Pinned Tweet
Holiday bounties are da best! 🛣️
I was awarded a $5,250 bounty on @Hacker0x01! hackerone.com/thruster
#bugbounty
Joined the 7000 reputation club on @Hacker0x01 ! 🚀
hackerone.com/thruster
10k club coming soon🎳
Hacking Google with A.I. for $500,000
brutecat.com/r/hacking-googl…
Dhyey Choksi retweeted
All you need to do is pay your rent via Secured.
Check your eligibility here: flent.in/secured
If you’re eligible, reply with your screenshot and I’ll send you a pre-approved invite code :)
Dhyey Choksi retweeted
This month, we’re buying back rent across Bengaluru.
Pay rent on time and get ₹1,000 off, plus 1% discount on every rent payment going forward.
Not points you’ll never use.
Not a voucher buried somewhere.
Actual upfront discount on rent.
Yay, I was awarded a $6,000 bounty on @Hacker0x01 for a Critical bug affecting the entire backend API of the program!
This bug was a roller coaster ride and took some time to get paid off!
Dhyey Choksi retweeted
If you're NOT living in a Flent home right now, this one's for you.
We're launching something called Secured.
And it gives you 1% of your rent back every time you pay through Flent.
Yes, really.
I wouldn’t tell anyone when I make it but there would be signs
Temple has raised its first round. Friends and family. $54m. Post-money valuation of ~$190m.
Every investor in this round is a founder friend or early-stage Zomato investor who wanted in, whether or not Temple ever makes it to market.
But here's what gives me goosebumps – more than 30 Temple employees participated in the round, at par valuation. No discount. Their own money. That's the kind of belief you can't buy.
We are assembling a dream team to build the ultimate wearable for elite performance athletes. Want in? Look up my last post.
The biggest scam ever sold is the idea that someone smarter is running things
Show up everyday and be delusional. That’s all that matters.
Some days just be like that!
#BugBounty is all about showing impact, polite and clear communication is cherry on top.
Dhyey Choksi retweeted
there’s a yellow table in our office that’s hard to miss.
It stretches from the entrance to the balcony, opening onto panoramic city views.
It became the runway for every idea we launched.
now that we’ve outgrown the space, it’s ready for its next lift-off. Perfect for an early-stage team looking for their HQ. DMs open :)
Dhyey Choksi retweeted
@atlys What kind of careless, unprofessional service is this? Do you even take customers seriously? In your app, status changes automatically. In your app, it shows today I will get the Visa, while the VFS status shows documents are not even submitted. What an irony!
Dhyey Choksi retweeted
Hey @atlys, this is beyond unacceptable. I applied for a guarantee visa application, and till now, NO visa. My flights are next week(which I informed you from day one). I submitted additional documents, yet VFS status still shows they were NOT submitted by your team.
Dhyey Choksi retweeted
India and the US are close friends and natural partners. I am confident that our trade negotiations will pave the way for unlocking the limitless potential of the India-US partnership. Our teams are working to conclude these discussions at the earliest. I am also looking forward to speaking with President Trump. We will work together to secure a brighter, more prosperous future for both our people.
@realDonaldTrump
@POTUS
Recently joined the 6000 reputation club on @Hacker0x01 🎉
More to come 🚀
Authentication Bypass due to Non-Idempotency!
- Discovered a public subdomain with SSO login
- UI was scrappy, didn't look like it was meant to be public
- Tried to break login flow but no luck
- Read JS code and found references of multiple GraphQL operations
🧵
#bugbounty
- Backend was entirely on GraphQL
- Introspection was disabled
- Formed all GraphQL queries/mutations from JS code (thanks Gemini)
- Initial requests return 401
- Out of frustration, hit same GraphQL query 5-6 times
- Server mysteriously returns 200 OK and loads of juicy PII data

























