Cybersecurity Researcher | Bug Bounty Hunter ❤
Joined November 2014
- Tweets177
- Following52
- Followers513
- Likes420
Pinned Tweet
VDP to Bounty!! I was awarded a $250 bounty on @Hacker0x01!
I started hunting on a VDP. Luckily I found an open redirect. Reported it via their website's responsibile disclosure page. Got a verification email from hackerone.
hackerone.com/hamzaavvan #TogetherWeHitHarder
I just published in @gitconnected 4 XSSs With A Simple & Optimized Payload levelup.gitconnected.com/4-x…
I just published in @gitconnected Quick & Easy $100 Bug That You Can Find In 5 minutes levelup.gitconnected.com/qui…
Bug Bounty Intigriti Challenge 0223 Stored XSS Via Image Exif youtu.be/lCcSILKgLcs?si=SKZ8… via @YouTube
1
523
A Unique Tale Of P1: Exposed GraphQL Leads to Mass User Account Takeovers medium.com/@hamzaavvan/a-uni…
Check out my playlist: Road To Ethical Hacking youtube.com/playlist?list=PL… via @YouTube
Hamza Avvan retweeted
Dozens reported killed in explosion in northern Gaza refugee camp bbc.in/46No7YW
Hamza Avvan retweeted
.@hamzaavvan has made some awesome YouTube Shorts answering my #AppSec interview questions! Check them out: youtube.com/playlist?list=PL…
Second-order SQL injection on view parameter.
1. Create a malicious note with SQLi payload through /?note=<payload> parameter.
2. Goto /?view to execute your SQLi payload
#SQLI #bugbountytips
Vulnerable Code Snippet 💀
🥁 This time we have improved the experience by making it possible to run this code snippet in a docker environment!
Can you find the bug this time?
Practice your skills and try it yourself on our Github👇
github.com/yeswehack/vulnera…
#YesWeRHackers #BugBounty #YWHSnippet
ALT YesWeHack - Vulnerable Code Snippet
Worth trying for anyone who wants to improve their XSS skills or learn something new. XSS via stylesheet injection challenge by @yeswehack.
#YesWeRHackers
Hackerone triager set its state to pending program review. Program manager came, triaged my bug and transferred the report from VDP to its private program and I got an invite too. After accepting the invite I was amazed to look at the bounty table 😁
1
6
759
That was a fascinating journey for this finding. Thanks @Hacker0x01 and the private program for all this.
Moral of the story: Never ignore the VDPs..
#bugbountytip
5
678
I found even more subdomains and XSSs 😂 using dork like:
site:*.target.*
site:*.target.com.*
site:*.target-*.*.*
#bugbountytips #dork #OSINT
Till Today I used to think site:*.target.com means all subdomains. 🤓
But that actually means just 1st order subdomain! 😭
So if you search site:*.*.target.com you will get all second-order subdomains.
site:*.*.*.target.com = Third order Subdomains.
#bugbountytip #BugBounty
🔴 Challenge
During hunting, I encountered a situation where injected code was converted to uppercase.
Eventually, I reported four XSS vulnerabilities to the Bugcrowd program using my payload, and all of them were triaged.
Note: Please encode the payload before injecting or the (+) which is used for concatenation would be interpreted as space.
2
4
1,400