Pinned Tweet
I have compiled the list of resources from which I have learned Android hacking and put it in this repository in the hope that it will help you guys.
github.com/Devang-Solanki/an…
#BugBounty #bugbountytips #bughunting #Hacking #Pentesting
Spent 403 seconds thinking “ting ting”. Tokens well spent.
#BugBounty #AI
Devang Solanki retweeted
Some secrets are meant to stay secret. Hackers just keep finding better ways to make them talk. 👀🔥
At Upwind presents BSides Ahmedabad 0x7, Devang Solanki, Security Researcher at RedHunt Labs, is taking the stage for a Hack Talk on Bug Bounty Beyond Web & Mobile: Automated Secret Hunting in Developer Ecosystems. 🎤
If finding what others miss is your kind of thing, this one should be on your list.
📍 Hyatt Regency, Ahmedabad
📅 26–27 September 2026
🎟️ Got your eyes on this one? Don’t just save the post. Save your spot. Book your ticket: secwiser.com/bsides-ahmedaba… 😎
#BSidesAhmedabad #BSidesAhmedabad0x7 #HackTalk #BugBounty #SecurityResearch #CyberSecurity #InfoSec #CyberSecurityConference
Devang Solanki retweeted
Sat with @devangsolankii this weekend & configured a cron job (with @zcode_ai and @hackwithclaude) to fetch h1 publicly disclosed critical, high & medium reports every Monday, classify to the closest vuln type, generalize & make/update a skill out of it.
Ran it on some of my old targets where previous iterations couldn't give much fruitful results. So far it gave me 2 XSS (-> ATO with manual escalation), 1 IDOR, 1 Unauth API endpoint to 40K+ PII & Financial Data leak.
You should try this tool, it's great.
Guys, you're wasting your time with Burp.
Hacking shouldn't require anything but typing.
Use this tool on a target and if you don't like it, DM me, I will personally apologize!
github.com/BehiSecc/HuntProx…
Devang Solanki retweeted
We’re offering 1.5× bounty on High & Critical SQL Injection vulnerabilities.
Pawn your AI agents 👽
On top of that:
• First Blood — Critical: +$500
• First Blood — High: +$250
The First Blood bonus is in addition to the 1.5× campaign bounty.
hackerone.com/eternal
Just got a reward for a critical vulnerability submitted on @yeswehack -- Use of Hard-coded Credentials (CWE-798). yeswehack.com/hunters/devang…
#YesWeRHackers #BugBounty
I updated this tool and added support for Azure and privilege escalation checks for AWS.
I've been getting tons of AWS and GCP keys, so I vibe coded a tool to bruteforce IAM permissions for my own needs.
github.com/Devang-Solanki/ia…
#BugBounty #bugbountytips #OpenSource
Devang Solanki retweeted
I've been getting tons of AWS and GCP keys, so I vibe coded a tool to bruteforce IAM permissions for my own needs.
github.com/Devang-Solanki/ia…
#BugBounty #bugbountytips #OpenSource
Got a reward on @Hacker0x01!
Even though the assets were out of scope, they still gave me the highest bounty from the critical tier.
Programs like this really make you believe in bug bounties again.
#bugbounty #hackerone
Program is hackerone.com/flutteruki
I've been getting tons of AWS and GCP keys, so I vibe coded a tool to bruteforce IAM permissions for my own needs.
github.com/Devang-Solanki/ia…
#BugBounty #bugbountytips #OpenSource
Does anyone have an invite to this private program on hackerone?
I'm willing to split the bounty 70:30
Payyit and Fyntiq
payyit.com/
fyntiq.com/
#BugBounty #bugbountytips
Reported a bug. Company now thinks it was an inside job🙃
#BugBounty
Devang Solanki retweeted
Hello!
Just published a new research with ( @sml555_ , @codecancare) 🍻
Who Needs A Blind XSS?
hx01.me/hailcsv.htm
#CyberSecurity #BugBounty



















