Callmed
@HarshDRanjan1
Followers
1,756
Following
720
Media
62
Statuses
3,747
IT Slave Private investigator at Night
Jharkhand, India
Joined November 2018
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
オリンピック
• 561044 Tweets
Christianity
• 187077 Tweets
Cène
• 76784 Tweets
#TENatWATERBOMBBUSAN
• 68498 Tweets
DDAY YOU BETTA CATCH UP
• 67779 Tweets
隅田川花火大会
• 67485 Tweets
WTWGWS x MILKLOVE
• 64901 Tweets
ONE WORLD ONE SKY
• 63977 Tweets
世界遺産
• 60416 Tweets
佐渡金山
• 47043 Tweets
#男子バレー
• 42457 Tweets
バレー男子
• 33610 Tweets
#Olympics2024Paris
• 26356 Tweets
ニッポン
• 24082 Tweets
Vakko
• 22178 Tweets
#アークナイツハニバ2024
• 18259 Tweets
#withMUSIC
• 15941 Tweets
Patrick HK Walk Vlog🫨
• 14417 Tweets
Charlie Hebdo
• 14121 Tweets
フルセット
• 12347 Tweets
モンテス
• 10710 Tweets
Pinned Tweet
I just published Bounties 💸 vs Health 💊
Let me know what you guys think about this issue
#bugbounty
#Cybersecurite
#health
#Hackers
3
50
157
Yay, I was awarded a $2,500 bounty on
@Hacker0x01
!
#TogetherWeHitHarder
It was a unique approach, will disclose soon
15
6
224
I'm about to start a 20-day bug bounty journey tomorrow on
@Hacker0x01
!
Gonna hunt for extreme Hours daily. Never been this serious before!
wait for the results will surely publish
#BugBounty
#Cybersecurity
30
3
155
Finally!! crossed 500+ points for the first time!!
@Bugcrowd
#ItTakesACrowd
👀still No sign of hoodies
11
1
127
Broke a 6 year old logic🦖🍺
Yay, I was awarded a $1,600 bounty on
@Hacker0x01
!
#TogetherWeHitHarder
9
1
130
Yay, I was awarded a $5,000 bounty on
@Hacker0x01
!
#TogetherWeHitHarder
Bhagwan sabko paise de, shuruwat mujhse kare 🤧
14
1
129
Finally Top 1K at
@Bugcrowd
the only Motivation
@ADITYASHENDE17
and
@dhakal_ananda
,Thank You for Pushing me and Motivating .
Next goal: Top 500
8
4
124
My first disclosed report on
@Hacker0x01
IDOR - Delete all Licenses and certifications from users account using CreateOrUpdateHackerCertification GraphQL query
#BugBounty
22
12
117
Show some love and Hate, ready for anything because now I will do full-time hunting. RT If You like it 🙂
@dhakal_ananda
@ADITYASHENDE17
@ThisIsDK999
@stokfredrik
@Virdoex_hunter
@th3cyb3rc0p
@1ndianl33t
@udit_thakkur
@0xKaran
7
36
106
Folks here is a Great list of Open Bug-Bounty Targets by
@Bugcrowd
Check it out( 500+ Targets)
@ADITYASHENDE17
@impratikdabhi
@ThisIsDK999
@Virdoex_hunter
2
35
89
The guy who locked my recent report
@0v3r_w4tch
go give it a read ;)
IDOR: Authorization Bypass in LockReport Mutation for public reports
2
8
72
Yay, I was awarded a $250 bounty on
@Hacker0x01
!
#TogetherWeHitHarder
Finally the curse is broken 💀😉
11
1
70
😂first time on h1 private
Yay, I was awarded a $250 bounty on
@Hacker0x01
!
#TogetherWeHitHarder
2
1
64
I failed to understood the issue but
@datph4m
went ahead and exploited the IDOR in it but
@Hacker0x01
judged it to be a Medium severity , can’t argue any more.
Able to Create Testimonials for myself using Sandbox
#Bugbounty
#Bugbountytips
#hackerone
5
3
62
Finally Hacked Hackerone 😼
Yay, I was awarded a $2,500 bounty on
@Hacker0x01
!
#TogetherWeHitHarder
7
1
56
Me ,
@0_0eth0
, and
@hackerspider1
Hacked
@Hacker0x01
again !! Go give it a read.
