@Unknownuser1806

Your time is limited, so don't waste it living someone else's life ... Stay Hungry. Stay Foolish. (Steve Jobs)

 twitter
medium.com/@unknownuser1806
Joined June 2019
  • Tweets820
  • Following443
  • Followers7.2K
46Media
404 followers - Followers not found
1
11
Here's the third bug. Multiple bugs were chained to achieve Facebook account takeover. Facebook account takeover due to unsafe redirects after the OAuth flow ( $30k ) ysamm.com/?p=667

Youssef Sammouda (sam0) personal blog

The goal of this blog is to share write-ups about bugs i have found in Facebook and reported to them under the Facebook bug bounty program.

ysamm.com
Youssef Sammouda (sam0)@samm0uda1 Apr 2021
I had a crazy week in February in which i was able to find 3 interesting account takeovers in Facebook and resulted a total of $100k in bounties. I'm sharing details about two of them and soon the third: ysamm.com/?p=646 ysamm.com/?p=654
11
114
2
456
There is always two types of people - One who get inspired by seeing others and want to be like them - And other get jealous to see other's success. Make sure be in 1st type.
STÖK ✌️
@stokfredrik30 Apr 2021
It’s easy to get overwhelmed when you watch others work, may it be art, music, creative, content, hacking, research, write ups, bounties, work life. Just remember, it’s not a competition, there is enough room and abundance for all of us to succeed, if we want to and work for it.
2
6
Some notes from "How to Crush Bug Bounties in the first 12 Months" by @hakluke #bugbountytips #BugBounty
12
285
694
Burned out for a long time because of 80 to 100 hour of work week, Here are top best resource that might help you to overcame it youtu.be/roVg_wgGgxQ -by @stokfredrik medium.com/@NathOnSecurity/b… by @NathOnSecurity youtu.be/84QD2SjRDic - by @thehackerish #bugbounty

Mental Hacking 4 Better Bounties (or How 2 Learn Cool Stuff)

Mental Hacking for better bounties (bug bounty) is a talk related t...

youtube.com
1
2
9
Problem was, I dont know I was burning out, Here are symtoms of burned if you never exprinced it - No long term vision of life - No confidence - No motivation - No balanced in life I love how @thehackerish explained in that video, It really helps me a lot
4
unknown retweeted
Sam Curry@samwcyo8 Oct 2020
New writeup: "We Hacked Apple for 3 Months: Here’s What We Found" Featuring... @bbuerhaus, @NahamSec, @erbbysam, and @_StaticFlow_ samcurry.net/hacking-apple

We Hacked Apple for 3 Months: Here’s What We Found

Between the period of July 6th to October 6th myself, Brett Buerhaus, Ben Sadeghipour, Samuel Erb, and Tanner Barnes worked together and hacked on the Apple bug bounty program.

samcurry.net
64
1,302
152
3,211
12 y.o we were hacking because we had fun. 0 knowndlege of anything called bug bounty neither money was a motivation. I feel most of newcomers don't really enjoy hacking/learning but have the only goal of "fast" money. Remember, you can't pick a fruit without watering the plant.
21
136
9
689
unknown retweeted
shubs
@infosec_au17 Sep 2020
I wrote a post on @assetnote's blog about hacking in bug bounties for the last four years. This should give you a good idea on what I've been reporting and how I find bugs and incorporate them back into our platform. blog.assetnote.io/2020/09/15…

Hacking on Bug Bounties for Four Years

Four years of bug bounty hunting: lessons, techniques, tooling evolution, and notable findings from 2016 to 2020.

slcyber.io
12
309
22
760
I compiled a mind-map of all the tools I use for my day to day Bug Bounty journey :) Please let me know if you find his helpful 👐 🥰🔐 full resolution of the image here: blog.it-securityguard.com/pa…
22
366
10
1,089
Hey bountyhunters, here is an honest tip: Don't rely on twitter. Stop consuming what makes other hunters money, and start hunting and getting experience with methodologies, techniques, tools, and bug-classes that work for you. #bugbountytips #bugbounty
8
33
4
213
How I Hacked Facebook Again! Unauthenticated RCE on MobileIron MDM (slides inside) blog.orange.tw/2020/09/how-i… #HITCON
52
1,197
60
2,803
Wow! RT @techinsider: How hackers can compromise your computer monitor

How hackers can compromise your computer monitor

A cybersecurity expert has figured out a way that someone could trick you into revealing private information.

11
307
38
543
Just fully disclosed ~30 reports encompassing over two years of hacking on New Relic - hackerone.com/jon_bottarini - most of the reports are PrivEsc/IDOR but there are some business logic bugs in here as well. No recon here! Just getting really familiar with the application itself :)

HackerOne profile - jon_bottarini

I ❤️ privilege escalation - https://www.jonbottarini.com

hackerone.com
19
166
9
596
Time for some reflection: what is one thing #BugBounty taught you about yourself? 🧘 Let us know in the comments! 💬
40
6
1
76
unknown retweeted
Kei
@keikane_14 Sep 2019
As promised, posting the next lazy write-up, this is how I went from Git to RCE. Bounty: $3500 #bug #bughunter #bugbounty #bounty If you enjoy these and want to see more, I will be posting others soon again.
14
217
5
815
Burp Extensions that I use: (1/n) 1. Autorize - To Test BACs 2. Burp Bounty - Profile-based Scanner 3. Active Scan++ - Add more power to Burp's Active Scanner 4. AuthMatrix - Authorization/PrivEsc Checks 5. Broken Link Hijacking - For BLH #bugbountytips #bugbounty
16
272
5
626
Become the hero of your own story.
12
81
4
354
WTF??? 0 following, 0 follower??
9
16
Now everything is normal again
1
2
Load more