Mohamed Ahmed

@professor_xa1 Shodan

@mooo_sec What is your recon methodology for reaching such points?

🚨 Another critical vulnerability 10/10. #bugbountytips #bugbounty #cybersecurity

@bugoverfl0w User: admin Pass: (empty)

@mooo_sec Congrats bro. What is user:pass default? Thanks

@4osp3l Congratulations

🔥

@Gl1tchhx Yes

@mooo_sec admin:admin?

How I accessed a Grafana admin panel during my recon process: • Chose a target with all assets in scope • Used Shodan (SSL search) and Google dorking ("Copyright © target") to discover related domains outside the main domain

Got paid even though the vulnerability was duplicate 💸 Because of the way I exploited it. #BugBountyTips #BugBounty #CyberSecurity

@fahadkhan__101 It depends on the day It's pretty random and based on my mood and whether I have college or not so I don't have a fixed number of hours per day

@mooo_sec Amazing work 🔥🔥 Can you tell me, how many hours you hunt on daily basis?

🚨 40+ Vulnerabilities Found This Month, including 10+ critical issues: RCE, Mass PII Exposure, Unauthorized Access, ATO, LFI, Information Disclosure #CyberSecurity #BugBounty #BugBountyTips

@crypto_profit1 Check my YouTube soon i will do writeups

@mooo_sec when writeup ?

@Younis_J_ I will share here and on my YouTube

@mooo_sec Thinks for sharing if you can share tips will be great

@OX0DAYS Check my YouTube video

@mooo_sec Can You Share Your Github Dork List!

New Video – I found admin panels & leaked credentials using just one GitHub dork! 🚨 Watch here: youtu.be/3sfe8U-f_zk #BugBounty #GitHubDork #CyberSecurity

@pent0ss Dm me if u need a help

If i find the RSA private key should i report it immediately or show an impact and how can i do that? #bugbountytips #BugBounty

@pent0ss Firstly verify whether this is a production RSA key or only a test/example key as test or placeholder keys are usually not accepted. Then verify whether the key is valid or not.

@Steiner254 Yeah

@mooo_sec nice catch.... admin-admin?

Admin Panel Access Scenario I Found • During recon I found a domain with an empty main page • Port scan showed 1950 open • Visiting example.com:1950 revealed an admin login • Default creds worked and gave full admin access #CyberSecurity #BugBounty #bugbountytips

@74himanshukumar Ok

@mooo_sec share some tips about directory fuzzing