My tips: where it is not feasible to execute XSS. shop? Try using this payload: <h1>!!</h1><br/><h2><p style=\"color:red;\">there is a new discount code of 80%. Take advantage of it now!</p><form action=\"
https://url/\"><button
type=\"submit\">Click Here</button></h2>
#bugbounty
Payload that has given me some satisfaction in these periods. XSS Bypass waf
`<dETAILS%0aopen%0aonToGgle%0a%3d%0aa%3dprompt,a()%20x>`
#BugBounty
#bugbountytip
#cybersecurity
Yesterday I found an RCE on the
@yeswehack
platform.
1. after the recon of all subdomains, many skip an essential step: the port scan.
2. with naabu I found an uncommon port with an active web server, Vulnerable to a CVE of 2017. Reverse shell obtained.
#bugbountytips
#bugbounty
Happy to have reached and exceeded 5000 points thanks to two critical vulnerabilities accepted today. 16th in the global ranking.
@yeswehack
#bugbounty
🤙🏻😊😎
I finished sixth in
@yeswehack
Q2 2024. I had a goal of getting back into the top five to upgrade my poster in my hacking room, but by a few points it fell short. 😄😁😎 too strong there in front.
#BugBounty
Yay, I was awarded a $500 bounty on
@Hacker0x01
!
#TogetherWeHitHarder
always check whether a public document is confidential or not :-) If yes, definitely look to see if others have been erroneously made public.
#BugBounty
Just got a reward for a critical vulnerability submitted on
@yeswehack
-- Insecure Direct Object Reference (IDOR) (CWE-639).
#YesWeRHackers
Come on!!!!
night of rewards. Over the past few weeks I have focused a lot on a
@Hacker0x01
program with premium features and licences. I got to parts that were not easy to get to without investing money, but I opened a lot of reports. Try investing
#bugbounty
#bugbountytips
It was a very tough month, but really fun. I did a lot of hacking with some friends as well. I usually don't look at any rankings, however this time, a look is ok.
@Issam_Rabhi
congrats, very impressive.
#YesWeRHackers
@yeswehack
#bugbounty
An exceptional year of bug bounty that led me to be 8th in the world in
@yeswehack
in 2023 and 26th ever. I have reported so many vulnerabilities to so many companies, from low to critical impacts.
#YesWeRHackers
#BugBounty
Just got a reward for a critical vulnerability submitted on
@yeswehack
-- Use of Hard-coded Password (CWE-259).
#YesWeRHackers
- First Critical of 2024 :-)
#BugBounty
Just got a reward for a critical vulnerability submitted on
@yeswehack
-- Insecure Direct Object Reference (IDOR) (CWE-639).
#YesWeRHackers
Good Morning :-)
Thanks to
@yeswehack
for this reward.
July/August/September: I worked on a BugBounty private program, where I reported more than 15 vulnerabilities. thanks to this I got this award:
#DOZER
.
"study your target for a long time and hit."
#bugbounty
#cybersecurity
#YesWeRHackers
This weekend, I completed the API Penetration Testing course at designed by
@hAPI_hacker
.
This course + its book Hacking Apis is the perfect combination for studying, learning and improving on API security testing.
#BugBounty
#penetrationtest
#apisecurity
Thanks to
@yeswehack
for these awards.
KING OF THE HILL: This achievement is awarded to hackers staying on the leaderboard’s top 5 for 3 months.
SAPIENS: This achievement is awarded to hackers having submitted a valid report each month for 12 months.
#bugbounty
#YesWeRHackers
Just got a reward for a vulnerability submitted on
@yeswehack
-- Information Disclosure (CWE-200).
#YesWeRHackers
--- Thanks
@GodfatherOrwa
, this is an api leak i learned from your videos. :-)
Just got a reward for a vulnerability submitted on
@yeswehack
-- Cross-site Scripting (XSS) - Reflected (CWE-79).
#YesWeRHackers
with new CVE-2023-24488 on citrix :-) Payload: %0d%0a%0d%0a<script>alert(document.domain)</script>