what_web

Level 3 pentesterlab Pro 1 month, @Hacker0x01

2025 Hack the Challenge 1st 🏆

Joined 3.5K club @Hacker0x01 Thanks

Thanks, @Hacker0x01

I recently found out about a platform called #hackthebox. This platform provides a learning space and information to learn various knowledge such as cybersecurity, web, network, AI, etc. I think it would be very useful for researchers who want to learn more about information security. The content is so vast that this platform seems much better than other educational platforms. #bugbounty

@arshiyaiha @Hacker0x01 private program

@jae_hak99 @Hacker0x01 Congrats bro.priv8 or pub?

I have 15 reports Pending program review. :) I hope the final result comes out soon 😃😃 @Hacker0x01 #bugbounty

@YourFinalSin @Hacker0x01 🔥🔥

@jae_hak99 @Hacker0x01 Let’s goo 💪

@0trusts @Hacker0x01 Haha😅

@jae_hak99 @Hacker0x01 70 open😔

@badcrack3r @Hacker0x01 I'm looking forward to next weekday

@jae_hak99 @Hacker0x01 Good luck!

When a token, key, etc. is found in a sensitive repository, we have developed a tool that tests whether the token or key is actually valid and if so, accessible, and automatically lists only the valid values ​​in a .html file. Now you don't have to manually test whether tokens and API keys found in your organization's repository are actually valid. How it works is that we fully automate the validation by connecting to a separate Proof of Concept (PoC) built for each token to check whether the API function is actually accessible in the repository (e.g. GitHub, Slack, multiple DBs). It detects whether the token is actually accessible in your organization. Validated tokens output a live token in a .html file.

Today during fuzzing, I found an employee-only domain within the same domain. The domain was public to the general public and had an email verification process, but it did not exist in the account interface.

@error404sec All found in one domain

@jae_hak99 Several different subdomains?

I've been busy for a while. So I took a long break for 3-4 years. I recently started the #Hacker0x01 bug bounty activity again in May, and I found 20 vulnerabilities in the BBP program All are under evaluation and review, and some are already being fixed. Hope it goes well :)

@M1cr0hunt3r Based on my own checklist + source code analysis

@jae_hak99 Congratulations Manualy or how?

@badcrack3r Thank you 😄

@jae_hak99 Great work! 👏