الحمد لله

Happy for securing new private program

I’m planning to start sharing writeups insha’Allah for the vulnerabilities I find.
Here’s a Telegram channel where I’ll be posting soon: https://t.co/eejx5pqsVL

حياكم الله يوم الثلاثاء بطلع سبيس مع اخوي محمد القحطانى اللي يبي يستفيد وبنفتح مجال الاسئله للي عنده اسئله

حياكم الله 🤍

Live recon on real target episode 4

https://t.co/XfXUQApDkw

What happened here?

1.I found a subdomain via DuckDuckGo dorking.
2.I noticed a login endpoint that’s different from the users endpoint (neither allows registration).
3.I fuzzed that endpoint and discovered a user-management endpoint, but the website redirected…

If the admin panel you targeted has a username enumeration , you can brute-force using a wordlist. This has worked many times for me in this case, the username was "admin"

My password wordlists:

Basic: https://t.co/JEfh5J4hQf

Advance: https://t.co/gWZtFcGlsU…

If you're a bug bounty hunter and your local banking system makes it hard to receive payouts, KAST is worth checking out.

Here's the problems that's kast solve it for me
- Europe bank iban to received my bounty without cutting in europe bug bounty platforms…

احتاج فزعتكم ودعمكم
تم ترشيحي لجائزة Arab Cybersecurity Social Media Influencer Award 2026، وأتمنى تصويتكم لي.
رابط التصويت: https://t.co/BALMxL2rwM

A heavy write-up on my findings in Egypt is coming. Stay tuned.

🥁🥁🥁🥁🥁
Writeup is here:
https://t.co/G5vCGxZrnp

#bugbountytips