Abdullah Nawaf (HackerX007)🇯🇴
@XHackerx007
Followers
8K
Following
840
Media
133
Statuses
636
Hackerx007 Bug hunter FB/Twitter/Mail.ru HOF 41 Bugcrowd rank 11 Bugcrowd P1 rank with 226 p1 :) In love with P1 ;)
Hashemite Kingdom of Jordan
Joined February 2021
My session Is on YouTube Now ! This session at #PHDays are tailored to help you — whether you're a Bug Bounty Hunter or a Pentester — discover Authentication Bypass vulnerabilities in creative ways. You’ll enjoy a variety of tips and tricks that will sharpen your skills, and
7
26
163
RT @TheMsterDoctor1: 💥 ADVANCED XSLT INJECTION: From Info Disclosure to RCE. 🔥 Rare. Powerful. Quiet. This is the kind of injection that si….
0
7
0
RT @Mohamed87Khayat: The endpoint was :. /storage/users.csv. Also try more endpoints like. /storage/orders.csv./storage/transactions.csv./s….
0
82
0
This is your chance to be a speaker at PHDays Indonesia — one of the biggest and most exciting conferences!.It’s a great opportunity to meet top-tier security researchers from around the world. What are you waiting for?.
🟥 CFP live — Positive Hack Talks, Jakarta 🇮🇩, July 23. → Hackers, defenders, bug hunters, researchers — submit your talk. ✅ Flights & hotel covered. Our 5th #PHTalks — always hits hard. Free community-driven event. 250+ infosec pros.
1
2
28
❤️🔥 this is amazing !!! Great idea from Great man❤️.
1
0
19
What’s happening here is really strange! @Hacker0x01 is playing judge! A minor disagreement broke out between a few people on X—so why is HackerOne banning them from the platform? Conflicts between bug hunters on Twitter happen all the time, yet H1 has no right to step in and.
Shame on @Hacker0x01.Please like and retweet .Previously, this platform demonstrated racial discrimination when it blocked all researchers in Russia. And today it's back to do that with the. The Arab community and Muslims in particular.I got a full-time ban on H1 me @h4x0r_dz &
10
22
135
🇯🇴🔥🔥❤️.
0
0
4
🔥🇯🇴.
1
0
5
RT @haxor31337: From SSRF to RCE and transfer money in core banking. It is really cool red team case. A perfect combination of external and….
0
70
0
0
1
0
RT @bhavukjain1: Such a wonderful trip with the gang! Thanks for making it a memorable one 🤟.@XHackerx007 @GodfatherOrwa @HusseiN98D @amosh….
0
5
0
RT @HatemAliyan: 💡 Pro tip:.Check /cdn-cgi/trace on live hosts — it leaks internal IPs 👀.Then scan the range (ASN + naabu) → reverse DNS (d….
0
9
0
It was an incredible time with this amazing team!.I truly enjoyed every second—we laughed like crazy! 😂😂.Big thanks to @amoshkov for the unforgettable moments in Moscow!!.
Another part of the #PHDays speaker gang has landed! Welcome to Russia 🇷🇺❤️ @GodfatherOrwa @HusseiN98D @Zigoo0 @BlueEye46572843 @bhavukjain1 @XHackerx007 @llfamsec and Xin! More are joining us in the coming days 😄 Feeling overexcited)
1
0
40
RT @WebSecAcademy: Want to find HTTP Request Smuggling vulns without manually crafting weird requests?. Check out HTTP Request Smuggler, a….
0
52
0
When will this end? Still, no one seems to care. This is nothing less than genocide—open your eyes and face the truth!.#GazaGenocide .#Gaza.#SaveGaza.
0
3
23
Great and useful talk from @GodfatherOrwa .Enjoy it.
Video of my talking in #PHDays at @PTsecurity_EN . Hope you like it and enjoy it . #bugbounty #bugbountytip #bugbountytips #infosec.
2
3
45
It was an honor to be a speaker at #phdays on Moscow!.Big thanks to @phdays @PTsecurity_EN @StandoffBB for the kind invitation. I hope the insights and techniques I shared were valuable and impactful. Looking forward to seeing you again at PHDays 2026 — with even more powerful
4
0
52
See you tomorrow (May 25) at 10 AM Moscow time!.I'll be sharing some mind-blowing tricks to level up your authentication bypass techniques!.You can watch live .Thanks for @phdays @PTsecurity_EN @StandoffBB For this amazing live Streaming!!.#PHDaysFEST.
The legendary @XHackerx007 is joining #PHDays and delivering a powerful talk on auth bypass in pentesting and bug bounty hunting tomorrow. Top 50 on Bugcrowd, 200+ P1s, and a true Hack Cup champion. Don’t miss it:.
3
2
31