png

@Younis_J_ A 3-step signup flow where step 2 gives you everything before step 3 takes your money 👀

@pngweb3 What was the scenario!!!

I just found my first bug bounty vulnerability 🎯 An e-learning platform was giving full premium access ($399 subscription) without collecting payment. Just 3 API calls. No hacking tools. Just logic. 🧠 Reported it. Doing my part to make the web safer 🤝 #BugBounty #HackerOne

@itsmeNxSTY Thanks 🙏🏼

@pngweb3 Congratulations 👏

@krigshaw Thanks dude 🙌

@pngweb3 Nice job dude.

@rootxreacher Exactly

@pngweb3 the most dangerous hacker is the one who just thinks differently

@mokashiakshat17 no

@pngweb3 Have you tried to exploit it?

🎉 Just found my first vulnerability ever!A CORS misconfiguration Access Control Allow Credentials: true reflecting arbitrary origins. Excited... until I saw "Duplicate" The bug was already reported back in 2024 and still alive after 2 years!Not the win I wanted #BugBounty

@RivalX02 Same pain haha

@pngweb3 Haha same man

@origami334 Yeah, dupes are part of the game 😅

@pngweb3 Got two dupes this week

@loop0420 Thanks for the feedback. I understand the concern about missing impact. I’ll re-evaluate the PoC and try to demonstrate a clearer security impact if there is one.

@pngweb3 Struggling to understand whether this is satire or not. On the chanve it isn't, you didnt provide a PoC that shows impact. Misconfig CORS can be fantastic if it actually works lol, means nothing if not.

@ide9x @DsokeyyV cantina

@DsokeyyV اي منصة دي؟

Duplicate🤡🤡

Vale o tempo de vocês? kkkkkk

@Secuaudit Big up

1000$ + 2000$ + 525$ #bugbounty #hackerone #bugbountytips

Solana Summer

Thanks Claude.

"2026 is gonna be my year" Me in May:

@Zaddyzaddy @BugBunny_ai @Hacker0x01 great job

Did I hear someone say AI slop? we call it "AIcurracy" 15 new findings today alone, found and reported by @BugBunny_ai @Hacker0x01 is about to get tired of seeing the bunny notifications. 🥕

@ngosytuanbug congrats

@psyuttik MEEE

Mini accounts posting to absolutely ZERO engagement

@solana_ai Two days ago it was "solanamark1176". who is Mark?