View my verified achievement from APIsec University. credly.com/badges/174d811… via Credly

Mastering API check APIsec University. credly.com/badges/d17be4c… via Credly

I currently have 4 bugs in triage. let me tell you about them (a thread)

Past week been intense dive into API, learnt postman,burp,wfuzz,setting crApi, this has been pending for almost a year i started it, kudos to myself APIsec University. credly.com/badges/481e10c… via Credly

I released a YouTube video for the first time in nearly 4 years! Watch it if you want some hints and tips for fuzzing and navigating APIs youtu.be/lQEpsrT6O0w?si…

Once you’ve found a source of user input, the next question is: Where does that input land? That’s your sink. And WordPress plugins expose a ton of them.  Here are 9 to look for 👇 1. update_option() - Stores global config like default roles, site settings, API keys. - Set

Small wins 😍, these days been tough

Mastering APIs APIsec University. credly.com/badges/0d5e34b… via Credly

Mastering APIs APIsec University. credly.com/badges/59a5e6f… via Credly

so $whoami :)

banteg That's Sarah Davis. She gave a really nice TEDx Talk last year: "If Code Can Make Music, What Will You Make?" youtube.com/watch?v=ehLb1p…

View my verified achievement from APIsec University. credly.com/badges/3e89a27… via Credly

I now mastered API, as for bug bounty, June been tough for me APIsec University. credly.com/badges/8752fdf… via Credly

After so many hours in APISEC, found a BFLA issue hope to break the june jinx 🙈 APIsec University

Share your achievement tryhackme.com/room/supplycha… #tryhackme via @realtryhackme

Just found an interesting way to bypass some nonce-based CSPs and made a small XSS challenge with an exploitable scenario. See if you can find it before I tell! Source JS: gist.github.com/JorianWoltjer/… URL: greeting-chall.jorianwoltjer.com Found a solution? Please DM to avoid spoilers, thanks!

Few months late 😭 , last day to break june

I have just received this DM from Tim Hackfort and it made my day 😁😁. Seeing that a Bug Hunter faaar better than me was able to find a bug because of my Video is something that i wasn't expecting. Thanks a lot for your DM 🙌🙌

Listen to this, if you’ve been using ChatGPT. Try it.

Yay, I was awarded a $XXX bounty on HackerOne! hackerone.com/0xbeven #TogetherWeHitHarder