Congratulations 👏❤️

Who’s next 🤩?

كل سنة وأنتم طيبين بمناسبة عيد الأضحى المبارك 🌙

تقبل الله منا ومنكم صالح الأعمال، وأعاده
عليكم بالخير والسعادة والبركة

✅ Both vulnerabilities have been rewarded successfully!

linkedin :
https://www.linkedin.com/posts/ayman-amer1_bugbounty-cybersecurity-ethicalhacking-ugcPost-7466083479701721088-sS5F

🔐 Broken Access Control — $300
https://youtu.be/Vvg7Q5Mwu-c?si=twLnRfVmXotvAqcn

⚡ Business Logic — $300
https://youtu.be/szRhhwB_vlE?si=7XDofnIq0INP0Led

💰 Total Reward: $600 🔥

Congratulations 🎊🎈

🔥 New Bug Bounty Reward ✅

Linkedin:
https://www.linkedin.com/posts/ayman-amer1_bugbounty-xss-rxss-activity-7471511542061211648-O1JH

Simple RXSS

The application does not provide a public registration page and is intended only for approved business customers.

1. Enumerated target subdomains.
2. Found a login page on one of the discovered services.
3. Noticed that error messages were reflected through the statusMessage parameter.

4. Tested input reflection:

https://go-service.target.com/?statusMessage=test

5. Injected a simple XSS payload:

https://go-service.target.com/?statusMessage=<payload>

6. Payload executed successfully → Reflected XSS (RXSS).

💰 Reward received. $$$

Congratulations 🎈🎊

Congratulations 👏🤩

YouTube channel:

https://youtube.com/@forbughunters

Stored XSS ➜ $$$ 💰

Found a Stored XSS in the team creation flow.

Steps:

1. Create a new team.
2. Set the team name to:

"><script>alert(document.cookie)</script>
3. Enable the option requiring all team members to use 2FA.
4. Join the same team with another user.

Result:
The second user receives a message prompting them to enable 2FA in (Team Name). Since the team name is rendered without proper sanitization, the injected JavaScript executes, resulting in a Stored XSS.

Status: ✅ Fixed & Rewarded.

Linkedin : https://www.linkedin.com/posts/ayman-amer1_bugbounty-storedxss-xss-activity-7479481896792608768-NSxY

Let’s start 🤩🔥!

Self hosted +Bug bounty programs⬇️

*.cleeng.com

security@cleeng.com
—————————————
*.redsift.com

security@redsift.com
—————————————
*.plain.com

security@plain.com
—————————————
*.linkdm.com

support@linkdm.com
—————————————
*.ory.com

security@ory.com
—————————————
*. aquanow.com

bugbounty@aquanow.com
—————————————
https://github.com/swisscom/bugbounty
—————————————
https://www.spendesk.com/.well-known/security.txt
—————————————
https://help.spreaker.com/en/articles/5123644-bug-bounty-program
—————————————
https://www.fjdynamics.com/jp/bug-bounty-program
—————————————
https://www.klook.com/bugbounty
—————————————
https://gobright.com/responsible-disclosure-policy/
—————————————
https://www.make.com/en/bounty
—————————————
https://www.pubnub.com/bug-bounty-policy/
—————————————
https://help.doit.com/docs/vendor-information/bug-bounty-program
—————————————
https://www.lenskart.com/vulnerability-disclosure-policy
—————————————
https://www.talentlms.com/vulnerabilitypolicy
—————————————
https://whatbox.ca/policies/security
—————————————
*.perlego.com

security@perlego.com
—————————————
https://support.playerauctions.com/hc/en-us/articles/49330305602585-PlayerAuctions-Bug-Bounty-Program
—————————————
*.lithicblue.com

security@lithicblue.com
—————————————
*.expensify.com

security@expensify.com

🔥 Live Hacking Session Today at 4:00 PM (Egypt Time) — Join us and bring your Bug Bounty & Pentesting questions!

Live Hunting #6 – Real Bug Bounty Hunting:
https://youtu.be/tjQ_IblaMVQ?si=Bf6yhcJc6pZ5sYDt

Congratulations 🔥🤩

Authz-ExeC is a Burp Suite extension that automatically tests authorization by replaying requests with different identities to detect IDOR, BOLA, Broken Access Control, privilege escalation, and cross-tenant vulnerabilities:
https://github.com/execiq/Authz-ExeC

Congratulations👏🤩