Rashedul Islam @RashedulCSS

Cybersecurity Enthusiast | Python Lover | PowerPoint Hero | Fiery Typist | Student at University of Dhaka Dhaka, Bangladesh Joined January 2013

Tweets

375
Followers

549
Following

476
Likes

7K

Rashedul Islam @RashedulCSS

2 weeks ago

I just completed module #API #Attacks in @hackthebox_eu...! Price: $10 The last challenge will teach you once again to 'Try Harder'... You'll learn here the OWASP Top 10 API Security Risks... My Rating: 4.7 academy.hackthebox.com/achievement/20… #hackthebox #htbacademy #cybersecurity

0 0 0 145 0

Download Image

What an insight! @NahamSec "When I can't find bugs, I change perspective not targets. Client-side -> API Issues Main App -> Developer Platform" "Give Me 13 Minutes and 2025 Will Be Your Best Bug Bounty Year" YouTube Link: youtube.com/watch?v=PER6Nv…

0 3 57 1K 8

Download Image

Rashedul Islam @RashedulCSS

7 months ago

Alhamdulillah! Awarded with $600 for finding an IDOR vulnerability! Context: - The Web App was letting users to upload payment screenshots if they chose 'Bank Transfer' method for boosting their posts. - But abusing the IDOR vulnerability, I could upload/replace victims' images.

3 2 117 3K 22

Download Image

Rashedul Islam @RashedulCSS

7 months ago

Alhamdulillah...! Rewarded with $480 for a Race Condition attack...! Double Tips for Hunters: 1. Always test #race_condition if a function offers rewards e.g., coin, money, etc. 2. Don't hesitate to negotiate logically with programs. #bugbounty #whitehat #race #condition #tips

3 3 77 2K 11

Download Image

Rashedul Islam @RashedulCSS

7 months ago

Alhamdulillah...! Rewarded with $500 for a Stored XSS for Bypassing the Validation... Tips for You: Never trust the first page security! My malicious name was validated when I commented for the first time. But when I REPLIED to MY comment then it fired. #bugbounty #xss #tips

3 4 104 3K 13

Download Image

Rashedul Islam @RashedulCSS

8 months ago

Alhamdulillah...! Awarded with $750 for an IDOR issue...! Tip: Change the target website's country/language to a different one. Because sometimes it may offer an additional feature for another region. Example: rashedulcss.com/?lan=en ➡️ rashedulcss.com/?lan=ar #bugbounty #tips

6 3 128 5K 44

Download Image

Rashedul Islam @RashedulCSS

8 months ago

Huge shout-out to @TecnoSRC ! Glad to have you @L3onid1s, @MdInjamulHaqu, @msnrasel, @araselmir, @Ontu404, @Hasan_Khan0X, @itsz4x, @akbar_ohi who made the meetup more enjoyable...! Ready for the next journey...?

TECNO Security Response Center @TecnoSRC

8 months ago

2 3 15 2K 0

Download Image

2 0 8 481 0

Rashedul Islam @RashedulCSS

9 months ago

Thanks for the huge bounty, @TecnoSRC !

TECNO Security Response Center @TecnoSRC

9 months ago

Thanks for the huge bounty, @TecnoSRC !

3 1 14 1K 0

Download Image

1 0 5 252 0

Rashedul Islam @RashedulCSS

10 months ago

Creative attack, @AkashHamal0x01 brother...! He bypassed HackerOne 2FA abusing race condition... Link: hackerone.com/reports/2598548

0 0 3 250 2

Download Gif

Rashedul Islam @RashedulCSS

12 months ago

Alhamdulillah...! @TecnoSRC (TECNO Mobile) featured me in their anniversary as a "#Security_Researcher with the Most Badges" for my contributions to their overall Android Applications and Websites security.

2 0 6 322 0

Download Image

Rashedul Islam @RashedulCSS

2 years ago

Alhamdulillah... Rewarded with $7K (6K+1K) for being #TOP_2 in the yearly leaderboard (globally) of TECNO Security Response Center with the special recognition #Precious_Gem. "...And Allah provides for whoever He wills without limit." [Al Quran - Sura 24:38] #bugbounty #security

2 1 32 2K 2

Download Image

Rashedul Islam @RashedulCSS

2 years ago

Now #VIP Hacker of @TecnoSRC (TECNO Mobile Brand)...! Just received the badge today... It requires 4 high/6 medium valid vulnerability reports... Dive deep matters...! #bug #bounty #ethical #hacking