omet hasan
933 posts
English
$312,500 worth of stored/reflected XSS vulnerabilities in Meta’s Conversions API Gateway allowed Javascript code to run on any Facebook domain and millions of third-party websites. The flaw enabled zero-click Facebook account takeover and more:
ysamm.com/uncategorized/…
English
"An Israeli drone-fired missile killed an innocent Palestinian girl."
Ignore it and keep scrolling
Al Jazeera English@AJEnglish
Exclusive footage newly obtained by Al Jazeera captures the harrowing moment an Israeli drone-fired missile killed a Palestinian girl carrying water in Jabalia, northern Gaza, in December 2024. Two men are later seen retrieving her body.
English
If you’re scrolling, PLEASE leave a dot . it's just a dot .
gofund.me/4555ee67
Yousef in Gaza 🇵🇸@yousefQasem1998
I WILL DIE😭 THIS DISH IS FOR EIGHT members of MY Family for the whole day, but my father and mother refrained from eating so that we could eat AND satisfy our HUNGER, AND they did not eat anythin 50$ 3 replies — even dots — can break the algorithm 😭 gofund.me/4555ee67
English
100,000 children are going to die in #Gaza
الجزيرة - عاجل@AJABreaking
عاجل | المكتب الإعلامي الحكومي بغزة: مقتلة جماعية مرتقبة بحق 100,000 طفل خلال أيام إن لم يتم إدخال حليب الأطفال فورا
English
Yay, I was awarded a $1,250 bounty on @Hacker0x01! hackerone.com/0x0_asif #TogetherWeHitHarder
Bug : R-XSS
English
Had a really good year this year on @Hacker0x01 !
💥 Ranked #56 globally with 4k rep & 24 impact
💥 Top 200 all-time
💥 Attended 2 LHEs & finally went to my first in-person event!
💥 Won the Eliminator reward @EpicGames in Vegas + my first Show & Tell!
💥 Became Pentester Lead @HackerOne
💥 Earned $250k+ from 200 bugs in 2024 which is my highest yet on a single platform.
💥 Got a 24 months streak with 8523 reputation
Was a really long and exhausting year, if you have asked me 1 year ago if I thought I will be able to achieve all of this I would definitely say no considering my full time job and university, I also met really great ppl along the journey who taught me lots of stuff which I wouldn't be able to achieve without their help.
Strangely, quite puzzled now on what is the next steps, what should I do or what am I supposed to do, pretty much have 0 idea what to next now, but maybe it will all get sorted out with a good vacation? will see, but all I can tell you is that hard work really pays off, and if bug bounty taught me anything, it would be patience and calmness, as you really need it much in this field.
English
Yay! we were rewarded with $76,000 on our @Hacker0x01 submission with @jayesh25 @_naaash_
#hackerone #bugbounty #h10131
English
I earned $300 for my submission on @bugcrowd bugcrowd.com/opi33500 #ItTakesACrowd
all #credit @omethasan vai
English
If you are starting OAuth testing, this might help you out ✨
TECNO Security Response Center@TecnoSRC
Leonidas D. Ace(@L3onid1s ) from Bangladesh shared a vulnerability case with us: How attackers exploit OAuth vulnerabilities by misusing redirect_uri and state parameters to take over user accounts. Details: security.tecno.com/SRC/blogdetail… #hack #infosec #bugbounty #AppSec
English
⚠️ #XSS payload showing a technique against SYNTAX aware filters (not keyword based)
<!--%26gt;<TextArea><!--><Script>/*/</TextArea>/*/alert(1)</Script>
↪️ TextArea elements are safe/trusted but those are tricky due to comments.
PoC 💣
brutelogic.com.br/xss.php?a=%3C!…
#hack2learn 💪
English
Yay, I was awarded a $882 bounty on @Hacker0x01! hackerone.com/0x0_asif #TogetherWeHitHarder
Bug: IDOR in iOS app.
English
English
English
আসাদ😡😡 নূর যেভাবে কুরআনের পাতা ছিড়ে কোরআনকে ছুড়ে ফেলে দিল , আইনশৃঙ্খলা বাহিনীর প্রতি জোরালো আহ্বান এই নাস্তিক কে আইনের আওতায় এনে কঠোর শাস্তির ব্যবস্থা করা হোক ।
বাংলা
omet hasan retweetledi
