Natsu Dragneel

Living In A Random Place of A Planet Called EARTH | Dumb As JAVA | So Called Bug Bounty Hunter | So Called Cyber Security Researcher.

[Shodan @shodanhq]

Shodan Membership sale is live until 2026-08-09 00:00 UTC (~48 hours from now): https://t.co/0iqiq2vTpn

[Moblig @moblig_]

I earned $6,000 for an SSO bypass in @Hacker0x01 !

💡Tip:
Always test authentication endpoints with encoded whitespace. A simple %20 (trailing space) bypassed SSO completely and fell back to the legacy login flow.

The Issue:👇

The application normalized input after checking for SSO eligibility. By appending an encoded space to the email parameter, the check failed and the request was routed to the standard auth flow.
#bugbountytips #hackerone

[Sahil Choudhary @sahilsince2000]

No jailbreak. No problem. 🔓

I built a tool that bypasses iOS SSL Pinning using OpenVPN + iptables — works with Burp Suite & mitmproxy out of the box.

👇 GitHub
https://t.co/N4QyCDaXvR

#CyberSecurity #BugBounty #iOS #Pentesting

[Natsu Dragneel @zer0leet]

@Suryesh_92 Which bug?

[Abdelkader Mouaz @hamzadzworm]

Hi All -.‑

we always talk about security issues

today I’ll share how I exploited a feature used to protect the website and turned it into a critical issue

hope you like it waiting for your opinions -.-

https://t.co/IiQX96dkYp

#BugBounty #bugbountytips #infosec #bugbountytip

[Natsu Dragneel @zer0leet]

@professor_xa1 Can you explain in detail? How did you bypassed. BTW congratulations

[Natsu Dragneel @zer0leet]

@Amr_MustafaAA @AlsadeqKareem Any Write up?

[payloadartist @payloadartist]

🔥 Fuzzing and Bypassing the AWS WAF

Interesting writeup by the @sysdig team on building an automated fuzzing tool to trigger XSS by bypassing the AWS WAF

https://t.co/elPGc4p3M0
Fuzzer: https://t.co/X1YJJJzM6f

#bugbountytips #bugbounty #infosec #cybersecurity

[Masonhck357 @Masonhck3571]

So it seems like everybody hates hacking GraphQL like me, so lets post some resources so we can all get better at it!

[Natsu Dragneel @zer0leet]

@AshrafBasyoni4 Which Bug ?

[Natsu Dragneel @zer0leet]

@OctagonNetworks In this code lies in the getBalance and setBalance functions (not shown in the provided code). If these functions don't properly validate the user's authentication or authorization, an attacker might be able to manipulate the balance and perform unauthorized withdrawals.

[Natsu Dragneel @zer0leet]

@alert_airdropss 0x911ac89c82b9cc54aa6c4cfb267fb0f13c75bcf0

[Intigriti @intigriti]

Found a GraphQL endpoint that you want to test? InQL is just for you!

InQL is an awesome BurpSuite extension for advanced GraphQL pentesting!! 😎

Check it out 👇

https://t.co/zWdmDGETtb

[Will Gates @WllGates]

I've found HTTP Verb Tampering can often be used to bypass 403 (and 401) too.

Also fuzzing HTTP proxy headers and setting values to localhost often works like a charm. I use this tool to speed up the process

credit: @0dayWizard

https://t.co/SmuPKCrf3K

[Hussein Daher @HusseiN98D]

Successfully bypassed a SSRF WAF by using a combination of IPV6 + Unicode. Payload for Metadata instances:
http://[::ⓕⓕⓕⓕ:①⑥⑨。②⑤④。⑯⑨。②⑤④]:80
Check images for response difference between 169.254.169.254 and the above payload I shared 🔥

#bugbounty #infosec #waf

[Natsu Dragneel @zer0leet]

@NeuRosis23 @Hacker0x01 @martenmickos @jobertabma Looking forward to get their response 😕 although my luck is quite poor in terms of this thing.

[Natsu Dragneel @zer0leet]

@NeuRosis23 @Hacker0x01 @martenmickos @jobertabma Thanks for the info I also requested a Mediation and it's been 18 days but still no response from team 🥲

[Natsu Dragneel @zer0leet]

@fattselimi @Hacker0x01 should take steps on these things so that the bug hunters should not face all these consequences.

[Natsu Dragneel @zer0leet]

@fattselimi Same thing happend to me earlier the triager closed my report as N/A then I submitted all possible proofs including the poc video of exploitation and the company fixed the bug but still the triager didn't change report status then I requested a mediation.