Omar
49 posts
@thedawgyg According to a member of the HackerOne staff, this is not currently being done, and they will provide more detailed information in the coming weeks.
English
"HackerOne Agentic PTaaS pairs specially trained AI agents"... specially trained on a decade worth of work from the largest pool of bug hunters on the planet.... without their consent... Maybe its time to find out how class action suits work and see if we have any ability to prevent them from using our work?
HackerOne@Hacker0x01
Point-in-time pentests can’t keep up, while fully autonomous testing creates noise. The solution? HackerOne Agentic PTaaS pairs specially trained AI agents with elite human validation to deliver results based on real-world exploitability, not theory. This 50-second video shows you how it works.
English
contests are dead.
bug bounties are in.
This mfer doesnt even have a twitter.
smart contract for that fucken matter?
Immunefi@immunefi
Security researcher ily2 has just earned a staggering $3,000,000 from submitting a critical smart contract bug via Immunefi. That's the largest single payout in web3 security in recent memory. In total, he's submitted 3 reports. All 3 were paid. 100% accuracy. His leaderboard update is coming soon, but you can pledge IMU to him now and earn when he finds the next one: immunefi.com/pledge/ily2
English
@fahadkhan__101 through trial and error while exploiting the SQL injection, the backend began returning “file not found” responses. I then injected /passwd into the second column, which resulted in the contents of that file being returned.
English
@0x0ld Can you tell me that how did you make that kind of payload?
English
@userarceus @grok This issue originated as a SQL injection and was escalated to a local file disclosure due to improper sanitization of database values. These values were later passed to a file read function, allowing an attacker to manipulate the query results and alter the file’s source path.
English
@wareeq_shile 3.As a result, the application reads the attacker-supplied path rather than the intended PDF location, leading to a Local File Disclosure vulnerability. here is an example of the code generated by chatGPT
English
@wareeq_shile 2.Due to insufficient input validation, the id parameter is vulnerable to a UNION-based SQL injection. By exploiting this flaw, an attacker can manipulate the query result and inject an arbitrary file path instead of the legitimate database value.
English
@wareeq_shile 1.The affected endpoint accepts a hashed id parameter, which is used in a database query to retrieve the file path of a PDF document. Once a matching record is found, the application reads the file directly from the filesystem using a function such as file_get_contents().
English
@marcaslevel1 @Hacker0x01 @marcaslevel1
Hi! Thanks a lot for the kind words. I’m completely self-taught, and the best resource I recommend is portswigger academy it’s free and very hands-on. bestof luck on your journey, and feel free to ask anytime!
English
@0x0ld @Hacker0x01 Hi there! I’ve read your informative writeups. I’m new to cybersecurity and curious if you learned it yourself or attended formal schooling. If you did, I’d appreciate any helpful resources you found. Your knowledge is valuable, and I’m grateful for your sharing!!
English
Don't overlook subdomains that return 3xx responses.
The easiest and fastest way to check them is on Archive.
For extra assurance, do some directory fuzzing too.
They're often ignored in large targets.
@0x0ld am I right, buddy?
hackerone.com/reports/2947762
#bugbountytips
English
English
@Masonhck3571 The developer was probably trying to handle both single and multiple values by splitting the input on ",". They likely added a check for when a single ID is passed, but forgot to handle the case where an array of IDs comes through.
English
wow, Ive actually never seen this. Am i the only one?
Nasser Albarrak@nass3r000
When a single ID fails, a pair might pass. IDOR bypasses can be that simple 🔥 - Victim's ID: 5200 - Attacker's ID: 5233 GET /api/users/5200/info → Access Denied ❌ GET /api/users/5200,5233/info → Bypassed ✅ #bugbountytips #PenetrationTesting
English
