieplug Sense 8

[Vishaal Kumar Anandan @Vishaal__Kumar]

@Ayushi_sharma02 Interested

[Vishaal Kumar Anandan @Vishaal__Kumar]

@Jihooncrypto I am interested but I am in India. Is that fine??

[Vishaal Kumar Anandan @Vishaal__Kumar]

@nitesh_singh5 Interested

[Vishaal Kumar Anandan @Vishaal__Kumar]

@Bigdaddyvinz_ I don't think Joffrey is ever gonna wear that suit no matter what the scenario is

[Patrickbatman @hamidonsolo]

day 2: how to hit bounty quick $1,500.
Tip for bug bounty hunters: every AI chatbot on a website is an attack surface now.
I asked a company's AI support bot to "help me understand this error."
The error was a base64-encoded XSS payload.
The bot decoded it. Rendered it in the DOM. Zero sanitization.
That gave me JavaScript execution on their site.
From there:
→ Cookie downgrade via OAuth flow
→ Stole authentication tokens
→ Full account takeover
I reported it. 4 months of silence.
Then they quietly patched it and told me they "couldn't reproduce it."
So I sent video proof. Timestamps. Working PoC. Everything documented.
$500 → $1,500.
Every company is rushing to ship AI features. Nobody is auditing the output. If it renders in the DOM, it's probably vulnerable.
Go test them. Free XSS everywhere.
And if they try to lowball you — push back. Always push back.
Full YouTube lab breaking down the entire chain if this hits 2,000 ❤️

[Vishaal Kumar Anandan @Vishaal__Kumar]

@nitesh_singh5 Yes

[Vishaal Kumar Anandan @Vishaal__Kumar]

@SolomonOkah0 Me

[Vishaal Kumar Anandan @Vishaal__Kumar]

@JobFound5 Do you guys hire indians??

[Vishaal Kumar Anandan @Vishaal__Kumar]

@nitesh_singh5 What's the tech stack

[Vishaal Kumar Anandan @Vishaal__Kumar]

@Ayushi_sharma02 Do you guys have any python backend role

[Vishaal Kumar Anandan @Vishaal__Kumar]

@DevByLakshya Yes

[Vishaal Kumar Anandan @Vishaal__Kumar]

@SandyBlossom1 Let's connect

[Vishaal Kumar Anandan @Vishaal__Kumar]

@famous_dyl I need one, do you guys hire indians??