narak

Don't get sad yet , we still have 2 more matches left , Meaning more sadness yet to come #NepalvsItaly #ICCMensT20WorldCup #NepalCricket

@sandeepjalan7 Sir your tweet means TOPI.

What do you think?

@YShahinzadeh Can you explain how you solved it? What was your thinking and how long did it take for you to discover it?

this is the best challenge of 2026 so far. the idea is crazy. BIG shout out to him for the creatinvity. I think it's very practical due to the inconsistency between layers that happens in daily hunting, HIGHLY recommended =]

@q1uf3ng @ArghgrA How do one learn stuffs like this? I mean what was your methodology to come to this?

@ArghgrA The ] makes qs misparse the first param as a key name, so the server only validates the second clean redirect_uri. But URLSearchParams.get() returns the first — the javascript: payload — which gets assigned to location. HPP via qs vs URLSearchParams parsing diff.

get pwnbox.xyz/?redirect_uri=…

@yeswehack @khantalha618 @yeswehack who got the 3 collaborative reports accepted on public program?

It’s official. First box ticked on our 2026 bucket list ✅ Huge congrats to @khantalha618, who submitted the very first accepted report of 2026 on a public program 🚀 That earns you a well-deserved @yeswehack swag pack 😎 Who’s next? 👀 #YesWeRHackers

First upset of the tournament? #T20WorldCup #PakVsUsa #ICCMensT20WorldCup

@sandeepjalan7 sir market badauna paryo kati jheu laudo banako market

New margin trading rules will allow more liquidity in the market, help smaller investors take more risks. This is a welcome news.#nepsebulls

Hello @yeswehack , Due to the recent ban (NEPAL) form Mangopay my bounty amount has been stuck on my e-wallet, Can you please collaborate with @mangopay to resolve the issue? #yeswehack #bugbounty

@archyxsec @AmirMSafari Any hints?

Crazy challenge @AmirMSafari !

@AmirMSafari Any hints?

Can you spot the XSS vulnerability? 👀 Test it out live at: pwnbox.xyz

@sandeepjalan7 Which sector do you think will be the leader of this swing? looking at volume I guess HYDRO ? what's your take on this?

400-500 points ajhai hunchha jasto lagchha. Market knows better always.

@0xEdra Hey @0xEdra can you check your DM ^^

Happy New Year 🎉🎆

@imranHudaA @yeswehack what's the criteria to get this mail/reward @yeswehack

Thanks @yeswehack

I recently tried magnesium glycinate and zinc, and bro… I slept for 8 hours but woke up feeling like I’d been on sleeping for 8 days. I even remembered my dreams in 4K for the first time ever. What is this magnesium some kind of premium sleep subscription?

@N_ambush Holy

DAMN!!

@zseano @hunt_n27493 lol

@hunt_n27493 well done, but you don't need to tag me in every post :) please stop, thank you :)

Yay! i got bounty again(500$) 🤑gonna break more criticals thanks to all @krishnsec @zseano @JR0ch17 @shreyas_chavhan @shubhamtiwari_r @techycodec08 @RootxRavi @remonsec @0xblackbird @NahamSec @haxor31337 @tabaahi_ @TeslaTheGod

@i7z00_ @yeswehack public program?

Just got a reward for a vulnerability submitted on @yeswehack -- Insecure Direct Object Reference (IDOR) (CWE-639). #YesWeRHackers

@err0rs666 @yeswehack which character gave the error? how do you normally test for sqli?

@0xujasis @yeswehack SQL execution error

@err0rs666 @yeswehack How did you confirm that there must be sqli? which character or something?

@0xujasis @yeswehack parameter:sort