
“Every bug found is one step closer to digital security” @HackenProof Security Researcher
Joined August 2020
- Tweets367
- Following1.1K
- Followers169
- Likes2.8K
0x403for retweeted
📣📣📣 Calling all Chrome bug hunters! 📣📣📣
Rules updates: We're rewarding more types of deep security research, recognizing high-value fixes across more severity tiers, and providing new opportunities for researcher recognition.
For details, see our latest blog post 👇
bughunters.google.com/blog/c…
0x403for retweeted
Alhamdulillah I have been rewarded with $$$$
Write-up is now available you can read it here
medium.com/@Tyrion404/i-coul…
0x403for retweeted
$8,800 for a Redirect Nobody Validated: Stealing OAuth Tokens Through an Open Redirect — by t4nv1
medium.com/@t4nv1/8-800-for-…
Join us on Telegram:
t.me/bugbountywizard
#bugbounty #bugbountytips #bugbountytip
0x403for retweeted
Google paid me $90,000 for this RCE simonkoeck.com/writeups/goog…
0x403for retweeted
IDor + Missing Authorization
Write-up For Critical Bug is now available
medium.com/@Tyrion404/zero-p…
Follow me to stay updated with more Findings
0x403for retweeted
I liked these 4 Bug Bounty disclosures:
hackerone.com/reports/341876
hackerone.com/reports/188719
hackerone.com/reports/541169
hackerone.com/reports/180142…
Nice read.
0x403for retweeted
Second bounty. Everyone chains SSTI to RCE — I chained it to account takeover instead. $1,000.
Write-up 👇
medium.com/@HariHax/everyone…
#bugbounty #cybersecurity #infosec
0x403for retweeted
FROM INTERNET
1)The Art of Business Logic — When the Checkout Got the Price Wrong
zuksh.medium.com/the-art-of-…
2)How a “Draft Auto-Save” Feature Exposed Confidential Enterprise Board Documents leading to $4,500 Bounty
medium.com/@t4nv1/how-a-draf…
3)How a Simple IDOR Led to Full Account Takeover
medium.com/@edemzayaniyt/how…
4)Understanding IDOR: Breaching Applications by Exploiting Logic Flaws
medium.com/@danielcostacm00/…
5)How 8 of the Top 20 HackerOne SSRF Reports Escalated to Cloud Credentials Leaks
medium.com/codetodeploy/ssrf…
6)More Criticals, Less Dopamine
dhakal-ananda.com.np/misc/mo…
7)How an Unsanitized Header Generated a $6,000 Bounty via Cache Poisoning
medium.com/@t4nv1/how-an-uns…
8)Unauthenticated Strapi Relational-Filter Leak → Super-Admin Takeover → Server-Side Code Execution
medium.com/@redhunter01/unau…
9)How Broken OAuth Flows Turn Into One-Click Account Takeovers
medium.com/@tanvir.infosec/h…
10)AD Enumeration & Attacks — Skills Assessment Part II
medium.com/@Psychopath-Trave…
#bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity
0x403for retweeted
Another one, but now Let’s Talk About Encryption :p
medium.com/@bxmbn/lets-talk-…
0x403for retweeted
Write-up For First Accepted Bug is now available you can read it here medium.com/@Tyrion404/from-z…
Follow Me to Stay updated with more Findings
0x403for retweeted
Hoje quero apresentar para vocês @zseano , um hacker que conta com:
- Ex Bug Hunter Fulltime na Amazon
- Ranking mundial
- +$800k em recompensas
- Um livro que ensina sua metodologia
E o melhor de tudo? Ele tem um site sobre como isso tudo foi feito.
bugbountyhunter.com
0x403for retweeted
Found a UXSS in Google Translate that allowed JavaScript execution on any domain with reflected input.
$8,500 bounty from Google. 🐛💰
Writeup → r3dpars3c.github.io/writeups…
#BugBounty #XSS #UXSS
@Hacker0x01 @LiveOverflow @Bugcrowd @zseano @intigriti @InsiderPhD @yeswehack
0x403for retweeted
#bugbountytips
Writups - infosecwriteups.com/the-cook…
0x403for retweeted
Today, HackenProof turns 9. 🎉
Since 2017, we’ve come a long way: from our first researcher joining the platform to a global community of 82,000+ security researchers. From our first valid vulnerability to 85,000+ validated reports and $26M+ in rewards paid to security researchers.
So, for our birthday, we decided to dig through the archives and see where it all started. Here are some of our favorite firsts:
🔹First researcher to join HackenProof – @jackhcable
🔹First valid vulnerability submitted – hackenproof.com/hackers/isha…
🔹First Critical vulnerability discovered – @aboul3la
🔹First major blockchain program launched – @vechainofficial
🔹First Web2 program launched – ttn.global
🔹First crowdsourced audit launched – @auroraisnear
🔹First $1M bounty payout – hackenproof.com/hackers/blaz…
🔹First blockchain cybersecurity education partnership – @hackthebox_eu
🔹First HackenProof podcast episode featuring @gkrastenov
Every step of this journey was built together with our partners, customers, team members, and the security community who trusted us along the way.
A special thank you to every researcher who has been part of the HackenProof journey. Your reports, feedback, and collaboration continue to shape the platform we build together.
9 years down – and we’re just getting started. 🚀
🔗 Share and celebrate with us → xitter.cf/intent/tweet?text=Cele…
1/ Meet M1llionz (RichMilly666), a French cybercriminal allegedly laundering assets from two violent home invasion robberies in France in April 2026 that netted $667K total, with a history of openly posting about bank and retail fraud on social media.
My work has led to a $93K Tether freeze directly tied to these attacks so far.
0x403for retweeted
Onde ler bons reports e melhorar MUITO em Bug Bounty?
- Reports da Google (ouro) > bughunters.google.com/report…
- Site com 1K de reports organizados + API bug-bounty-disclosures.verce…
- Reports escolhidos a dedo por
@busf4ctor (ref global e br) > bugbountydaily.com
0x403for retweeted
Is It Possible to Get an $850 Subscription Plan With Only $0?
Enjoy reading the write-up: medium.com/@0xMo7areb/is-it-…
Hello again.
I think this is the best write up I wrote .
the full write-up here:
zuksh.medium.com/the-art-of-…
Alhamdulillah.🤍
Happy to share that another public bug bounty report has been accepted on @YesWeHack.
Another 4-digit bounty.
#BugBounty #BusinessLogic #CyberSecurity #AppSec #YesWeHack
0x403for retweeted
الحمد الله 🤍
🤍New bug, New write-up — I hope it will be valuable for you
medium.com/@kroush333/from-g…
#bugbountytip #bugbounty #CyberSecurity






























