@sratarun

Cyber security researcher and Bug bounty hunter

 India
Joined September 2016
  • Tweets866
  • Following1K
  • Followers2.4K
199Media
Listed on #Google Honorable Mentions @Alra3ees @secuninja @eSecHax0r @s0md3v
1
26
Tarun mahour retweeted
Feng Xue
@s0whatOct 24
POC github.com/Percivalll/php2sh…

GitHub - Percivalll/php2shell-wordpress-rce: php2shell WordPress RCE proof of concept (PHP 8.3.35 /...

php2shell WordPress RCE proof of concept (PHP 8.3.35 / WordPress 7.1.2) - Percivalll/php2shell-wordpress-rce

github.com
Feng Xue
@s0whatOct 23
Wordpress universal RCE by Percivalll #PHP2Shell
3
25
2
177
20,450
Do you remember when you joined X? I do! #MyXAnniversary
112
Run iOS 27 full screen in browser on Web UI no extra apps needed. Control everything all in one place remotely from Chrome, like never before. - github.com/doronz88/pymobile…
3
46
1
335
25,945
I have successfully bypassed DOMPurify version 3.4.5.
30
2,223
Burp Suite Secret Finder - Burp Suite Extension To Discover Apikeys/Tokens From HTTP Response⚡️ > github.com/m4ll0k/BurpSuite-… #bugbounty #cybersec #bugbountytips
17
106
373
27,300
Use NextJS? Recon ✨ A quick way to find "all" paths for Next.js websites: DevTools->Console console.log(__BUILD_MANIFEST.sortedPages) javascript​:console.log(__BUILD_MANIFEST.sortedPages.join('\n')); Cred = linkedin.com/in/0xsojalsec?u… #infosec #cybersec #bugbountytips
9
195
1,068
50,146
👿👿After a long time, finally got a Pwn again! 💀💻 This time it’s a Windows WebApp RCE 🧠⚡ Feels great to get that exploit adrenaline back! 🚀 #BugBounty #RCE #HackerVibes #HackTrainingHackers TrainingHack Training
2
13
116
6,320
Nice list of non-latin alphabet payloads by @Yass1nMohamed github.com/yassinmohamed1111…

superxss/README.md at main · yassinmohamed1111/superxss

Just A list Of Some Multilingual XSS Payloads and other weird ones i made - yassinmohamed1111/superxss

github.com
30
126
9,629
Welcome to XSS Under Siege — an advanced-level XSS challenge designed to push your skills to the limit. 📷Challange Link := > ba70-2401-4900-883f-7dcf-48b… @sudhanshur705 @Assass1nmarcos
1
4
285
الحمد لله♥️ I got my first 2 bounty rewards from Standoff365 (1 public, 1 private). Still got accepted reports pending, including a High severity in the platform itself! Great experience with their professional and respectful teams. 🔗 standoff365.com/en-US/profil… #infosecurity
8
6
107
4,854
Tarun mahour retweeted
Anton
@therceman2 Jul 2025
Bug Bounty Cheat Sheet File Upload Extension Splitting
3
81
2
455
30,680
When you search for your password on Have I Been Pwned, it gets saved there, meaning you've been pwned 😅🤣👀💻😂 @intigriti @CoyEmerald1
290
📷 XSS Challenge Solution Recently, I tweet a small XSS challenge, and today I’m sharing its solution! 📷 In this video, I demonstrate how to bypass < and > filters to exploit a vulnerability caused by a misused function named "include" in the code. Poc: facebook.com/share/v/1BhCaua…
2
203
Small XSS Challenge: Can You Find the Bypass? 🚀💻 Please let me know in comments :) If you want the solution, just retweet this! 🔄
1
4
471
@NullSecurityX @xssdoctor @CoyEmerald1 @intigriti
1
178
😅
101
Follow for more on facebook : facebook.com/share/15a7juV8V…
1
120
Sudo -rf * 😅😅
3
156
SubSniper - Subdomain Takeover Checker chrome extension SubSniper to check subdomains for potential takeover vulnerabilities. It uses body fingerprinting to alert you when a subdomain is vulnerable to takeover github.com/tarun776/SubSnipe… @sudhanshur705 @Assass1nmarcos
5
208
Deep Subdomain discovery through alterations and permutations : cat subdomainlist.txt | dnsgen -w wordlist.txt - | puredns -r resolvers.txt @Assass1nmarcos @ADITYASHENDE17 @sudhanshur705 @Alra3ees
1
1
14
2,237
Load more