Mohammad Aurangzaib🇵🇰🇵🇸

Independent Cyber Security Researcher, Ethical Hacker and Penetration Tester. 😁

[Mohammad Aurangzaib🇵🇰🇵🇸 @z41b1337]

Gift my Parrents a House
Travel
Change my relationship status (planning to get married 😜 inshAllah)
Send My Parents to Hajj
#BugBounty2020Goals #BugBounty

[Elon Musk @elonmusk]

😢

[khan mamun @mamunwhh]

#SQLi is how it looks in practice:

If the GET parameter:

?username=John

returns the same content as?

username=John’
or
‘1’=’1
then you found a SQL injection vulnerability.
This concept works for mathematical operations too:
If

?id=1
returns the same as

?id=2-1
,you found

[Mohammad Aurangzaib🇵🇰🇵🇸 @z41b1337]

Just published a write-up on CVE-2025-49113 – a critical authenticated RCE in Roundcube Webmail.

https://t.co/aMG5AiyezC

#RedTeam #CVE2025_49113 #TryHackMe

[Mohammad Aurangzaib🇵🇰🇵🇸 @z41b1337]

@PakiJiya Well it all starts with motivation and consistency. I still remember the day my report got acknowledged by the team truly amazing feeling indeed

[Six2dez 🇵🇸 @Six2dez1]

Super excited to share reconftw_ai 🎉
A new tool that reads reconftw results and uses a local LLM (Ollama) to generate actionable reports: bughunter, executive, or brief.
It’s lightweight, fast, and helps turn raw recon into insights.
Give it a spin!
https://t.co/EYZSV2uJyD

[🇷🇴 cristi @CristiVlad25]

Good showcase of hacking skills and inquisitive mind processes:

https://t.co/RvqqRUG1x9

[Bug X Hunter 💻 @Bug_X_hunter]

💻 Exploiting Blind SQL Injection manually [mod_waf bypass 💻

👉 Author: @mohit29295572

👉 Writeup 🖇️:
https://t.co/epumjKhpZG

[Cybernetic Research @cybernetic_res]

SSTI (Server Side Template Injection) Payload List

🔹{7*7}
🔹*{7*7}
🔹{{7*7}}
🔹[[7*7]]
🔹${7*7}
🔹@(7*7)
🔹<?=7*7?>
🔹<%= 7*7 %>
🔹${= 7*7}
🔹{{= 7*7}}
🔹${{7*7}}
🔹#{7*7}
🔹[=7*7]

If evaluated as 49 - the target is vulnerable

Credit:@therceman

#bugbountytips #bugbounty

[Hac @Hac10101]

Writing a pentest report is undoubtedly one of the most important skills you need to possess.

So, here are public pentest reports from 30+ companies to help you refine your skills. 📝🔒

https://t.co/IqGovjFjA0

#infosec

[Intigriti @intigriti]

Top 4 places to inject your SQLi payload!

• Signin/Signup forms
• Contact forms (only if in-scope)
• Profile (username, email, billing details)
• Reset Password forms

What else are we missing? 🤔️

[Nikhil @Ox4d5a]

i can touch grass without going out

https://t.co/hfATXN0ZTu

#infosec #malware #cybersecurity #hacking

[xhzeem @xhzeem]

New Release: Reflxss
A basic tool to check for XSS vulnerabilities. It takes a list of URLs and checks if the parameter values appear in the response.

https://t.co/nEun34LM32

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

Response Manipulation leads to Bypassing the OTP email verification
https://t.co/uEtFj5vdYY

#bugbounty #bugbountytips #bugbountytip

[Sumit Jain @sumit_cfe]

Password Reset Functionality Checklist

#bugbounty #CyberSecurity #infosecurity

[Who Am I ? 🇪🇬 🇵🇸 @19whoami19]

Unfortunately It's Duplicate , but let me discuss this amazing scenario in this Thread

[My Space! @Supakiad_Mee]

Payload: "><svg/onload=prompt('Supakiad-S. (m3ez)', document.domain)​>

This payload still useful 😊

#xss #microsoft #bugbountytip #bugbounty

[Sumit Jain @sumit_cfe]

CRLF Injection Bypass

#bugbounty #cybersec #infosec #appsec #payload

[Yunus Emre Öztaş @ynsmroztas]

Many people have often asked me how to search for "ivanti", for shodan you can search as title:"Ivanti Connect" hostname:"target.*"
#bugbountytip #bugbounty

[Historic Vids @historyinmemes]

This guy lost everything he had in fire but he saved his kitten

[Cybernetic Research @cybernetic_res]

Forgot Password Testing Checklist
Credit:@Botami143
#bugbountytips #BugBounty