Ahmed Ezzat

@theonlyzagros امتحانات ايه؟ انا مسافر بالتوفيق انت

@BitTheByte انت بتزلني يعم.منتا لو صاحب سالك كنت جيت تhunt معايا مش تقولي امتحانات وكلام فارغ😢

دلوقتي فاكرين تبعتوا invitation منا كنت مرمي في الاجازه محدش عبرني

@thedawgyg Thanks!

@BitTheByte Parameters. Its a normal get based SSRF, with no host header

When testing for SSRF, change the HTTP version from 1.1 to HTTP/0.9 and remove the host header completely. This has worked to bypass several SSRF fixes in the past. #bugbountytip #bugbountytip #bugbounty

@padovah4ck @msftsecresponse Congratulations 🎉

Whoops 😎! I've been acknowledge on #Microsoft #Security #Researcher page for my finding! Thanks @msftsecresponse ! portal.msrc.microsoft.com/en-us/security…