Bug-bounty-tipsπŸžπŸ’°
4.28K subscribers
311 photos
10 videos
1 file
185 links
Sharing tips and Tools for bugbounty

For anyone who doesn't know me, please visit my X page @kassem_s94

Ranked #30 Globally in Web-App Assets Bug Bounty on HackerOne in 2024.

My Toolkit:
secret hunter
xoxo xss
dep_hunter
poisoner PRO
ssrf tool
aurora
Download Telegram
πŸ’°Bounty: 3000$+
🚨 A TOP researcher using My Secret Hunter tool, just scored a CRITICAL on HackerOne!

The tool detected exposed API/Secret Keys in a public JS file, even the hunter didn’t know they existed πŸ”₯

Secret Hunter = fast & accurate detection.

Dm for subs: t.me/apesofficial

Join our community: t.me/kassems94

#bugbounty
#bughunter
#bughunting
#hackers
#hacking
#secrethunter_by_kassem_s94
πŸ”₯6❀2
πŸ’° €500 Bounty Earned thanks to Secret-Hunter! πŸš€

A few days ago, my tool helped me discover a Critical (9.1) vulnerability πŸ”₯

🐞 Using the β€œAPI PATH” tag inside Secret-Hunter (which extracts endpoints)

⚑ I chained the exposed endpoint with a response manipulation trick

➑️ Result: Full access to the Admin API Dashboard 😎

So yes… Secret-Hunter isn’t just a secret finder πŸ‘€
It’s a string-based recon powerhouse that reveals:
πŸ”Ή Endpoints (API PATHs)
πŸ”Ή Secrets
πŸ”Ή Sensitive parameters & more…
Leading to high-impact, money-making bugs πŸ’Έ

Wanna hunt bugs that PAY?

Order Now 20$/mo only πŸ‘‰
πŸ“© https://t.me/apesOfficial
πŸ”₯5
## πŸ›οΈ Black Friday: 20% Off on All Tools & Book!

πŸŽ‰ Get 20% off for Black Friday on all our cybersecurity tools + the book!

### πŸ”§ Tools

- Secret Hunter
*Secret key finder*
- Monthly: $20 β†’ $16
- 6-Month: $100 β†’ $80
- Yearly: $150 β†’ $120

- XOXO (with recon.sh)
*Auto recon + XSS scanner*
- Monthly: $20 β†’ $16
- 6-Month: $100 β†’ $80
- Yearly: $150 β†’ $120

- Cash Poisoner Pro
*Cache poisoning tool*
- Lifetime: $100 β†’ $80

- SSRFStorm
*Advanced SSRF scanner*
- Lifetime: $100 β†’ $80

- Aurora
*Salesforce API misconfig finder*
- Lifetime: $100 β†’ $80

- DepHunter
*Dependency confusion detector*
- Lifetime: $100 β†’ $80

### πŸ“˜ Book

- 3 Bugs That Pay (v1)
*Bug bounty techniques*
- Price: $30 β†’ $24

πŸ”₯ Don’t miss this limited Black Friday sale!

---

πŸ“© Contact or subscribe via Telegram: [@apesofficial](https://t.me/apesofficial)
❀7
🚨 New Findings Using Secret Hunter! 🚨

Today, using my tool Secret Hunter, I was able to discover:

- πŸ”΄ A PII Exposure vulnerability inside a public .js file
- 🟑 Two Broken Social Links issues that could lead to social media account impersonation (easy wins but valuable! πŸ€‘)

This proves again that Secret Hunter is not just a secret finder β€”
πŸ”₯ It also helps with recon and uncovering hidden & impactful vulnerabilities!

---

🎯 Secret Hunter is currently on SALE for just $16/month
⏳ The price will increase soon β€” don’t miss out!

