Devang Solanki

I have compiled the list of resources from which I have learned Android hacking and put it in this repository in the hope that it will help you guys. github.com/Devang-Solanki… #BugBounty #bugbountytips #bughunting #Hacking #Pentesting

I updated this tool and added support for Azure and privilege escalation checks for AWS.

I've been getting tons of AWS and GCP keys, so I vibe coded a tool to bruteforce IAM permissions for my own needs. github.com/Devang-Solanki… #BugBounty #bugbountytips #OpenSource

@tecchirp @msftsecresponse Reported on May 2nd, awarded on May 13th.

@devangsolankii @msftsecresponse Congrats how long it took to triage ?

I woke up to a $2500 bounty from @msftsecresponse today! #BugBounty #MicrosoftCorporation

@battosai_kensi @Hacker0x01 This bug was not found using any AI

@devangsolankii @Hacker0x01 Congratulations 👏. You definitely used this skill, don't lie. Cummonn github.com/sector-b79/web…

Got a reward on @Hacker0x01! Even though the assets were out of scope, they still gave me the highest bounty from the critical tier. Programs like this really make you believe in bug bounties again. #bugbounty #hackerone

@Arqam992 @Hacker0x01 hackerone.com/flutteruki

@devangsolankii @Hacker0x01 Thats why you chose not to reveal the program?

Program is hackerone.com/flutteruki

@4osp3l Hello

@adxtyahq @Wise Try out @Infinityapp_in dashboard.infinityapp.in/auth/signup?re…

I genuinely love you @wise for this conversion rate 🫶🏻

@the_IDORminator I actually noticed this a long time ago you can even find it mentioned in my blog. redhuntlabs.com/blog/echoes-of…

I hear tale Google API keys may make you $$ in bounty now: trufflesecurity.com/blog/google-ap… Anybody pulled this off yet?

@the_IDORminator Yes, I earned $1,000 from it. In fact, this capability has been available in a MongoDB tool from the beginning it’s just that the TruffleHog team wrote a blog post about it. github.com/mongodb/kingfi…

Does anyone have an invite to this private program on hackerone? I'm willing to split the bounty 70:30 Payyit and Fyntiq payyit.com fyntiq.com #BugBounty #bugbountytips

@jerubbaal5A That is fine but saying all this shit isn't🙃

@devangsolankii They just don’t want to pay 😂😂😂

Reported a bug. Company now thinks it was an inside job🙃 #BugBounty

@krishnsec Royal Rumble?

I’m planning to give away a 1-month Burp Suite Pro license. what’s the ideal way to do this? #BugBounty

@S1r1u5_ github.com/fatguru/CVE-20… What about this? Seems genuine

Either I am dumb or missing something. This PoC for React RCE is unrealistic. github.com/ejpir/CVE-2025…

Hello! Just published a new research with ( @sml555_ , @codecancare) 🍻 Who Needs A Blind XSS? hx01.me/hailcsv.htm #CyberSecurity #BugBounty

@adarshshettyy Great find👏

🚨Abusing an 'Intended' GraphQL API Design: A One-Click Exploit to Steal GitLab CI/CD Secrets🚨 My latest bug bounty finding exploited a flaw in GitLab’s GraphQL API design. Full technical write-up: albatraoz.hashnode.dev/stealing-gitla… #BugBounty #GitLab #AppSec #HackerOne #GraphQL