Aastha
@Paaastha
Followers
1K
Following
1K
Media
17
Statuses
408
BugBounty, Travel & Physics.
France 🇫🇷
Joined July 2015
Yay, I was awarded a $4632 bounty on @Hacker0x01! #TogetherWeHitHarder.
hackerone.com
she/her -
7
0
33
RT @efaav: I found another vulnerability to leak Microsoft Employee PII ($7500 Bounty) and 700M+ Microsoft partner records. Here's the writ….
blog.faav.top
How I hacked the Microsoft Device Pricing Program to leak Microsoft Employee PII and 700M+ Microsoft partner records.
0
71
0
RT @albinowax: When I condense nine months of research discoveries into a 40-min talk, it can make it seem easy. For a taster of the true e….
0
44
0
RT @albinowax: This is some really nice research! It's definitely worth trying these techniques against cryptocurrency extensions! https://….
marektoth.com
I described a new attack technique that I used against 11 password managers. The result was that stored data of tens of millions of users could be at risk.
0
53
0
RT @albinowax: Sometimes people think they've found HTTP request smuggling, when they're actually just observing HTTP keep-alive or pipeli….
portswigger.net
Sometimes people think they've found HTTP request smuggling, when they're actually just observing HTTP keep-alive or pipelining. This is usually a false positive, but sometimes there's actually a real
0
24
0
Found my first RCE . I was able to update an API path using target's own environment variables store resulting in full control of API endpoint.
4
4
79
Why there are some days when you absolutely hate doing bug bounty while on other day you loving it?.
1
0
14
RT @rikeshbaniya: if the target uses zendesk to handle support emails. you could send an email with payload. `{{ticket.ccs[0].name}}a{{tick….
0
89
0
Received an invite hack crypto web app, what kind of bugs that I can look for?.
4
0
9
A month since I started doing bug bounties full time on @Hacker0x01 , picked an average paying program and made $10,195 this month.
11
2
101
