Abhishek Baru @baru_abhishek

Bug Hunter | Penetration Tester | Information Security Professional Joined May 2016

Tweets

82
Followers

95
Following

674
Likes

782

Luke Stephens (hakluke) @hakluke

5 years ago

Surface browser is so good that I've ditched most of my recon automation and just replaced it with this. @securitytrails & I have teamed up to give away a free 12 month sub to Surface Browser, worth $10,800! - Closes 24 hours from right now - Entry instructions below 👇 GL!

32 261 189 0 12

Download Image

Avinash Jain @logicbomb_1

5 years ago

A quick writeup on How I was able to bypass OTP to Account takeover to access Admin Panel via X-Forwarded-For. If you are using X-Forwarded-For to get client IP, make sure to check it against a list of IPs of trusted proxies/load balancers. #infosecurity logicbomb-1.medium.com/otp-bypass-acc…

3 129 343 0 91

Prasoon Gupta @0xdekster

5 years ago

I am doing a giveaway of 2 SPYSE Pro Account and the 2 winners will be selected by me & @SpyseHQ To participate and win Pro account: 1) Tell what problems Spyse could solve for you 2) Suggest what will be great to add to solve problems faster 3) Follow @SpyseHQ & Retweet it.

7 9 22 0 4

Aditya Shende @ADITYASHENDE17

5 years ago

/api/v1/account/accounts /api/v1/account/accounts/summaries /api/v1/account/oauth/token /api/v1/account/oauth/ticket /api/v1/account/permissions /api/v1/account/user /api/v1/account/user/assets /api/v1/account/user/delete /api/v1/account/user/profile

5 273 665 0 239

Abhishek Baru @baru_abhishek

5 years ago

Another Milestone during my journey in Bug Bounty. In the last 25 Days , I reported (3 - P0,2 - P1,3-P2). The total payout was around ₹1,XX,000. Thanks OYO for the rewards and appreciation. #BugBounty #hackers #BugBountytips #infosec

2 0 10 0 0

Download Image

Mayank Raheja @rahejahere

5 years ago

Hello Infosec People! I just published my new blog on "Tampering Encrypted Parameter to Account Takeover" It was a very Interesting finding of mine. It's not like the traditional Parameter Tampering. I'm sure you will like it. Read it here: medium.com/@imayankraheja… Do Clap :)

11 169 444 0 105

Yash Sodha @y_sodha

5 years ago

I made a small but useful extension. It redacts sensitive headers when copying req in Burp. It is useful for both the reporters and triagers when commenting/writing a report. Pre-release version available at: github.com/yashrs/safecop…. PRs are welcome :) #BugBounty #Security