๐ดโ„Ž๐‘š๐‘’๐‘‘ ๐บ๐‘Ž๐‘š๐‘–๐‘™

649 posts

๐ดโ„Ž๐‘š๐‘’๐‘‘ ๐บ๐‘Ž๐‘š๐‘–๐‘™ banner
๐ดโ„Ž๐‘š๐‘’๐‘‘ ๐บ๐‘Ž๐‘š๐‘–๐‘™

๐ดโ„Ž๐‘š๐‘’๐‘‘ ๐บ๐‘Ž๐‘š๐‘–๐‘™

@algamil7x

bug bounty hunter โ‡œ

Ismailia Katฤฑlฤฑm AฤŸustos 2017
427 Takip Edilen4.6K Takipรงiler
Rodolfo Assis
Rodolfo Assis@RodoAssisยท
I'm about to release an open source recon tool on GitHub. Try to get the most URLs out of its testbed with your recon methods (in the shortest time possible) and let me know in the comments! recon.brutelogic.net
English
1
1
9
732
๐ดโ„Ž๐‘š๐‘’๐‘‘ ๐บ๐‘Ž๐‘š๐‘–๐‘™ retweetledi
@ยท
The video i watched at 9 AM for 9 days
English
21
1.4K
8.9K
208.6K
Younghb0x1
Younghb0x1@Younghb0x1ยท
@a7mad__n1 Can I join your channel please ๐Ÿฅบ๐Ÿ™
English
1
0
0
222
a7madn1
a7madn1@a7mad__n1ยท
Who Knows this fuck guy? , he are stiling my content on my private channel #bugbounty
English
12
0
16
3.6K
ุนุฒู‘ุช
ุนุฒู‘ุช@Al3zzatยท
ุฏุง ุฅุญู†ุง ู…ุฏุฎู„ู†ุงุด ู…ุฏุงุฑุณ ูŠุง ุฃู… ู†ุงุฒู„ูŠ ูˆุงู„ู„ู‡
ุงู„ุนุฑุจูŠุฉ
77
144
2.5K
627.3K
๐ดโ„Ž๐‘š๐‘’๐‘‘ ๐บ๐‘Ž๐‘š๐‘–๐‘™
@AHMEDMELEGY_ ุทูŠุจ ู„ุงุฒู… ุชูˆุถุญ ุงู† ุงุฐูˆู† ุงู„ุฎุฒุงู†ู‡ ูˆุงู„ุดู‡ุงุฏุงุช ูˆุงู„ุญุงุฌุงุช ุฏูŠ ุงู„ู„ูŠ ุฎุงุตู‡ ุจุงู„ุจู†ูˆูƒ ูˆุงู„ู„ูŠ ุจุชุฏูŠ ู†ุณุจ ุซุงุจุชู‡ ุฏูŠ ุญุฑุงู…
ุงู„ุนุฑุจูŠุฉ
0
0
0
25
MELEGY ๐Ÿ‡ฑ๐Ÿ‡ง|๐Ÿ‡ช๐Ÿ‡ฌู…ูŽู„ูŠุฌูŠ
ูˆ ุทุจุนุงู‹ ููŠู‡ ุฌูˆุง ุตู†ุงุฏูŠู‚ ุนู„ูŠ ุญุณุจ ู…ุณุชูˆูŠ ุงู„ู…ุฎุงุทุฑุฉ ูู…ุซู„ุง ููŠู‡ ุตู†ุงุฏูŠู‚ ุจุชุณุชุซู…ุฑ ููŠ ุงุฐูˆู† ุงู„ุฎุฒุงู†ุฉ ูˆ ุงู„ู…ุฎุงุทุฑุฉ ููŠู‡ุง ู‚ู„ูŠู„ุฉ ุฌุฏุง ูˆ ููŠู‡ ุตู†ุงุฏูŠู‚ ุชุงู†ูŠ ู‡ุชู„ุงู‚ูŠ ุงู† ุงู„ู…ุฎุงุทุฑุฉ ููŠู‡ุง ุงุนู„ูŠ ุจุณ ู‚ุตุงุฏ ูƒุฏู‡ ู…ู…ูƒู† ุชุงุฎุฏ ุฑุจุญ ุงุนู„ูŠ ุจูƒุชูŠุฑ ูˆ ู…ู…ูƒู† ุชุฎุณุฑ ูƒุฐู„ูƒ. ูข
ุงู„ุนุฑุจูŠุฉ
2
0
16
4K
MELEGY ๐Ÿ‡ฑ๐Ÿ‡ง|๐Ÿ‡ช๐Ÿ‡ฌู…ูŽู„ูŠุฌูŠ
ู†ุตูŠุญุฉ ู„ู…ุง ุชุญูˆู„ ู„ุซุงู†ุฏุฑ ุงุนู…ู„ ุญุณุงุจ ู…ุตุงุฑูŠู ุงูŠุฏุงุน ูˆ ุณุญุจ ุงู„ูู„ูˆุณ ุ› ูู…ุชุญูˆู„ุด ู…ุจุงู„ุบ ู‚ู„ูŠู„ุฉ ู„ุฃู† ูƒุฏู‡ ุงู†ุช ู…ุญุชุงุฌ ุงู„ุณู‡ู… ุงู„ุงูˆู„ ูŠุนูˆุถ ู…ุตุงุฑูŠู ุฏุฎูˆู„ูƒ ูˆ ุฎุฑูˆุฌูƒ ู…ู†ู‡ ูˆ ุจุนุฏูŠู† ุชุจุฏุฃ ุชูƒุณุจ. ูƒู„ ูุชุฑุฉ ู„ู…ุง ูŠูƒูˆู† ู…ุนุงูƒ ู…ุจู„ุบ ูƒูˆูŠุณ ูกู ู ู  ุงูˆ ุงูƒุชุฑ ู…ู…ูƒู† ุชุญุทู‡ู… ููŠ ุงู„ุจุฑู†ุงู…ุฌ ูˆ ุดูˆู ุณู‡ู… ุงูˆ ุตู†ุฏูˆู‚ ู…ู†ุงุณุจ ู„ุฃุญุชูŠุงุฌูƒ. ูก