Able to see Bonus amount given to a report even if the bounty and Bonus is not visible to public or mentioned in {Report-Id}.json
#BugBounty
#hackerone
8
5
53
Got a Crit after a year , it was a VDP so no rewards but this mail from
@Hacker0x01
made my day a little easy 😸
3
0
51
Found a critical IDOR on
@Hacker0x01
Sandbox.
As the Feature was new, demo data was used.
the report was Informative and in reply, they said "This is how we set sandboxes. Flags get set, one of them giving access to this page and showing demo data" (1)
#bugbounty
5
2
47
All
@Hacker0x01
programs scope are showing today’s date on last update , who th exploited it 🙂
9
0
45
Finally Crossed 100 Points
@Bugcrowd
with Severity at 3.94
Happy to work with Bugcrowd and make things Safe.
Next Aim is to get a Bugcrowd Swag, Hope to get it soon with a Lot of Bounties .
5
0
37
(1/2)
Tired of Duplicate on Long String DoS on the web apps?
Try this < Apply the Long String using the web app and open the same stuff in Android App. The app will crash always or will lag if vulnerable.
#BugBounty
#bugbountytips
1
12
32
Because of
@Hacker0x01
slow triaged I am suffering.
New featured was introduced and I found a bug in it but before the triager can reproduce it , they took the feature down thus making it a NA according to triager.
Is this case normal.
12
1
32
My bro at 18 🔥
I just published the blog post on my journey and review of AWAE/OSWE (WEB-300) by Offensive Security.
Do give it a read :)
14
64
278
1
1
26
And people are saving it in notion
@SaveNotToNotion
#bughunting
35 SST injections in one day
@Hacker0x01
All DELETE & GET requests
Expecting 12k$+
Payloads used:
{{7*7}}
{{8*7}}
{{8*8}}
{{111-7}}
{{222-3}}
{{1337/1337}}
{{1337+1}}
{{1337+2}}
{{1331+6}}
{{payloda}}
{{1}}
{{2}}
#bugbountytips
#richlife
#audemarspiguette
27
107
418
7
2
20
@PentesterLab
Essential badge 😍.... I just got the pro account yesterday and I am already in love with the way you guys teach there and those exercises..... Everything is top notch.... <3
2
1
20
Hard work always pays 😶, let's hunt for PS5 from 2nd of March
2 weeks of continuous bug hunting and here is the result. Thanks
@Hacker0x01
#bugbounty
#togetherwehitharder
24
4
364
1
0
19
Escalated my low severity report of
@Hacker0x01
to High by reading tweets and talking with
@errorsec_
😴🥂
3
0
19
🤤🤤☘️
1
1
27
3
0
17
Finally HOF at
@oneplus
Thankyou
@ADITYASHENDE17
@Assass1nmarcos
Sometimes the Demotivation inside you makes you do stuff that you were never supposed to 😎
4
2
17
What Annoys You The Most in The Platform You Work?
Mine: 'Eligible to apply'
@debangshu_kundu
@dhakal_ananda
@ArmanSameer95
3
0
15
The title and the summary explains everything, it was an easy one but surely tricky to notice 😜
#bugbounty
0
6
26
3
1
15
a person below 3k reputation or 4.0 signal cannot comment on a closed report.
But can create a mediation which will increase the supports work which is already slow by leaps and bounds. People will be creating more mediation now. How are you tackling this
@Hacker0x01
@jobertabma
2
0
15
@Hacker0x01
is definitely one of the best programs I have hunted. They are not rigid like others and always ready to listen and correct if anything is wrong . I didn't create any support tickets , spam the report section or tagged Hackerone's staff on Twitter .❤️
A huge thank you to
@HarshDRanjan1
for patience relating to report . Severity went Medium -> High; bounty raised. Good programs will re-evaluate reports with rational arguments. Hackers, thanks for the CVSS "Privileges Required" feedback. Action underway.
10
6
96
3
0
13
@theXSSrat
If you need to understand the Life read "Bhagwat Gita" You will get all the answer regarding life, I prefer this over everything because it's not a Holy book it's the Life and any one can read this regardless of there religion and see the magic.
1
0
14
Hey folks,
Here is a Great video on Dos & DDoS by
@codingo_
Do not repeat my mistakes at
@Bugcrowd
but remember if the program has Out-of-scope Denial of Service.
