uoqki

@MrxXb12 keep up the grind

Top 12 worldwide this month on Bugcrowd for P1/P2 🔥🌍 #1 in Algeria 🇩🇿🥇 Alhamdulillah — الحمد لله Still grinding. Bigger goals ahead 🚀 #BugBounty #CyberSecurity #EthicalHacking #bugcrowd

Israeli soldiers torture a one-year-old child in Gaza, including burning his leg with a cigarette and inserting a nail into his leg, according to a report, to pressure his father to make confessions trtworld.com/article/346872…

Never Forget .

@IDF BRUH

The IDF wishes a peaceful Ramadan Kareem to all who celebrate!

@0xanis_ @AmirMSafari any tips please !

@AmirMSafari Very fun challenge !!

Can you spot the XSS vulnerability? 👀 Test it out live at: pwnbox.xyz

🚨BREAKING: The Gaza Strip is currently witnessing heavy and intermittent Israeli airstrikes across multiple areas.

🚨BREAKING: Conditions in Gaza are catastrophic. 11.12.2025

@MrxXb12 @Bugcrowd happy for you ,🔥

Alhamdulillah, i have reached 1000pts on @Bugcrowd ! Grateful for this journey and hoping for greater growth, inshAllah

Here’s my methodology (P.S. I’ve been terribly lazy lately) 1. I use gau to crawl the target (with api keys) 2. I use grep to filter junk and match question mark '?' 3. I use uro to get unique urls 4. I test params one by one Links to the tools below.

@malekmesdour What a technique you pulled

I found an SQLi on the main app and I was able to execute any SQL function. They “fixed” it in two days and downgraded it to High, saying it was “read-only”💀 Anyway, below how I bypassed the WAF using parameter pollution #BugBounty #bugbountytips

@zack0x01 @malekmesdour

release of our new paper (w/ @inzo____) which resulted in CVE-2025-64525: Astro framework and standards weaponization from path-based middleware protection bypass to potential SSRF & XSS + full bypass of CVE-2025-61925 on @astrodotbuild zhero-web-sec.github.io/research-and-t…

All eyes on Sudan !!!

@malekmesdour Some times they forget that those bug hunters are saving them from millions $ of losses

Dear bug bounty hunters, I want you to share more about the times when bug bounty programs have ripped you off. We don’t talk about it enough that’s why it keeps happening, and why these bug bounty platforms continue to fail to protect us. #BugBounty #Scam

Israel tortured and sexually humiliated Greta Thunberg. Some excerpts from her interview with the Swedish paper Aftonblatet: "They grab me, pull me to the ground, and throw an Israeli flag over me." "They dragged me to the opposite side from where the others were sitting, and I had the flag around me the whole time. They hit and kicked me." "They moved me very brutally to a corner that I was turned towards. ‘A special place for a special lady’, they said. And then they had learned ‘Lilla hora’ (Little whore) and ‘Hora Greta’ (Whore Greta) in Swedish, which they repeated all the time." In the corner where Greta was sitting, the police placed a flag. "The flag was placed so that it would touch me. When it fluttered and touched me, they shouted ‘Don’t touch the flag’ and kicked me in the side. After a while, my hands were tied with cable ties, very tightly. A bunch of guards lined up to take selfies with me while I was sitting like that." "They were thrown to the ground and beaten. But I could only see it out of the corner of my eye, because every time I lifted my head from the ground, I was kicked by the guard standing next to me." Greta was then taken into a building to be searched and undressed. "The guards have no empathy or humanity, and they keep taking selfies with me. There’s a lot I don’t remember. So much is happening at once. You’re in shock. You’re in pain, but you go into a state of trying to stay calm." Outside, she was forced to take off her clothes again, she says. "It was mockery, rough handling, and everything was filmed. Everything they do is extremely violent." "It was so hot, like 40 degrees. We begged the whole time: Can we have water? Can we have water? In the end, we screamed. The guards walked in front of the bars the whole time, laughing and holding up their water bottles. They threw the bottles with water in them into the trash cans in front of us." "When people fainted, we banged on the cages and asked for a doctor. Then the guards came and said, ‘We’re going to gas you.’ It was standard for them to say that." "This shows that if Israel, with the whole world watching, can treat a well-known, white person with a Swedish passport this way, just imagine what they do to Palestinians behind closed doors." Thunberg says the Swedish government greatly downplayed the abuse she and her fellow Sumud Flotilla activists suffered, and wouldn't even bring them water. "We were together and told them about the treatment we received. About the lack of food, water, about the abuse. The torture. We showed them the physical injuries we had – bruises and scratches. We gave them all our contact details – I gave them my father's number and the number of our contact in the organization. We were clear: everything we say now must be released to the media." "They didn’t do anything, they just said: ’Our job is to listen to you. We are here and you are entitled to consular support.’" "We said over and over again: we need water. And they saw that the guards had water bottles. The embassy staff said: ’We’ll make a note of that.’ One of us, Vincent, said: ’Next time we meet you, you must bring water.’ Then it took two days before the embassy staff showed up again. "They didn't bring any water, except for a small bottle of their own that was half empty. Vincent, who was in the worst shape, got to drink it. We kept asking the guards, 'Can we have some water?' but they just walked around with their water bottles and didn't answer." "I said, 'Are you going to leave us like this? If you leave now, they will beat us up.' But they just kept walking." When Aftonbladet compares emails sent by the Ministry of Foreign Affairs to relatives, with what the captives describe telling embassy staff, it becomes clear that the seriousness of the situation has been downplayed. The Ministry of Foreign Affairs describes the scene at the port, where Greta Thunberg was beaten for hours, as follows: “She told us about harsh treatment and that she had been sitting on a hard surface for a long time.” On Saturday, several media outlets published testimonies that Greta had been subjected to torture. Aftonbladet has spoken to three other members of the flotilla who largely confirm what Greta Thunberg says and who have all experienced various types of abuse and humiliation. We have also spoken to relatives. Everyone is highly critical of how the Swedish embassy staff acted.

مصادر محلية: استشهاد الصحفي صالح الجعفراوي برصاص عملاء الاحتلال في حي تل الهوى بمدينة غزة

Validation bypass via parameter pollution https://www[.]target[.]com/safe-redirect/?url=https://example[.]com&url=javascript:print() Here, strict CSP prevented me from exploiting the vulnerability. 😢 #BugBounty #bugbountytips #websecurity

When testing DOM XSS in redirection sinks, don't use javascript:alert(1) use javascript://target.com/%E2%80%A8alert(1) instead. Many targets don't validate the URL scheme, but they do validate the host. #bugbounty #bugbountytips #xss #bypass

@malekmesdour Crazy catcho tho 👏

Manchester City manager and football legend Pep Guardiola has spoken out in solidarity with Palestine, calling on people to flood the streets of Barcelona tomorrow to protest against the genocide. @PepTeam @Palestina_cat