Bug-bounty-tipsπŸžπŸ’°
4.28K subscribers
311 photos
10 videos
1 file
185 links
Sharing tips and Tools for bugbounty

For anyone who doesn't know me, please visit my X page @kassem_s94

Ranked #30 Globally in Web-App Assets Bug Bounty on HackerOne in 2024.

My Toolkit:
secret hunter
xoxo xss
dep_hunter
poisoner PRO
ssrf tool
aurora
Download Telegram
⚠️ IMPORTANT WARNING ⚠️

I’ve received multiple reports about fake channels and accounts stealing my content
and using my name/tools for scam and fraud activities ❌

πŸ”΄ Please note:
- I am NOT affiliated with any channel or person outside my official accounts
- Any sales, offers, or links shared outside the official channels are SCAM
- There are NO β€œprivate”, β€œhidden”, or β€œexclusive” deals through DMs

βœ… Official accounts ONLY:
- Telegram channel: https://t.me/kassems94
-DM: @apesofficial / @kassem_s94
- X (Twitter): https://x.com/kassem_s94
- YouTube: https://www.youtube.com/@kassem_s94

❗ If someone contacts you using my name or offers tools at unrealistic prices,
it is 100% a scam

πŸ™ Please report any suspicious account and send me a screenshot if possible
Let’s protect the community from scammers

Thank you for your trust 🀝
πŸ‘3
# πŸ›‘οΈ Poisoner v2.0 - Advanced Web Cache Poisoning Scanner

## πŸ“– Description

Poisoner PRO is a powerful Python-based tool designed to detect Web Cache Poisoning vulnerabilities with high accuracy. It uses advanced verification techniques to eliminate f/p and provides automated Proof-of-Concept generation for discovered vulnerabilities.

---

## Key Features

- βœ… Verified Results Only - 4-step verification process=Low F/P
- πŸš€ Fast Multi-threaded Scanning - Concurrent testing with customizable threads
- 🌐 Wayback Machine Integration - Auto-discovers cacheable endpoints
- πŸ›‘οΈ 85+ Header Tests - Comprehensive coverage (CDN, framework-specific, WAF evasion)
- πŸ“Š Severity Classification - Critical, High, Medium, Low
- πŸ“„ Auto PoC Generation - Burp Suite .req files + detailed Markdown reports
- 🎯 Smart Detection - Word boundary checking & context-aware validation

πŸ”₯Order Now: 150$ LIFETIME ACCESS (Special Price for our old cutomers).

πŸ“©DM: @apesofficial
πŸ”₯2❀1
🫑🚨Special price for old Customers🚨🫑

πŸ”₯ Here are my top cybersecurity tools, built for bug bounty hunters & security teams who want speed, accuracy, and real impact.

❌ No demo. No trial. 
✨ Customers’ results speak for themselves.

⚠️ Prices will increase very soon, don’t be late.

## πŸ›  Tools & Pricing

πŸ” Secret Hunter 
*Secret key finder and Recon tool* 
- Monthly: $25
- 3-Months: $65 
- 6-Months: $150 
- Yearly: $250 

πŸ•΅οΈ XOXO (with recon.sh) 
*Auto recon for URLs & params + XSS scanner* 
- Monthly: $25
- 3-Months: $65 
- 6-Months: $150 
- Yearly: $250 

πŸŒ€ Cache Poisoner Pro 
*New Cache poisoning tool* 
- Lifetime[source-code]: $150 

🌐 SSRF Storm
*Advanced SSRF scanner* 
- Lifetime[source-code]: $150 

⚑ Aurora
*Salesforce API misconfig finder[PII bugs]* 
- Lifetime[source-code]: $150 

πŸ“¦ DepHunter 
*New Dependency confusion detector for Github project and Websites* 
- Lifetime[source-code]: $150 

πŸ“© Contact me: https://t.me/apesofficial 

Happy HuntingπŸ”₯
❀3πŸ‘1
🚨 New Finding with Secret Hunter 🚨

Just discovered a Publicly Accessible JavaScript file exposing PII 🀯
This kind of issue is often overlooked, yet it can lead to serious data leaks.

πŸ” Found using Secret Hunter
πŸ’₯ Real-world impact
🧠 Real bug hunting results

If you’re into bug bounty, recon, or security research, you’re in the right place πŸ‘‡

πŸ‘‰ Join our community:
https://t.me/kassems94

πŸ“© Or DM directly to subscribe to the tool 25$/mo and special price for old customers:
https://t.me/apesofficial
❀2πŸ‘2
πŸ“Š Help us shape our pricing!

