Pinned Tweet
🚀 New Repository Alert! 🐞
I've shared my techniques to bypass 403 and 401 restrictions along with random bug bounty tips and tricks! 🛠️
🔗 Check it out: github.com/sabir789/BugBount…
#bugbountytips #cybersecuritytools @jayesh25 @0x0SojalSec @0xTib3rius
0xSabir retweeted
🚨 PoC released for an unauthenticated Gotenberg RCE chain
PoC: github.com/HackfutSecRoot/-G…
CVE chain: CVE-2026-42589 + CVE-2026-40281
The exploit targets the /forms/pdfengines/metadata/write endpoint and chains metadata injection flaws to achieve remote command execution.
Affected: Gotenberg ≤ 8.30.1
Patched: Gotenberg ≥ 8.31.0
The PoC includes vulnerability detection, interactive command execution, reverse shell support, and multi-target scanning.
0xSabir retweeted
XSS using "xss.pdf" 👀
I’ve seen a lot of people successfully find XSS by uploading a malicious PDF that gets rendered inside a PDF viewer.
But there’s another angle people often miss: data exfiltration doesn’t always require JavaScript execution.
Depending on how the PDF viewer handles interactive PDF features, an attacker may be able to trick users into submitting sensitive information through a malicious prompt or form.
I put together the PDF PoC here:
github.com/zack0x01/XSS.pdf-…
For more technical details on portable data exfiltration:
portswigger.net/research/por…
Only test this on systems you own or have explicit authorization to assess.
#bugbounty #bugbountytips
0xSabir retweeted
JWT testing can be pretty tedious: manually tweaking headers, re-encoding base64, re-signing with a cracked HMAC secret, testing alg confusion. Easy but just fiddly.
So I vibe coded a little app to do it. Works as a hands-on JWT hacking tutorial, or just a JWT editor / payload generator if you want to skip straight to breaking things!
Link in comment.
0xSabir retweeted
Testing gRPC-Web APIs?
Binary protobuf = pain in Burp 😤
Built a Burp extension that:
→ Decodes protobuf → JSON
→ Edit any field
→ Auto re-encodes on send
→ Works without .proto files
IDOR hunting on modern apps just got easier.
github.com/lu3ky-13/grpc-web…
🚀 Released: gRPC-Web Burp Repeater
Decode, edit & replay gRPC-Web protobuf traffic in Burp Suite.
✅ Auto decode/encode
✅ Edit JSON, not binary
✅ No schema needed
✅ Full repeater functionality
Perfect for bug bounty on modern APIs.
🔗 github.com/lu3ky-13/grpc-web…
#BugBounty
...and you will make that critical duplicate 🥲
you will find a critical vulnerability
you will find a critical vulnerability
you will find a critical vulnerability
you will find a critical vulnerability
you will find a critical vulnerability
you will find a critical vulnerability
you will find a critical vulnerability
8
526
How I found this issue:
While hunting on a private program, I noticed the platform automatically assigned a session cookie to completely unauthenticated visitors.
I intercepted a GraphQL request used for fetching public leaderboard data and decided to look closer at the query
By manually extending the fragment in the request, the server happily returned:
• Cleartext Email addresses
• Internal partnerCustomFields containing mobile & home phone numbers
• Profile metadata & login tracking info
2
302
0xSabir retweeted
SRT researcher @ozgur_bbh walks through two real-world 2FA bypasses: synack.com/exploits-explaine…
0xSabir retweeted
TokenTwin Checker is a Burp Suite extension designed to automate authorization testing across multiple authenticated users. It helps security researchers and bug bounty hunters quickly identify Broken Access Control (BAC), IDOR, and horizontal privilege escalation vulnerabilities by replaying requests using different authentication contexts.
Resource: github.com/rootdr-backup/Tok…
Quick question for security researchers has anyone found a good prompt or workflow for Gemini? It seems to shut down a lot of legitimate bug bounty and pentesting requests lately.
3
220
0xSabir retweeted
Never seen this much details IIS guide
mll.sh/humiliating-iis-serve…
0xSabir retweeted
I have been suffering from an acute heart attack in the coronary artery for twenty days now, with surgery scheduled for the end of this month, and I need your prayers.
If I don’t tweet again, please pray for my mercy. And if I have wronged anyone, I sincerely ask for forgiveness.
0xSabir retweeted
Bug bounty hunters are the only people on Earth making $5,000+ a month from security...
And still using Burp Suite v1.7.35 cracked by Dr. FarFar in 2014.
#bugbounty #bugbountytips #HackerOne #Bugcrowd #infosec #appsec
