gr3y1nt 🇵🇸 @gr3y1nt

lonewolf,,,n00b hacker 💢 Hunter at @intigriti | @Hacker0x01 | @Bugcrowd 💤 Joined August 2023

Tweets

722
Followers

58
Following

356
Likes

2K

chux @chux13786509

3 weeks ago

Bug Hunters Tip 💥 Always search your targets in SwaggerHub 🔥 While digging through a target’s SwaggerHub docs, I discovered an exposed valid token, helping me to escalate my privs on the target 💪 Got more useful tips for finding secrets during recon? Drop your tips below 👇

5 36 271 13K 203

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

2 years ago

Find SSRF on all your huge target list via httpx:- 1:- Download github.com/lutfumertceyla… 2:- Add brutelogic.com.br/poc.svg on {target} 3:- Run httpx. httpx -paths ssrf-parameters.txt -threads 200 -o ssrf.txt 4:- Screenshot the result gowitness file -f ssrf.txt #infosec

13 130 347 39K 264

Download Image

HackingHub @hackinghub_io

4 weeks ago

IDORs are one of the most common web vulnerabilities but most beginner's test them wrong. Here are 7 steps to properly test for IDORs👇 (p.s most IDORs are missed because people stop after step 3) 1/9

4 48 206 15K 250

Download Image

Harshleen Chawla @harshleenchawl2

4 weeks ago

5 90 752 57K 824

Download Image

Intigriti @intigriti

8 months ago

List of recon techniques that almost nobody is trying 🤑 • Running CeWL on product & API docs • VHost enumeration & Bruteforcing with host header set to "localhost" • Bruteforcing with different HTTP methods (POST, PUT, PATCH, ...) • Favicon recon • Crawling sites with…

3 63 318 18K 301

Download Image

Shivang @shivangmauryaa

4 weeks ago

Bounty : 1200$ Bug : Time Based SQLi Payload : 1'XOR(94102*if(now()=sysdate()%2Csleep(6)%2C0))XOR'Z 1. found a POST request on endpoint POST /Account 2. in that there was a Code parameter 3. Code=1'XOR(94102*if(now()=sysdate()%2Csleep(6)%2C0))XOR'Z 4. injected this payload

9 64 527 20K 399

Download Image

gr3y1nt 🇵🇸 @gr3y1nt

a month ago

Thats great

N0t0d4y @0xJin

a month ago

Thats great

0 9 64 3K 47

0 0 1 19 0

𝙠𝙖𝙢𝙞𝙠𝙖𝙯𝙚 @0xkmikze

a month ago

After 5 duplicates from automation last month, it finally landed a hit. I spent 8 months building my XSS automation - now it scans 40 programs/week without aggressive requests (+500 domains). Flow: Enumerate subdomains → Discover URLs → Extract parameters → Detect reflections

17 11 266 14K 93

Download Image

🇷🇴 cristi @CristiVlad25

a month ago

In @Burp_Suite, sometimes you want to automatically removed all those unwanted cookies and keep it clean. Use match/replace: Match (regex): (?i)^Cookie:\s*.*?\b((?:cookie1|cookie2)=[^;]+)(?:.*?(;\s*(?:cookie1|cookie2)=[^;]+))?.*$ Replace: Cookie: $1$2

5 44 249 11K 150

Download Image

mockingspectre @mockingspectr3

a month ago

Day 0 - Bug Bounty - I want to see how much I can do with this for 365 days of learning and practice. - today i learned about path traversal and file uploads on @PortSwigger academy Inspiration from @YourFinalSin 👏 Total earned so far: $0

12 7 119 5K 42

Sky Desperados @jusxing

a month ago

After my first year of full-time bug hunting, I successfully completed Justin’s Challenge on @Hacker0x01 . I want to share a few things that might help beginners. The bugs I’ve earned the most from are IDOR and XSS — they’re great to focus on when you're getting started. One…

Justin Gardner @Rhynorater

2 years ago

84 1K 4K 501K 5K

Download Image

31 43 406 31K 218

Download Image

Tharun teja @tharooon123

a month ago

XSS bug bounty Tip: 1- tried to inject xss via input 2- found 403 3- add header “ Content-Encoding : WAFBYPASS “ 4- found that it was 200 bypassed

16 78 604 34K 458

Download Image

Kle0z @Kle0z

a month ago

@intigriti 3 easy low hanging fruit for now. Thanks to bbradar.io Shameless plug 😁

1 1 9 742 5

gr3y1nt 🇵🇸 @gr3y1nt

a month ago

now a days i think like same. hacking is not only tools. mostly it depend the mindset of yous.

Akash Ghosh @myselfakash20

a month ago

now a days i think like same. hacking is not only tools. mostly it depend the mindset of yous.

1 17 121 11K 83

Download Image

0 0 0 12 0

chux @chux13786509

a month ago

HACKER’S most basic — yet powerful — trick: 💥 AUTHENTICATION BYPASS 💥 via SQL injection Still works in 2025. Still crazy effective. What’s your go-to payload? 👇 Here are a few of mine: ' OR 'chux'='chux ' OR IF(1=1, SLEEP(5), 0)-- ⏱️ This weird looking payload got me A LOT…

8 52 324 18K 319

Download Image

Medusa @medusa_0xf

a month ago

Wanna learn "Race Condition Bugs"? Check out my new Video! ✨ youtu.be/AMjUV1fgWCg?si…

3 12 71 5K 31

HackProve @hackprove_

a month ago

Bug Bounty Recon: Tokens, PII, and CI/CD Metadata Leaked via JavaScript more information: discord.com/invite/h6dKuEt… medium.com/bugbountywrite…

0 3 28 1K 13

Akash Ghosh @myselfakash20

2 months ago

Why 404 matter Most bug hunters skip error pages, especially the classic 404. But 404 pages are often misconfigured, leaky, or functionally abused ... making them goldmines for vulnerabilities if approached right. Let’s explore a complete approach to 404s for bounty hunting.👇

3 26 164 16K 157

Download Image

gr3y1nt 🇵🇸 @gr3y1nt

a month ago

an exciting news 😊

ghostlulz @ghostlulz1337

2 months ago

an exciting news 😊

2 19 229 12K 132

Download Image

0 0 0 12 0

gr3y1nt 🇵🇸 @gr3y1nt

a month ago

Hey @grok , based on your analysis of the last 365 days, list in sequence 10 accounts that frequently visit my profile. Do not mention the person, only @.username and the rate of visits to the profile per month.