Which option do you prefer for accessing our tools?πŸ‘‡ A: Monthly subscription with light payments B: Lifetime access with a one-time payment Vote now and choose A or B⚠️ Your feedback directly impacts our next offers!
Anonymous Poll
26%
A: Monthly
74%
B: Lifetime
πŸ‘1
πŸš€ Special Offer for New Subscribers – 48 Hours Only!

Based on requests from our new community members, we’re activating a limited-time discount for 48 hours only ⏳

πŸ’₯ Secret Hunter – $20/month
πŸ’₯ XOXO-XSS – $20/month

You are the reason behind our success, and we grow *with* you 🀝
That’s why we always reward loyalty.

πŸ”₯ Subscribe now to become one of our early subscribers and get:
- Exclusive future discounts
- Access to private giveaways
- Special perks reserved only for old subscribers

πŸ“’ **Support us by sharing this offer with your friends and teams
Let others benefit before the offer ends!**

πŸ‘₯ Join our community:
πŸ‘‰ https://t.me/kassems94

πŸ’¬ DM for subscription & details:
πŸ‘‰ https://t.me/apesofficial

⏰ Offer ends in 48 hours β€” don’t miss it.
πŸ”₯2❀1
πŸ’°πŸ”₯ $10,000 Bug Bounty β€” Real Result πŸ”₯πŸ’°

πŸš€ One of our customers earned a $10,000 bounty
after discovering a vulnerability using Secret Hunter πŸ› οΈ

πŸ”— The bug was successfully chained with SQLi + IDOR
⚠️ Resulting in a critical security impact
🌍 For a company in Indonesia

❌ Not theory
❌ Not demos
βœ… Real tools. Real bugs. Real money πŸ’Έ

🎯 Discover real attack surfaces
🧠 Chain bugs that matter
πŸ† Get paid

πŸ‘₯ Community πŸ‘‰ https://t.me/kassems94
πŸ’¬ DM for access 20$/mo only for 48 hours πŸ‘‰ https://t.me/apesofficial

Find bugs that pay πŸš€πŸ’₯
πŸ”₯6❀5🌚1
πŸš€ UPDATED SPECIAL OFFER – Due to High Demand (48 Hours Only!)

Because of the *huge increase in new subscription requests* πŸ“ˆ
we’re re-activating this limited-time offer for 48 hours only ⏳πŸ”₯

πŸ’₯ Secret Hunter β€” $20/month
πŸ’₯ XOXO-XSS β€” $20/month

You are the real reason behind our growth 🀝
And we grow *with* our community β€” always.

πŸ”₯ Subscribe now and become an early subscriber to unlock:
- 🎯 Exclusive future discounts
- 🎁 Private giveaways access
- πŸ›‘ Special perks reserved ONLY for old subscribers

πŸ“’ Help us grow
Share this offer with your friends & teams so they don’t miss out before it ends!

πŸ‘₯ Join our community:
πŸ‘‰ https://t.me/kassems94

πŸ’¬ DM for subscription & details:
πŸ‘‰ https://t.me/apesofficial

⏰ Offer valid for 48 hours only β€” demand is high.
πŸ”₯4❀1
🚨 New Real-World Result from a Secret Hunter User! 🚨

πŸ’₯ JWT Token exposed in client-side JavaScript
πŸ’₯ Weak secret key identified
πŸ’₯ Report officially triaged on HackerOne βœ…

πŸ“© Message from HackerOne analyst:
> *β€œI’m discussing this submission internally with the team…”*

πŸ”₯ This is a real result achieved using Secret Hunter
No fake claims. No theory.
➑️ Actual vulnerabilities ➜ Real impact ➜ Triaged reports

πŸš€ Want to find bugs like this?
πŸ‘‰ Join the community: https://t.me/kassems94

πŸ“© Or DM directly to subscribe
https://t.me/apesofficial

#SecretHunter #BugBounty #HackerOne #JWT #ClientSideSecurity #RealResults
❀2πŸ”₯2πŸ•Š1
Bug-bounty-tipsπŸžπŸ’°
Photo
🚨24 hours left

πŸš€20%OFF on all Tools

πŸ“©DM: @apesofficial
πŸ”₯ SECOND BUG CONFIRMED β€” SAME CUSTOMER πŸ”₯

Another solid finding using Secret Hunter πŸ› οΈ
This time, the same customer discovered a second vulnerability πŸ’₯

πŸͺ£ Open S3 Bucket
➑️ Leads to Sensitive Information Disclosure

Real users.
Real results.
Real impact. πŸš€

Secret Hunter is proving its power again and again.