ุงู„ุนุฑุจูŠุฉ
19
7
373
53.7K
/usr/bin/fares
/usr/bin/fares@SirBagozaยท
ุงู„ุฎู…ูŠุณ ูจ ุจู„ูŠู„ ูŠุดุจุงุจ ูƒู„ ุฎู…ูŠุณ ููŠุฏูŠูˆ ุจู‚ุง
ุงู„ุนุฑุจูŠุฉ
2
0
25
688
/usr/bin/fares
/usr/bin/fares@SirBagozaยท
ู‡ู„ุง
/usr/bin/fares tweet media
ุงู„ุนุฑุจูŠุฉ
9
1
59
2.4K
Ashraf Basyoni
Ashraf Basyoni@AshrafBasyoni4ยท
ุงู„ุญู…ุฏ ู„ู„ู‡ Tip: If the application allows users to generate personal API keys, create a key, remove the user from the org, then try using that key again, you might find it still works and gives you full control over the organization. #InfoSec #bugbountytips #BugBounty
Ashraf Basyoni tweet media
English
4
6
135
4.4K
Na3em
Na3em@0xNNN_ยท
{ููŽุฑูุญููŠู†ูŽ ุจูู…ูŽุง ุขุชูŽุงู‡ูู…ู ุงู„ู„ูŽู‘ู‡ู ู…ูู†ู’ ููŽุถู’ู„ูู‡ู} ุงู„ู„ู‡ู… ู„ูƒ ุงู„ุญู…ุฏ ุงู†ุฌุงุฒ ุฌุฏูŠุฏย ูŠุถุงู ููŠ ู…ุณูŠุฑุชูŠ ุงู„ู…ู‡ู†ูŠุฉ ู‚ุฏุฑุช ุงูƒุชุดู ุซุบุฑุฉ ุนู„ู‰ ูˆูƒุงู„ุฉ ุงู„ูุถุงุก ุงู„ุงู…ุฑูŠูƒูŠุฉ ู†ุงุณุง ูˆุจูุถู„ ุงู„ู„ู‡ ุชู… ู‚ุจูˆู„ ุงู„ุซุบุฑุฉ ูˆู…ุนุงู„ุฌุชู‡ุง ุงู„ุญู…ุฏู„ู„ู‡ ุฏุงุฆู…ุง ูˆุงุจุฏุงโœจ
Na3em tweet media
ุงู„ุนุฑุจูŠุฉ
262
244
13.7K
1.7M
Ashraf Basyoni
Ashraf Basyoni@AshrafBasyoni4ยท
ุงู„ุญู…ุฏ ู„ู„ู‡ The application only checks whether an email exists during account creation, not on account modification. Inside my org, thereโ€™s an option to add users, when I try to add an existing email, it correctly says โ€œuser already existsโ€ and blocks it. But when I add a new user with a non-existing email, it gets created normally and I have full access, I can change the name, email, and password. Then I tried to change that email to one that already exists, and the system didnโ€™t perform any check, allowing me to link it to the victimโ€™s account and take full control #InfoSec #BugBounty #infosecurity
Ashraf Basyoni tweet media
English
4
4
144
6.9K