Osama h0$#@

@Videoohat صديق السوء

أعطوني عنوان مناسب لهالصورة ؟!

@sidi_jeddou_dev @rez0__ @WorstWursts It has very good results

@rez0__ @WorstWursts Context?? I checked his profile and it’s all about “I and worst….” 😅

I and @WorstWursts successfully articulated impact to Amazon*** Fixed that for you

@arabmemesss اخوانا المصرييين نوابغ بكل شيء

هذه السيدة من غزة أصيبت في الحرب بتشوهات كبيرة ظنت بعدها أن حياتها قد انتهت !! فجاء هذا الدكتور المصري…See More

@Hajjaj0x محفظه بينانس ومن المحفظه بيع عبر p2p ولابتخسر شي ويمكن تكسب فارق الصرف ةمن المشترييين كثير

أخواتي الهكرز أسهل طريقة سحب فلوس من هاكر ون بدون ما يشفطوا نص الفلوس ؟

@0xwer8 رد الاصلاح يتاخر طبعا

مش ممكن والله، هل هو طبيعي ولا لا؟ ثغرة critical تمر 5 ايام مع انها Assessed بدون اي رد ويردو على ثغره Mid بدل هاي الثغرة 🤨 **اثنينهم نفس ال Program على فكرة**

SQL Injection in GraphQL/WebSocket Escalated to PII Document Leak by DarkyOS @DarkyOS/sql-injection-in-graphql-websocket-escalated-to-pii-document-leak-09ba7ad2800a" target="_blank" rel="nofollow noopener">medium.com/@DarkyOS/sql-i… #bugbounty #bugbountytips #bugbountytip

How I Got Into Starbucks' Internal Network using a non resolvable hostnames credit: @damian_89_ argosdns.io/blog/how-i-got…

This time HIGH severity triaged, 5th bug in 9 days in Public Program Back to back Same day triage 🚀

Last year I found a MXSS (dream) bug in a Mail app,it involved bypassing 2 consecutive sanitizers recursive Dompurify calls plus CKEditor.Hope you will like it sudistark.github.io/2026/04/07/mxs… All thanks to @kevin_mizu for putting such great content around mxss and those bypasses🙇‍♀️

How I Earned $76,000 From a Single Program on Bugcrowd anonhunter.medium.com/how-i-earned-7…

he started in 2025 and pwned every feature of a public programs MAIN APP. im proud of my boy but this just goes to show, anything is possible with the right mindset. keep up the great work twin. 🕷️🙏🏾

RCE via Insecure JS Sandbox Bypass @win3zz/rce-via-insecure-js-sandbox-bypass-a26ad6364112" target="_blank" rel="nofollow noopener">medium.com/@win3zz/rce-vi…

I just published a full write-up about how I discovered a blind SQL injection in a private bug bounty program. @mrx_w_/how-i-discovered-a-blind-sql-injection-in-a-private-program-7eebd77ad286" target="_blank" rel="nofollow noopener">medium.com/@mrx_w_/how-i-… #BugBounty #BugBountyTips #Bugcrowd #CyberSecurity

@grayrwn عبيط جدا جميني

بحس gemini اذكى من chat gpt

Simple XSS payload for AngularJS testing. Older AngularJS versions are still vulnerable to expression injection. {{$on.constructor('alert(document.domain)')()}} #BugBounty #XSS #bugbountytips #hackerone

Finding the right SQLi payload isn’t always easy @lu3ky13 Built this with AI (obsidianlabs.cloud) For POC: ';IF(LEN(USER_NAME())>=5)WAITFOR DELAY '0:0:20'-- #BugBounty #SQLi #bugbountytips #hackerone #SQL

four bugs to the same program, 1-click rce (lowerd to high), 3 access token leaks (some lowered to medium). what is impressive, no single response from the program for about 5 months, h1 mediation didn't reply, what is going on? h1 is dead?! @Hacker0x01 what?!

$1,500 Recon Secrets: Dorks to Dollars @tinopreter/1-500-recon-secrets-dorks-to-dollars-0e7eca022708" target="_blank" rel="nofollow noopener">medium.com/@tinopreter/1-…

#CVE-2026-22738: Spring AI SimpleVectorStore Hit by SpEL Injection — Remote Code Execution Risk in AI Pipelines