_Bug bounty hunter. ❤️ To Code.
Karachi, Pakistan
Joined January 2019
- Tweets115
- Following33
- Followers2.1K
- Likes225
Ever wondered how NTLM hashes can be stolen through PDF files? Check out my latest write-up to learn more about this cybersecurity threat.
medium.com/@osamaavvan/steal…
#CyberSecurity #NTLM #Hacking #PDF #DataSecurity
Exploring Stored XSS Vulnerabilities in PDF Viewers: Unlocking Access to the DOM.
Check out my new write-up for insights.
medium.com/@osamaavvan/store…
#BugBounty #XSS #cybersecurity #bugbountytips
Unveiling the Risks: AWS Cross Account Enumeration Demystified. Dive deep into securing your AWS infrastructure. Check out my latest write-up for insights.
medium.com/@osamaavvan/aws-c…
#cybersecurity #aws #cloudsecurity #bugbounty
Excited to share my latest writeup: "Guide to AWS Penetration Testing"! Delve into the nuances of securing cloud environments, and identifying vulnerabilities.
medium.com/@osamaavvan/guide…
#cybersecurity #cloudsecurity #bugbounty #devsecops #aws
Just released Part 1 of my series on 'Android SSL Pinning Bypass'! Dive into the essentials without the need for a rooted device. Stay tuned for more advanced techniques in the upcoming writeups!
medium.com/@osamaavvan/andro…
#bugbounty #android #mobilesecurity
Excited to share my latest write-up on uncovering DOM XSS vulnerabilities through client-side JavaScript analysis and bypassing WAF.
medium.com/@osamaavvan/break…
#CyberSecurity #XSS #BugBounty #bugbountytips
Osama Avvan retweeted
🔴 Challenge
During hunting, I encountered a situation where injected code was converted to uppercase.
Alhamdulillah, I am now an Offensive Security Certified Professional (OSCP)
I look forward to leveraging my OSCP certification to contribute to challenging projects and collaborate with like-minded professionals.
#oscp #cybersecurity #infosec
Calling all security researchers and bug bounty hunters! Don't miss out on this commonly overlooked vulnerability that could potentially earn you a big bounty.
medium.com/@osamaavvan/socia…
#bugbounty #hacking #cybersecurity #vulnerability
Hello @yeswehack
It's been more than a month and I still can't withdraw my bounty due to the verification issue, I have provided all of my documents.
The ticket is still open but no one is willing to respond.
Please resolve this issue.
1
4
1,061
Hello,
Another Interesting XSS challenge, DOM Clobbering to XSS.
In collaboration with @hamzaavvan
osamaavvan.github.io/XSS-Cha…
#xss #BugBounty #challenge
6
590
Hi folks,
Back with another XSS challenge.
Just a regular XSS, try to get a pop-up.
https://xss-heaven(.)000webhostapp(.)com/xss.php
Note: Remove the Brackets from URL
Dm your solutions.
#cyberseurity #xss #BugBounty
I just published Exploiting Unauthenticated GraphQL Introspection and API calls link.medium.com/rA0NvijgJxb
#WebApplicationSecurity
#APIsecurity
#bugbountytips
I have created a simple Prototype Pollution XSS challenge.
Try to get a pop-up.
DM me your solution.
osamaavvan.github.io/XSS-Cha…
#BugBounty #XSS
4
431
Done with Bug Bounties, now I'm looking for a job in security preferably remote. Web/Android and Network are my forte. Anyone hiring?
#cybersecurity
Is anyone facing issue with Bugcrowd Payment, it's been more than 5 days still haven't received the bounty in bank account.
Payment page is also not working giving 500 internal error.
Also no response for the support.
@Bugcrowd
1
5
Osama Avvan retweeted
Thank You ...Thank you all to make dream come true but remember We are join to make new records and create history.1 year and counting..!
#SecurityFoster #CyberSecurity #paas #SaaS #Celebrations