πŸ“© Contact me to get your copy:
➑️ https://t.me/apesofficial

πŸ“’ Join my Telegram channel for more findings, exclusive offers & tips:
➑️ https://t.me/kassems94

Keep Hacking πŸ”βœ¨
πŸ”₯3πŸ‘1
🚨Would you like me to continue the black friday price for two more days?
Anonymous Poll
71%
yes
29%
no
🚨 Other New Findings Using Secret Hunter! 🚨

Today, using my tool Secret Hunter, I was able to discover:

- πŸ”΄ A PII Exposure vulnerability inside a public .js file

This proves again that Secret Hunter is not just a secret finder β€”
πŸ”₯ It also helps with recon and uncovering hidden & impactful vulnerabilities!

---

🎯 Secret Hunter is currently on SALE for just $16/month
⏳ The price will increase soon β€” don’t miss out!

πŸ“© Contact me to get your copy:
➑️ https://t.me/apesofficial

πŸ“’ Join my Telegram channel for more findings, exclusive offers & tips:
➑️ https://t.me/kassems94

Keep Hacking πŸ”βœ¨
πŸ‘3❀2πŸ‘2πŸ”₯1
Bug-bounty-tipsπŸžπŸ’°
🚨Would you like me to continue the black friday price for two more days?
🚨Because your opinion and requests matter to us, and due to the high demand and to fulfill as many tools as possible, we decided to extend the sale period for two more days.🫑

πŸ”₯16$/mo for Secret HunterπŸ”₯

πŸ’β€β™‚οΈDm now:
https://t.me/apesofficial
πŸ”₯4
πŸ”₯ A user just earned a $2500 bounty using my tool Secret Hunter !

Today I received a message from one of Our great users telling me that Secret Hunter
helped him detect a valid AWS Access Key + Secret Key leak , and the company
rewarded him with $2500 πŸ’°πŸ”₯

Secret Hunter is not just a secret-finder…
It instantly catches exposed keys, performs string-based recon, extracts endpoints,
and helps you reach bugs much faster.

Buy Now for 16$/mo ONLY[offer is valid for 18 hours]:
πŸ”— https://t.me/apesofficial

⚑ Results speak for themselves , no demo, no trial.
Price will increase soon, so don’t be late!

If you want to know more about my other tools also, feel free to contact me anytime🫑

πŸ”₯Happy HackingπŸ”₯
πŸ”₯5πŸ‘2😐2😭2
πŸ”₯ $3,000 BUG BOUNTY – REAL CASE πŸ”₯

Critical vulnerability found πŸ‘‡

β€’ Unprotected endpoint
β€’ PII records leaked in cleartext
β€’ Severity: Critical (9–10)
β€’ Visibility: Private
β€’ Bounty earned: $3,000 πŸ’°

This finding was achieved using Secret Hunter πŸ”
Not just a secret finder β€” but a powerful tool for:
β€’ Endpoint discovery
β€’ String & asset recon
β€’ Identifying real, exploitable attack paths

⚠️ One unprotected endpoint = full data exposure.

πŸ’‘ Pricing Alert
Secret Hunter subscription is currently $20/month
⏳ Price will increase to $30/month very soon

πŸ‘‰ now is the best time to subscribe before the price goes up.

πŸ“’ Join the Telegram channel for more real findings & tips:
https://t.me/kassems94

πŸ“© DM to get access to the tool:
https://t.me/apesofficial

Happy Hacking
🀣8❀5πŸ”₯2πŸ€”2
πŸ’°Possible bounty: 5,000-10,000$
🚨 New Critical Bug Found Using Secret Hunter 🚨

A new Critical Bug was discovered after exposing a valid private key inside a .js file using Secret Hunter πŸ”‘

πŸ“Œ Impact:
- Customer private keys exposed
- High risk of account takeover & Financial loss
- Report marked Critical and currently under program review on HackerOne

⚑ This is exactly why automated secret discovery matters.

