Curious

Gujarat
Joined November 2018
Holiday bounties are da best! 🛣️ I was awarded a $5,250 bounty on @Hacker0x01! hackerone.com/thruster #bugbounty
9
10
1
256
23,083
Joined the 7000 reputation club on @Hacker0x01 ! 🚀 hackerone.com/thruster 10k club coming soon🎳
5
1
91
3,007
. @flenthomes sending out chic swags as always 🫡
1
1
11
1,160
Dhyey Choksi retweeted
All you need to do is pay your rent via Secured. Check your eligibility here: flent.in/secured If you’re eligible, reply with your screenshot and I’ll send you a pre-approved invite code :)
28
1
18
7,329
Dhyey Choksi retweeted
This month, we’re buying back rent across Bengaluru. Pay rent on time and get ₹1,000 off, plus 1% discount on every rent payment going forward. Not points you’ll never use. Not a voucher buried somewhere. Actual upfront discount on rent.
44
12
4
224
79,701
Yay, I was awarded a $6,000 bounty on @Hacker0x01 for a Critical bug affecting the entire backend API of the program! This bug was a roller coaster ride and took some time to get paid off!
7
3
190
4,899
Dhyey Choksi retweeted
If you're NOT living in a Flent home right now, this one's for you. We're launching something called Secured. And it gives you 1% of your rent back every time you pay through Flent. Yes, really.
6
5
2
16
6,688
I wouldn’t tell anyone when I make it but there would be signs
Temple has raised its first round. Friends and family. $54m. Post-money valuation of ~$190m. Every investor in this round is a founder friend or early-stage Zomato investor who wanted in, whether or not Temple ever makes it to market. But here's what gives me goosebumps – more than 30 Temple employees participated in the round, at par valuation. No discount. Their own money. That's the kind of belief you can't buy. We are assembling a dream team to build the ultimate wearable for elite performance athletes. Want in? Look up my last post.
1
387
Dhyey Choksi retweeted
we’ve raised ₹21Cr. (Pre-Series A) to retire “To-Let” boards for good 🫡
29
7
7
501
54,839
Dhyey Choksi retweeted
8
453
6
7,122
130,997
The biggest scam ever sold is the idea that someone smarter is running things Show up everyday and be delusional. That’s all that matters.
1
1
11
966
Birthday bounties hit different on @Hacker0x01!
15
1
172
6,091
Some days just be like that! #BugBounty is all about showing impact, polite and clear communication is cherry on top.
2
89
4,153
Dhyey Choksi retweeted
there’s a yellow table in our office that’s hard to miss. It stretches from the entrance to the balcony, opening onto panoramic city views. It became the runway for every idea we launched. now that we’ve outgrown the space, it’s ready for its next lift-off. Perfect for an early-stage team looking for their HQ. DMs open :)
3
10
1,513
Dhyey Choksi retweeted
@atlys What kind of careless, unprofessional service is this? Do you even take customers seriously? In your app, status changes automatically. In your app, it shows today I will get the Visa, while the VFS status shows documents are not even submitted. What an irony!
2
1
7
1,332
Dhyey Choksi retweeted
Hey @atlys, this is beyond unacceptable. I applied for a guarantee visa application, and till now, NO visa. My flights are next week(which I informed you from day one). I submitted additional documents, yet VFS status still shows they were NOT submitted by your team.
1
3
1
24
6,065
India and the US are close friends and natural partners. I am confident that our trade negotiations will pave the way for unlocking the limitless potential of the India-US partnership. Our teams are working to conclude these discussions at the earliest. I am also looking forward to speaking with President Trump. We will work together to secure a brighter, more prosperous future for both our people. @realDonaldTrump @POTUS
9,350
25,134
2,737
198,114
22,023,487
Recently joined the 6000 reputation club on @Hacker0x01 🎉 More to come 🚀
7
75
3,224
Authentication Bypass due to Non-Idempotency! - Discovered a public subdomain with SSO login - UI was scrappy, didn't look like it was meant to be public - Tried to break login flow but no luck - Read JS code and found references of multiple GraphQL operations 🧵 #bugbounty
2
2
20
889
- Backend was entirely on GraphQL - Introspection was disabled - Formed all GraphQL queries/mutations from JS code (thanks Gemini) - Initial requests return 401 - Out of frustration, hit same GraphQL query 5-6 times - Server mysteriously returns 200 OK and loads of juicy PII data
1
1
11
476
- Check if this pattern is repeated across other queries/mutations - Success, tons of data exposed - Reported as Critical - Domain taken down as report is triaged Auth logic was non idempotent due to faulty request routing, leading to scenarios where Auth was randomly bypassed!
1
8
407