Vishal @vishalatinfosec

Security Analyst | Bug Hunter Joined November 2024

Tweets

8
Followers

1
Following

152
Likes

1

Godfather Orwa 🇯🇴 @GodfatherOrwa

3 months ago

#Bugbountytip #Bugbountytips Install JS Miner extension over Burp After crawling all endpoints Click on the target ==> Extensions > Js Miner > Run All Passive scans I got a result [Js Miner] Dependency Confusion The package is unclaimed over NPM Next step Create an account…

26 147 903 43K 785

Download Image

Coffin @coffinxp7

10 months ago

Swagger Html+XSS on Bugcrowd bbp

5 22 267 15K 83

Download Image

khan mamun @mamunwhh

10 months ago

#bugbountytips panel bypass 1- Found path for portal in wayback 2- Fuzz it 3- Found login page 4- Another Fuzzing 5- See/manage-users.php with big content length but 302 status 6- Setup match & replace with 302 to 200 7- Bypass auth and access to admin panel Thanks @RootMoksha

3 28 240 7K 146

Mohsin Khan @tabaahi_

10 months ago

Full-time bug hunters, what's your daily routine like? Do you treat it like a traditional 8-hour job, or is your schedule more flexible? How do you structure your day to stay productive and consistent?

10 8 133 12K 48

INE Security (FKA eLearnSecurity) @INEsecurity

10 months ago

Waiting for the @ine #BlackFriday Sale? It's FINALLY here! 🥳 Don't wait to secure your #training - save now & choose one of our many options for your continuous learning. Get started today ➡️ bit.ly/3ZfWLJC #certification #cybersecurity #networking

2 4 40 7K 23

Download Image

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

10 months ago

🚀 SQL Injection - Auth Bypass Payloads 0' or '0' = '0 1' or '1' = '1 '-' ' ' '&' '^' '*' ' or ''-' ' or '' ' ' or ''&' ' or ''^' ' or ''*' "-" " " "&" "^" "*" " or ""-" " or "" " " or ""&" " or ""^" " or ""*" or true-- " or true-- ' or true-- ") or true-- ') or true-- ' or…

0 221 1K 49K 936

Sunil Yedla @sunilyedla2

10 months ago

Simple yet impactful bugs still exist. 1. Website has mandatory email verification and user1 is not allowed to update existing users email 2. Created API Key 3. Opened docs, found an endpoint to profile update 4. Able to update existing email without verification! #BugBounty