Security Researcher 🇮🇳
Jharkhand, India
Joined November 2017
- Tweets49
- Following84
- Followers1.2K
- Likes314
[$10,000] Google Jules — The Silent Code Heist - Stealing Github Codes Remotely
medium.com/@avinash_/10-000-…
![[$10,000] Google Jules — The Silent Code Heist - Stealing Github Codes Remotely](https://pbs.twimg.com/card_img/2117615382601310208/FPStUgsc?format=jpg&name=800x419)
Avinash Kumar retweeted
Stop blaming AI slop for what bug bounty platforms did to themselves.
👇 wrote down some thoughts about the state of triage
clawd.it/posts/14-to-kara-al…
Avinash Kumar retweeted
Great find, @itsAvinash_ !! 🙌
This tweet has reached 8.3K users and gained over 196 likes, making it one of the most liked disclosed report tweets on @h1Disclosed
@Hacker0x01 @jobertabma
#bugbounty #bugbountytips #cybersecurity
⚡ The /reports/:id.json endpoint discloses potentially sensitive user attributes when reporter summ...
👨🏻💻 @itsavinash_ ➟ HackerOne
🆘 Critical
💰 $25,000
🔗 hackerone.com/reports/300051…
#bugbounty #bugbountytips #cybersecurity #infosec
Avinash Kumar retweeted
⚡ The /reports/:id.json endpoint discloses potentially sensitive user attributes when reporter summ...
👨🏻💻 @itsavinash_ ➟ HackerOne
🆘 Critical
💰 $25,000
🔗 hackerone.com/reports/300051…
#bugbounty #bugbountytips #cybersecurity #infosec
Avinash Kumar retweeted
This was a great find and had a super interesting root cause: hackerone.com/reports/300051…
Avinash Kumar retweeted
It's a good time to repost this: rez0.blog/hacking/cybersecur…
Avinash Kumar retweeted
Stealing passwords from infosec Mastodon - without bypassing CSP
portswigger.net/research/ste…
Avinash Kumar retweeted
I created a guide to give direction to folks interested in hacking and to talk about mental issues that people often face.
Skim through it and let me know how it can be improved. Thanks.
github.com/s0md3v/be-a-hacke…
Avinash Kumar retweeted
Thread: over the years, I had countless infosec newcomers ask me how to build a successful career in the field.
I don't have a recipe for success; but there are several things I learned over the years, and they're a bit different from the usual career advice you hear. (Thread)
Avinash Kumar retweeted
Microsoft Account Takeover! 😊😇 Thank you very much @msftsecresponse for the bounty! 🙏🙏🙏
Write up - thezerohack.com/how-i-might-…
Avinash Kumar retweeted
Finally, the Most awaited write-up is here , SSRF (Server Side Request Forgery) worth $4,913 | My Highest Bounty Ever!
Kudos to @TechFenixSec Red team for helping me throughout the research
Retweet if you like it.🙂
#bugbounty
medium.com/techfenix/ssrf-se…
Avinash Kumar retweeted
I wrote a post on @assetnote's blog about hacking in bug bounties for the last four years. This should give you a good idea on what I've been reporting and how I find bugs and incorporate them back into our platform.
blog.assetnote.io/2020/09/15…
Avinash Kumar retweeted
Zero-day in Sign in with Apple - bounty $100k
bhavukjain.com/blog/2020/05/…
Avinash Kumar retweeted
🎉🎉we are #announcing our long awaited project for the community projectdiscovery.io, it’s a cloud based platform for continuous recon and monitoring, please have a look on product video and blog and give a thought about it.
medium.com/@projectdiscovery…
youtube.com/watch?v=xxV-wSFC…
Avinash Kumar retweeted
One of those humbling stories that make you wonder if everything you do is even a fraction as impactful as the work of people like Kamalathal. I notice she still uses a wood-burning stove.If anyone knows her I’d be happy to ‘invest’ in her business & buy her an LPG fueled stove.
