Discover and read the best of Twitter Threads about #TogetherWeHitHarder
Most recents (3)
Yay🥳, I was awarded $750 bounty on @Hacker0x01! #TogetherWeHitHarder It's my first ever bounty. It took me 2 years to get my first payout. Yeah,it took me that long to get a reward and I am so glad I did it. A little tip for those who are struggling with bug bounty hunting
A 🧵
A 🧵
1. I don't have a background in Coding or much knowledge about computers. I started from scratch watching @NahamSec recon videos on yahoo and copying the same commands as he did😂and getting familiar with the tools and commands in Linux
2. And also reading books related to bug bounty hacking like "The Web Application Hackers Handbook".When I was reading this book,I went like reading 20 or 30 pages without understanding a single thing. It occurs don't worry.After sometime and additional reading you will grasp it
1/5 Wow, we just turned 3years old! What an amazing journey it has been. A BIG THANK YOU to all our Users & Partners🙏🙏Together, we have scaled a few mountains 👇👇
2/5 Lucky to have a passionate & crazy team sweating it out to make @ETMONEY awesome! When the occasion came, we partied hard & then after-partied harder 🍻 👯
A personalized Thank You note to the family of each team member created super-proud Parents, Spouses & Children👏
A personalized Thank You note to the family of each team member created super-proud Parents, Spouses & Children👏
3/5 It's not just us. The impact we have created is getting recognized with ETMONEY bagging 4 awards!🏆🥇🏆
#togetherwehitharder
#togetherwehitharder
Hackers, here's a brain dump to help you understand my general (post-recon) application security testing methodology and how I find high / critical vulnerabilities. This is how I demonstrate the value as a hacker. 💰 Ask me anything. #TogetherWeHitHarder
0x00: I visit the product and marketing pages and read up what the products do. I identify how the product it exposed to the end user. This will give me an idea what the initial attack surface looks like, what data they're protecting, how users interact with each other, ...
... and what the learning curve looks like. I sign up for any number of accounts that is required to test the features. This will give me insight into the individual features. I do some light fingerprinting of the frameworks they use.