If you're hunting bugs or doing recon:
πŸ” Secret Hunter finds what others miss

πŸ’β€β™‚οΈJoin us: https://t.me/kassems94

πŸ“© DM for access [20$/mo Only for limited time]:
Telegram: https://t.me/apesofficial
πŸ”₯4❀3πŸ€”1
πŸ”₯ I found a High severity bug using Secret Hunter πŸ”₯

Discovered an exposed endpoint that led to an IDOR vulnerability:
β†’ Unauthorized access
β†’ Sensitive information disclosure
β†’ High severity (~$1500 bounty)

This is a real-world example of how the right tooling speeds up impact.

πŸ”— Join us: https://t.me/kassems94
πŸ’β€β™‚οΈTools: https://t.me/apesofficial

ONLY 20$/mo For Limited Time
❀5πŸ”₯5
πŸŽ‰πŸ”₯ 3,000 SUBSCRIBERS β€” THANK YOU! πŸ”₯πŸŽ‰

We’ve officially reached 3,000 subscribers 🎯
This milestone wouldn’t have been possible without YOU ❀️
Your support, likes, shares, and trust are the real reason behind this success πŸ™

To celebrate this achievement 🎁
Here’s a special giveaway for our amazing community πŸ‘‡

🎟️ 50 Coupons – 35% OFF
βœ… Valid on ANY tool

🎁 BONUS REWARD
- πŸ† 3 subscribers will receive 1 FREE month
- Choose between Secret Hunter or XOXO XSS

πŸ“Œ How to participate:
- πŸš€ READY?
Smash that LIKE πŸ‘ on this post
πŸ“Έ Take a screenshot of your like
πŸ“© Send β€œDONE” to @kassem_s94
⏳ *Hurry up β€” only 24 HOURS!* πŸ”₯

πŸ› οΈ Available Tools (choose any):
- Secret Hunter
- XOXO (Recon + XSS Scanner)
- Cash Poisoner Pro
- SSRFStorm
- Aurora
- DepHunter

✨ And this is just the beginning…
Christmas πŸŽ„ & New Year πŸŽ† discounts are coming soon
This is the least we can do for this amazing community 🀍

Keep Hunting Guys πŸ”₯🐞
πŸ‘28❀5
πŸŽ‰πŸ”₯ GIVEAWAY WINNERS ANNOUNCEMENT πŸ”₯πŸŽ‰

━━━━━━━━━━━━━━━━━━━━━
🎟️ 35% DISCOUNT COUPON WINNERS
━━━━━━━━━━━━━━━━━━━━━

The following winners received a 35% OFF coupon
βœ… Valid on ANY tool of their choice
βœ… OR 35% OFF the FULL PACKAGE

⏳ Coupon validity: 48 HOURS ONLY

πŸ† Winners:
- @Jerry6677999j
- @ZoroO2023655
- @Lucifer7008
- @RitanshuSharma
- @AstraNoTrace
- BOY
- arion s
- @mhrisham
- @kasak143
- @beingdisrespectful
- @andihsyyh
- @Mind_Overflow
- @Itsnishat08
- @Makavanaprins
- ΨΉΨ¨Ψ― Ψ§Ω„Ψ±Ψ­Ω…Ω† أبو ΨΉΩŠΨ³Ω‰
- @Lolammoo
- @Saoud_Maryout
- @SunnY3219
- TakiasSec
- @Technoobz
- @prasadpanchal21
- @forrlong
- Hidayat Pathan Pathan

━━━━━━━━━━━━━━━━━━━━━
🎁 FREE 1-MONTH SUBSCRIPTION WINNERS
━━━━━━━━━━━━━━━━━━━━━

The following subscribers won 1 FREE month πŸŽ‰
Choose between Secret Hunter or XOXO XSS

πŸ† Winners:
- @OxYGYMM
- @jsoont
- @goonsof

πŸ“© All winners, please DM @apesofficial when you are ready to claim your reward
πŸ”₯5❀4🌚1