xAbraham

@FilexMbogo58723 @garethheyes Five seconds on Google!!

@Exploit_000 @garethheyes can I get a free copy please gareth

Huge thanks to @garethheyes . If you want to build confidence with WAF bypasses and better understand client-side vulnerabilities, this book is a must-read. I recently got rewarded for a Stored XSS, and the knowledge from this book definitely helped. Highly recommended!

@krigshaw @garethheyes Definitely worth a read

@Exploit_000 @garethheyes Thanks for the reminder I need to pick one of these up too. I'm pretty sure Ars0n aka rs0n_live one of my mentors recommended it during one of his trainings.

@garethheyes Thanks! Your work has been a huge help :)

@Exploit_000 Really pleased it helped you thanks for the shout out!

@7lpu6iLt Yes

@Exploit_000 Self hosted?

Sometimes the difference between authorized and unauthorized is just changing a parameter from true to false. Access control bugs never get old . Reported. Let's see how it goes ⏳ #bugbounty #hackerone

@ransomsec Insha Allah 👀

@Exploit_000 It goes hard, InshaAllaha 🔥

@baharkarakrt x=6 y=1/2 xy=3

Bunu çözebilirsen IQ seviyen ortalamanın üstündedir. xy kaçtır?

Try treating a piece of scope like you're in a live hacking event. Maybe suddenly you see way more than you thought was there. Part 2 of episode 179, on how to keep yourself motivated!

Found an interesting bug where a single PUT request led to multiple operational BOLA vulnerabilities, while also exposing sensitive user information such as email addresses and phone numbers. #BugBounty

Update: The Stored XSS has been fixed and rewarded. Alhamdulillah :) #Bugbounty

@mountainaddict0 It hurts at first, but it heals even better

Guys, I know bug bounty can be frustrating, but believe me, when you see your first report getting accepted, you’ll feel 10x more energy and motivation to work harder and smarter the next day. Don’t quit, please.

Anyone else noticing a shift from responsible disclosure to irresponsible disclosure these days?

@DarthKermi72747 We all know these systems are terrible when it comes to security, but don't post such sensitive information leaks. It involves the sensitive data of thousands of people. We all know black hats are faster than the fixing team :) they'll reach it first

JEE Advanced 2026 candidate/result infrastructure (cdata.jeeadv.ac.in/result2026/) had a public cloud storage misconfiguration exposing bulk candidate data without auth. This exposed ~179.6k result records and ~187.3k admit-card PDFs, including candidate names, DOBs and mobile numbers.

You're melting in 41°C and the only thing hotter is your duplicate notification :()

A single POST request exposes all tenant user emails, and with hundreds of publicly accessible tenants. Reported, let’s see :)

@ArchAngelDDay Open redirect is 2026's RCE 🥰

Thanks Claude.

Another Stored XSS 👀 javascript: and alert() were blocked, but javascript:confirm() slipped through 😶 #BugBounty #XSS #StoredXSS

Bypasses most common filters: • input.includes('javascript:') • input.match(/javascript:/i) • input.replace('javascript:','') Fuzzed & verified in DOM. START position even more lenient :) all 0-32 control chars allowed.

Browser normalizes javascript: URLs meaning [\t,\n,r] can be inserted between ANY two letters of the word and the browser still treats it as a valid protocol. So instead of javascript:alert(1) you can write- j%09a%09v%09a%09s%09c%09r%09i%09p%09t%09:alert(1) ✅ #BugBounty #XSS