عيد مبارك سعيد، كل عام وانتم بالف خير ان شاء الله.🙂 #Morocco

#bugbountytips Account Takeover When you sign up, try to register using existing email by adding \n at the end, it could sign you into someone's account/overwrite his account. ✍️ Example: {"email":"[email protected]"} ↓ {"email":"[email protected]\n"}

Yay, I was awarded a $168 bounty on HackerOne! hackerone.com/anouar_rayan #TogetherWeHitHarder

Yay, I was awarded a $284 bounty on HackerOne! hackerone.com/anouar_rayan #TogetherWeHitHarder

Yay, I was awarded a $250 bounty on HackerOne! Healthcheck file ==> information disclosure hackerone.com/anouar_rayan #TogetherWeHitHarder #BugBounty

Yay, I was awarded a $250 bounty on HackerOne! bug=Metrics File >information disclosure hackerone.com/anouar_rayan #TogetherWeHitHarder

Yay, I was awarded a $100 bounty on HackerOne! Undefined index lead to Sensitive information. hackerone.com/anouar_rayan #TogetherWeHitHarder

Yay, I was awarded a $500 bounty on HackerOne! Reflected XSS, use the Dalfox tool. hackerone.com/anouar_rayan #TogetherWeHitHarder

Yay, I was awarded a $100 bounty on HackerOne! Check No Rate Limit vulnerability everywhere. hackerone.com/anouar_rayan #TogetherWeHitHarder

Yay, I was awarded a $100 bounty on HackerOne! Always check HyperLink Injection Vulnerability hackerone.com/anouar_rayan #TogetherWeHitHarder

Yay, I was awarded a $100 bounty on HackerOne! Phpinfo.php==>information disclosure hackerone.com/riyane #TogetherWeHitHarder

Yay, I was awarded a $150 bounty on HackerOne! XSS in canonical tag hackerone.com/riyane #TogetherWeHitHarder

Yay, I was awarded a $500 bounty on HackerOne! HTML injection on email verification. hackerone.com/riyane #TogetherWeHitHarder

Yay, I was awarded a $250 bounty on HackerOne! Host Header Injection hackerone.com/riyane #TogetherWeHitHarder

Yay, I was awarded a $500 bounty on HackerOne! Git repository found in out-of-scope domain. hackerone.com/riyane #TogetherWeHitHarder

Yay, I was awarded a $400 bounty on HackerOne! CVE-2020-14179= information disclosure. hackerone.com/riyane #TogetherWeHitHarder

Introduction to Cryptography - I have just completed this room! Check it out: tryhackme.com/room/cryptogra… #tryhackme #security #encryption #symmetricencryption #asymmetricencryption #Diffie-Hellman #hash #PKI #TLS #messagedigest #checksum #AES #cryptographyintro via @realtryhackme

Yay, I was awarded a $xxx bounty on HackerOne! Tip: Always try HTML injection with different email providers. - Gmail = filter tags - Temp mail = html injection hackerone.com/riyane #TogetherWeHitHarder

I earned $xxx for my submission on @bugcrowd Great feedback bugcrowd.com/anouar_riyane #ItTakesACrowd