b4l4

Reported a Missing Authorization vulnerability in Claude Code to Anthropic — just triaged as High severity (7.7). Details withheld until a fix ships. Another one for the bug bounty log. #bugbounty #infosec #AI #ClaudeCode

Found a sandbox escape in a Google product. Status: DUPLICATE Someone out there had the exact same 2am thought as me and typed faster. Respect, whoever you are. #bugbounty #AI

🎉Yes, I was awarded $3,700 for a bug bounty + $50 for the retest verification. Total: $3,750 ✅ Thanks to the Anthropic security team for the fast response and for marking the report as Resolved. Appreciate the recognition! #BugBounty #Claude #ClaudeCode #AI #AISecurity

Reported an Improper Access Control vulnerability on partners.shopify.com to Shopify — just triaged as High severity (7-8.9). Details withheld until remediation. #bugbounty #infosec #Shopify

I'm on the waitlist for @perplexity_ai's new agentic browser, Comet: perplexity.ai/comet @balabounty50675

Black Friday warmup 🔥 Get a chance to win a SecurityTrails swag pack: Awesome t-shirt ☑️ Classic (and a favorite) hacker hoodie ☑️ Sticker ☑️ RT this tweet and make sure to follow @securitytrails - one winner will be chosen randomly on November 24th 2022, at 12PM EST.

A family away from family? Harbor’s got his! Wishing everyone a Happy Diwali.

Firing 8 Account Takeover Methods by @0xMaruf (Like-Share-Retweet)

30 cybersecurity search engines for researchers: 1. Dehashed—View leaked credentials. 2. SecurityTrails—Extensive DNS data. 3. DorkSearch—Really fast Google dorking. 4. ExploitDB—Archive of various exploits. 5. ZoomEye—Gather information about targets.

Bug Testing Methodology Series: 𝐈𝐃𝐎𝐑 (𝐈𝐧𝐬𝐞𝐜𝐮𝐫𝐞 𝐃𝐢𝐫𝐞𝐜𝐭 𝐎𝐛𝐣𝐞𝐜𝐭 𝐑𝐞𝐟𝐞𝐫𝐞𝐧𝐜𝐞) Learn how to test for IDORs step by step on real #bugbounty programs. Thread🧵👇 #cybersecurity #cybersecuritytips #infosec #hacking #bugbountytips #infosecurity

IDOR Checklist

10 API-Security-Tips 🌵 Part : II The API uses Authorization header? Forget about CSRF! If authentication mechanism doesn't support cookies, the API is protected against CSRF by design. #cybersecurity #hacking #bugbounty #bugbountytips #infosec Part : 1 & API TIP: 1/11 👇🏿✔

Recon Methodology | Resources🔽| offensity.com/en/blog/just-a… book.hacktricks.xyz/generic-method… dhiyaneshgeek.github.io/bug/bounty/202… infosecwriteups.com/recon-methodol… sidxparab.medium.com/best-bugbounty… vedanttekale20.medium.com/spend-more-tim… gowthams.gitbook.io/bughunter-hand… #bugbountytip #bugbountytips #recon #cybersecurity #Pentesting (1/2)

Nice talk by @mhmdiaa youtu.be/3Q-QyGlc_Xk Slides: speakerdeck.com/mhmdiaa/automa…

Bug Bounty Tips Collection!🙂🔥 #infosec #bugbounty #bugbountytips #cybersecurity #0xRobiul

Deliberate Vulnerable API security environments for Bug-Bounty Hunting (Part - 1): -> github.com/API-Security/A… -> github.com/OWASP/crAPI -> github.com/dolevf/Damn-Vu… -> github.com/ne0z/DamnVulne… #CyberSecurity #cybersecuritytips #bugbountytip #BugBounty #penetrationtesting #Secure

Cyber-Bookmarks: a list of bookmarks that contains lists of resources/articles that will help bug bounty hunters with resources that are useful during their bug bounty journey. x0rb3l.github.io/Cyber-Bookmark… #cybersecurity #malware #bugbounty #hacking

@MeAsHacker_HNA @SaveToNotion @SaveToNotion #Thread

@MeAsHacker_HNA @SaveToNotion

20 Top Videos to Master Recon 👑 #bugbountytips 🧵👇🏻