πŸ‘₯ Join our community:
πŸ‘‰ https://t.me/kassems94

πŸ“© Want access to Secret Hunter?
DM me directly:
πŸ‘‰ https://t.me/apesofficial

#BugBounty #InformationDisclosure #S3 #CloudSecurity #SecretHunter
πŸ”₯3❀2
🚨πŸ”₯ NEW YOUTUBE GIVEAWAY – BIGGER THAN EVER πŸ”₯🚨

We’re launching a new giveaway, and this time it’s EXCLUSIVE on YouTube 🎯
And yes…
πŸ’₯ The prize is BIGGER and BETTER than before πŸ’₯

πŸ“Œ How to enter:
1️⃣ Subscribe to the YouTube channel
πŸ‘‰ https://www.youtube.com/@kassem_s94
2️⃣ Leave a comment on this video πŸ‘‡
πŸ‘‰ https://youtu.be/wDQxVVHDlfc

⏰ Winner will be announced after 48 HOURS
Don’t miss your chance πŸ‘€πŸ”₯

πŸš€ Increase your chances:
- Leave a real comment (not just emojis πŸ˜‰)
- Share the video
- Send it to your friends and tell them to subscribe too

πŸ’£ Let’s blow up the channel
πŸ’£ Share the post πŸ’ͺπŸ”₯

Good luck everyone πŸ€πŸš€
πŸ”₯3❀2πŸ‘1
πŸŽ‰ YouTube Giveaway Result πŸŽ‰

The draw has been completed from the YouTube video comments,
and the winner is: 15minutesenglish10 πŸ†
as shown in the video βœ…

🎁 Main Prize:
πŸ”₯ 50% discount on any tool of the winner’s choice

🎁 Consolation Prizes:
πŸ’₯ 20% discount on any tool of choice for all subscribers

⏳ Important:
All discounts are valid for 48 hours only ⏰

πŸ™ Thank you to our amazing supporters
More surprises are coming for this awesome community πŸ’™

πŸ“’ Please share this with your friends

πŸ”” Join our channel:
πŸ‘‰ https://t.me/kassems94

πŸ“© DM for tool subscriptions:
πŸ‘‰ https://t.me/apesofficial
πŸ‘3❀2
Bug-bounty-tipsπŸžπŸ’°
Photo
⏰ Less than 24 hours left!

Don’t miss your chance to get a 20% discount on any tool you choose πŸ”₯

πŸ“© DM now:
πŸ‘‰ @apesofficial

This offer expires soon ⏳
πŸ”₯2
πŸ› οΈ Final touches on a GitHub dorking tool to find exposed API keys, secrets, creds, and configs linked to any website or company.

πŸ“Š Which feature matters most to you?
Anonymous Poll
37%
πŸ”‘ Extract API Keys & Secrets
8%
🌐 Scan leaks by domain / company name
6%
πŸ“‚ Advanced GitHub dorks automation
5%
🚨 Real-time alerts for new leaks
43%
πŸ“ˆ All of the above (full tool)
πŸ”₯ New Customer. New Bounty. Real Results. πŸ”₯

Another successful bug bounty worth ~$1300 (22M IDR) πŸ’°
Found using Secret Hunter πŸ•΅οΈβ€β™‚οΈ

πŸ” What made the difference?
- Extracting secret JS files
- Discovering hidden endpoints
- Leading to a Broken Access Control vulnerability
- Valid report βœ… Closed successfully

πŸ’¬ Customer feedback:
> *"Your tools bring me to secret JS files… like gold."* πŸ₯‡
> *"You make finding endpoints easy."*

πŸš€ This is what happens when recon is done right.

If you want to:
- Save hours of manual recon
- Find real attack surfaces
- Increase your bounty success rate

πŸ› οΈ Secret Hunter is built for that for 25$/mo ONLY.

πŸ‘₯ Join the community:
https://t.me/kassems94

πŸ’¬ DM to subscribe to the tools:
https://t.me/apesofficial
πŸ‘2