Syed Mushfik Hasan Tahsin (@SMHTahsin33) header
Syed Mushfik Hasan Tahsin (@SMHTahsin33) profile picture

Cyber Security Enthusiast | Learner | Free Time Bug Bounty Hunter | Ambitious | eWPTX, CRTO, ASCP | 21 Y/O | @bbcbd_official🇧🇩

Savar, Dhaka, Bangladesh
Joined April 2019
Photo by Syed Mushfik Hasan Tahsin (@SMHTahsin33)Photo by Syed Mushfik Hasan Tahsin (@SMHTahsin33)Photo by Syed Mushfik Hasan Tahsin (@SMHTahsin33)Photo by Syed Mushfik Hasan Tahsin (@SMHTahsin33)Photo by Syed Mushfik Hasan Tahsin (@SMHTahsin33)Photo by Syed Mushfik Hasan Tahsin (@SMHTahsin33)Photo by Syed Mushfik Hasan Tahsin (@SMHTahsin33)Photo by Syed Mushfik Hasan Tahsin (@SMHTahsin33)Photo by Syed Mushfik Hasan Tahsin (@SMHTahsin33)Photo by Syed Mushfik Hasan Tahsin (@SMHTahsin33)
Hello, If you are just getting started into bug bounties and can't find enough resources, this thread might help you to find a way 👇
42
654
30
1,569
Syed Mushfik Hasan Tahsin retweeted
You may have noticed I've been a bit quiet on social media recently, this is why...I'm going to present at @BlackHatEvents #BHUSA
13
25
2
186
33,805
Syed Mushfik Hasan Tahsin retweeted
And this one is human insight w/ LLM-assisted research. Took about one week to finish everything. The AI really rescued me from a lot of tedious work — excluding the part where it changed the Domain Admin password, locked me out, and claimed it got RCE 🤦
Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
46
152
22
1,675
132,718
Syed Mushfik Hasan Tahsin retweeted
i'm taking a pause from hacking to resume building bugbountyhunter.com. i regret closing it down and I shouldn't of done it. everything will be back online EXACTLY as it was very soon and i've got some big plans for the future. and yes, that includes zseano methodology v2 ;)
44
52
3
637
25,898
Alhamdulillah, I am Proud to share that I’ve officially achieved the Certified Red Team Operator (CRTO) certification by @_ZeroPointSec 🔥
4
3
46
1,929
Syed Mushfik Hasan Tahsin retweeted
4
7
1
61
3,908
Alhamdulillah, Done & Dusted! I have successfully completed all of the three @apisecu Certifications - API Security Certified Professional (ASCP), APISEC Certified Practitioner (ACP) & Certified API Security Analyst (CASA) ⚡
2
14
552
Thank you @Hacker0x01 🙌
The Official AfterMovie for @Hacker0x01 BUG HUNT 2026 is out! Watch and let us know how was it! 🧑‍💻 #hackerone #bughunt2026 #thehuntison #bbcbd
6
490
Let's welcome Mohammad Abdullah (@m_abdul1ah) as our Guest Speaker for HackerOne BUG HUNT 2026 🛠️ 🎤 Talk: "Security at the Edge: A High-Level Perspective on IoT and Hardware Security" ------------------------
1
2
7
392
Let's Welcome Syed Faraz Abrar (@farazsth98) as our Guest Speaker for HackerOne BUG HUNT 2026 👑 🎤 Talk: "From Zero to 0-day - Linux Kernel Edition"
1
2
10
347
Syed Mushfik Hasan Tahsin retweeted
Sometimes I feel bad for Carlos.
42
63
13
452
33,533
We’re thrilled to announce our club partners for the @Hacker0x01 BUG HUNT 2026 🇧🇩🔥 Together, we’re building the next generation of ethical hackers. Stronger, Smarter, and United. ⚔️🔐 #HackerOne #BBCBD #BugHunt2026 #TheHuntIsOn
2
6
508
Syed Mushfik Hasan Tahsin retweeted
Just getting started with bug bounty? Learn 4 vulnerability types in 400 seconds! 🤠 A thread! 🧵 👇
6
47
1
236
17,642
Syed Mushfik Hasan Tahsin retweeted
The Ultimate XSS Cheat Sheet! This XSS cheat-sheet lists vectors (filterable by event, tag, or browser) that can bypass WAFs and filters! Each entry even includes a proof-of-concept. Bookmark this 👉 portswigger.net/web-security…
1
24
146
8,429
🚨 Registration Open – @Hacker0x01 Bug Hunt 2026 (Qualifiers Round) 🇧🇩 The wait is over! Registration for the HackerOne Bug Hunt 2026 – Qualifiers Round is now live and will remain open till 25th October. 🔗 Register here: bughunt.info/register #HackerOne #BugHunt2026
1
2
10
512
Exploiting an IMPOSSIBLE Cache Deception with CSPT
11
77
4,042
Syed Mushfik Hasan Tahsin retweeted
the jump scare of the morning award goes to @J0R1AN (it even adapts to different native calculators using UA-based OS detection :))
4
16
3
160
30,005
Syed Mushfik Hasan Tahsin retweeted
WAFs still blocking your payloads? Try our newest pointer capture tricks. Our XSS cheat sheet just got an upgrade thanks to @hunter0x8. portswigger.net/web-security…
1
29
1
156
9,364
Syed Mushfik Hasan Tahsin retweeted
About a month ago, I discovered a vulnerability in @grok An API endpoint provides direct, unrestricted access to an image model, enabling the at-scale generation of explicit, nude, and harmful content at no cost. As a PoC, I've made it a service: asdex.me/
13
10
5
105
19,221
🔓 The hunt just leveled up. @Hacker0x01 is now the official Title Sponsor of Bug Hunt 2026! Welcome to HackerOne Bug Hunt 2026. Are you ready to make history? 🕵️‍♂️💻 #bbcbd #TheHuntIsOn #hackerone #bughunt2026 #titlesponsor
1
8
401