Hacked by jahidsec

I published my Bug Bounty Hunting Methodology on GitHub almost 2 years ago: github.com/wadgamaraldeen… Some parts may be outdated, but it still contains practical tips you can use in your AI prompts or to improve your current hunting methodology. Happy hunting! 🩵 #bugbountytips

Finally finished write-up this bug. Hope you find it useful! 🔗𝗙𝘂𝗹𝗹 𝘄𝗿𝗶𝘁𝗲-𝘂𝗽: github.com/52-HRTZ/securi…

+3.000 dólares dps de encontrar uma falha crítica de Business Logic Esse mês ganhei USD$ 9.000 com bug bounty e estou na atual temporada no TOP 24 mundo dentre os pesquisadores que mais encontraram falhas de impacto crítico e alto (mais perigosas), além de estar no top 1 do 🇧🇷

Yh in June I made only $5,160 from my i consistent hunts. These were mostly IDORs, OAuth and GraphQL vulnerabilities. I released some writeups you can read: $500 to $1,500 Email Verif Bypass: @tinopreter/from-500-to-1-500-email-verification-bypass-impact-chaining-3efd55b24f23" target="_blank" rel="nofollow noopener">medium.com/@tinopreter/fr… $2,000 Web Cache Deception @tinopreter/cracking-samesite-for-a-2-000-web-cache-deception-746972278412" target="_blank" rel="nofollow noopener">medium.com/@tinopreter/cr…

A simple exposed subdomain led to a P1 Account Takeover! It exposed OTP links, password-reset links, and sensitive emails—potentially allowing attackers to take over any user account. Watch the demo 👇 youtu.be/f0VT51wjG58

Clicked “/admin” That was the exploit. Alhamdulillah. Thanks @intigriti

Alhamdulillah Now I can take a break 😮‍💨😮‍💨

🌸 🌸 🌸 🌸 🌸 🌸

One prompt. 30s. 4K. 50 refs. Seedance 2.5 is live here: yiha.ai/seedance2.5 This is one-click filmmaking.

∴｡　 　･ﾟ*｡. 　　･ *ﾟ 　 ･ ﾟ* 🪐 *･｡ *.｡ ✨ °*. ﾟ｡ °*. ﾟ*. 🌙 ･ ｡ ･ﾟ ｡°*. ｡*･｡

Mount Fuji, Japan 🇯🇵

How I Discovered a Blind SQL Injection in a Private program @mrx_w_/how-i-discovered-a-blind-sql-injection-in-a-private-program-7eebd77ad286" target="_blank" rel="nofollow noopener">medium.com/@mrx_w_/how-i-…

NASA Artemis passing close to the Moon