diaaa

Inannet punk

[sepehr @sepix0x]

Check out my new write-up, hope you enjoy it!

https://t.co/hbSIlaL4S8

[Miilato @miiilato]

day 7 of 2026

[Brian Baskin @bbaskin]

CTF players be like

[diaaa @wusupduck]

@0xSepix Nice job 👏

[Meydi @mehdiparandin]

Just found an interesting behavior in Firefox that can be used for XSS:
If a response lacks the Content-Type header, Firefox renders it as text/plain.
But if the URL ends with an extension like .html, Firefox treats it as that.
#bugbounty #bugbountytips

[diaaa @wusupduck]

@neotrony Dash meydi on fire🔥

[diaaa @wusupduck]

@Pouria___sh @voorivex @mzaherii به به پوریا مبارکه

[diaaa @wusupduck]

@abdollahzadeh_g Great job👏

[diaaa @wusupduck]

@MomoRizzaX Congrats on both👏🙌

[Omid Rezaei @omidxrz]

It’s so fun looking for JSONP or stuff like that, I submitted a few of them to the https://t.co/kCgo6k9CnR repo by @renniepak
now you can bypass CSP restrictions for this rules:
*.gitlab.com
*.onetrust.com
*.forismatic.com
*.ipify.org
*.dblp.org
*.ipinfo.io
*.opendatasoft.com

[diaaa @wusupduck]

@neotrony Waiting for part two🙌👏

[diaaa @wusupduck]

@0xSepix sir please give me some tips

[diaaa @wusupduck]

@jusxing

[diaaa @wusupduck]

@young_vanda_ @intigriti that's so cool dude you're killing it

[diaaa @wusupduck]

@neemaaf @voorivex به به موفق باشی👏🙌

[diaaa @wusupduck]

@neotrony به به مبارکه مهدی❤️

[diaaa @wusupduck]

@neemaaf @omidxrz @jeancoaton یه دمبلان تو اتاقم دارم روپایی میزنه بیا بریم با هم کبابش کنیم

[diaaa @wusupduck]

@neemaaf Top notch🔥🙌

[diaaa @wusupduck]

@young_vanda_ @intigriti On fire🔥🙌