sᴇᴄᴜʀɪᴛʏ & ɴᴇᴛᴡᴏʀᴋ ᴀɴᴀʟʏsᴛ | ᴇᴛʜɪᴄᴀʟ ʜᴀᴄᴋᴇʀ | ᴠᴀᴘᴛ sᴇᴄᴜʀᴇᴅ 𝟹𝟶+ᴄᴏᴍᴘᴀɴɪᴇs
Joined December 2021
- Tweets55
- Following288
- Followers58
- Likes460
Honored to attend BlueHat India 2025
as a Microsoft Most Valuable Researcher (MVR)
An inspiring journey, proud moment, and unforgettable experience.
@MSFTBlueHat @msftsecresponse @msftsecurity
Kicking off 2025 with my first swag as a Most Valuable Security Researcher from Microsoft! 🎉
Thanks to the @msftsecresponse team for this recognition. Excited for an impactful year ahead and aiming for the next MVR!
#Microsoft #Mvr #MSRC #Swag
Proud to announce I'm recognized as an MVR by MSRC, ranking 66th globally! Thanks to @msftsecresponse for this honor and acknowledgment of my hard work.
#MSRC #Top100 #Cybersecurity #microsft
Happy to receive my MSRC swag for being a Quarterly Leaderboard Researcher for Q3'2023, Q4'2023, and Q1'2024! This recognition fuels my passion for improving security. Big thanks to the @msftsecresponse team for their support!
#Microsoft #swag #bugbounty
cyber_catz retweeted
We're excited to welcome security researchers partnering with Microsoft to #BlueHatIndia 🙌
Attacker injects html code in one of the victim chat, once the victim opens the message, the victim IP address and OS and Browser information is also found, I share the vulnerable URL associated with that site user, I got all the user IP, so please provide the impact for this ?
cyber_catz retweeted
Path-based xss with diffrence type methods
1: Inecject payload in every path and check xss
2: append fake parameters in every path and check xss vulnerability
3: made poc for you in your terminal
line - pastebin.com/YTKZUcs6
#infosec #bugbountytips #cybersecurite
cyber_catz retweeted
Alhamdulillah, another $1750 bounty from Indeed. First bounty in 2024 so far, looking for more from indeed ✌️✌️
Bypassing previous reports is always fun
#bugbounty
#informationsecurity
#infosecurity
cyber_catz retweeted
Indirect prompt injection is so crazy I think it might become the new blind XSS. Here’s the attack in a nutshell, illustrated by @WebSecAcademy
cyber_catz retweeted
I have found about 50 XSS on a single program,
using my automation progress that's you will find it here teapaw.org/0xElkot/status/1595549…
and @SirBagoza Tips on his videos.
#bugbountytips #xss #hackerone #h1
Hi guys , If anyone interested on Bug bounty automation see this article
medium.com/@0xelkot/how-i-ge…
#bugbountytips #SQLi #XSS #LFI #Recon
cyber_catz retweeted
This year I Completed 500k in bounties
Most rewarded vulnerabilities and the ones I always focused since the beginning:
1. XSS (all types)
2. Cache Poisoning
3. BACs
Reached this amount totally from scratch, learning from the internet.
No certs.
0 Automation.
0 Collabs.
cyber_catz retweeted
Burp Ex
403 Bypasser
5GC API Parser
Active Scan++
Backslash Powered Scanner
CO2
IP Rotate
J2EEScan
JS Link Finder
JS Miner
Logger++
Log Viewer
GAP
Distribute Damage
IIS Tilde
Look Over There
Param Miner
Software Vulnerability Scanner
SAML Raider
Autorize
Encode IP
Asset Discovery
cyber_catz retweeted
iOS Pentesting Series
Learn how to work with useful tools and apps such as Frida, Objection, 3uTools, Cydia, Burp, fsmon, fridump, SSL bypass, reFlutter etc.
Part 1: kishorbalan.medium.com/start…
Part 2: kishorbalan.medium.com/ios-p…
Part 3: kishorbalan.medium.com/ios-p… via @KishorSec
ALT iOS Pentesting Series
cyber_catz retweeted
I found a SQL on one URL but properly secured.
But found @LiveOverflow new video "HTML Sanitizer Bypass Investigation". I give it a try and I was able to bypass Cloudflare which leads to XSS.
payload: '<00 foo="<a%20href="javascript:alert('XSS-Bypass')">XSS-CLick</00>--%20/
cyber_catz retweeted
"🎉 GIVEAWAY ALERT! 🎉 We're excited to announce that we've made some improvements to our service at VulnVision! To celebrate, we're giving away 5 FREE accounts to lucky winners. To enter, simply follow @VulnVision and retweet this tweet. Winners will be announced next week.
cyber_catz retweeted
Accessing Admin Page via Blind XSS $1000 🦊
github.com/NafisiAslH/Knowle…
#bugbountytip