1. Do not report a DDoS using wp-cron.php
2. Do not report Pixel flood attack
(1/2)
I find DOS to be very misunderstood. Let's talk about why, and what goes into an impactful DOS that matters within a bug bounty program. 👉
#bugcrowdtipjar
#bugbountytips
4
48
157
1
4
14
🥳🥳Finally something good
#1st
bounty
Thank you
@Kirq
@thecybermentor
@NahamSec
@stokfredrik
@albinowax
For your motivation and sharing
1
0
13
Gotta make it hard , more 20 reports within the next 15 days remaining
3
0
11
Programs are all Mighty.
Above everything , even if they scam you or being unfair, You cannot go against them.
The middleman may try to convince the client but won’t fight for you and that’s the truth of
#bugbounty
4
1
12
Learning Xss from Scratch , If you have any lab suggestions or Resources please do mention it below. I will add all my resources and labs here while I will learn in these coming days.
#bugbounty
#xss
4
3
9
Give it a read
⚡ Datadog api keys exposed can be used to do all the read and write access to the instance
👨🏻💻
@HarshDRanjan1
➟ Mars
🆘 Critical
💰 None
🔗
#bugbounty
#bugbountytips
#cybersecurity
#infosec
0
2
19
4
0
10
2
0
9
@PurbiaLaxita
all these beginner tips are already out there share something new or else don't.
3
0
7
@Cyber_Ritik
@Bugcrowd
@ADITYASHENDE17
Review your hacking methodology bro , you trying to win the game with luck and it’s dangerous. Congratulations for the first bounty, hard works always pays
1
0
8
When You really finished every cup of Horlicks in your childhood.
In April, I submitted 268 vulnerabilities to 3 programs on
@Hacker0x01
.
#TogetherWeHitHarder
17
5
239
0
0
6
(2/2)
what worked for me?
The program was having a chat feature, so I just send the long string in the chat but nothing happened in the web app but when I checked the Android app, the App stoped working and was awarded a p2 <3
let me know if this is a Duplicate tips 😂😂
2
1
7
It was a nice bug on
@Shopify
⚡ Staff without Manage Themes permissions can update themes
👨🏻💻
@HarshDRanjan1
➟ Shopify
🟧 Medium
💰 None
🔗
#bugbounty
#bugbountytips
#cybersecurity
#infosec
0
1
20
1
0
7
🙌🙌
I've made over 100k on SSRF vulnerabilities.
They aren't always as simple as pointing it at localhost or AWS Metadata service.
Here are some tricks I've picked up over the past 5 years of web app testing:
47
869
3K
0
1
7
Happy New year everyone
#HappyHunting
#Happylife
@thecybermentor
@stokfredrik
@dhakal_ananda
@k3ra__
@Hackers_Guild
1
0
7
Happy Birthday to my partner-in-crime and work buddy! 🎉 From deadlines to caffeine-fueled brainstorms, we’ve tackled it all together. Here’s to more epic projects and unforgettable office shenanigans! 😜🎂
@errorsec_
May your day be full of happiness and a great life ahead.
3
0
7
A must read 🔥🔥
We Hacked GitHub for a Month : Here’s What We Found
@MrRajputHacker
🤝
@Th3Pr0xyB0y
#BugBounty
#bugbountytips
#infosec
#cybersecurite
12
127
371
2
0
6
James uncle is the best , can’t wait 🔥🔥
I'm thrilled to announce "Listen to the whispers: web timing attacks that actually work" will premiere at Black Hat USA!
After nine months of running bulk timing attacks on thousands of live sites, I've got a lot to share :D
#BHUSA
@BlackHatEvents
36
107
658
0
0
6
Lets report 10 submissions.
4
1
6
@TiGTHOR
@stokfredrik
@NahamSec
@hakluke
@InsiderPhD
@zseano
@Jhaddix
@thecybermentor
@_johnhammond
@dccybersec
ALL OF THEM ARE GOLD MINES AND SPECIALLY
@NahamSec
and
@thecybermentor
i have watched them continues for 9 hours and without getting bored for a single minute
2
0
4
@hakluke
@Jhaddix
@thecybermentor
was the best but there are more
@NahamSec
@stokfredrik
@albinowax
@vickieli7
@NullByte
@ADITYASHENDE17
0
0
5
@noobsec_org
@XssFan
@Bugcrowd
Can u do a write up how to chain these without mentioning the web-application name
0
0
5
🙂It hurts
A few months ago
@Hacker0x01
’s AI hack agent was capable to find basic vulnerabilities and thus solve the first few Hacker101 CTFs. Soon it’ll be able to solve all of them. Perhaps we should launch a leaderboard of developers that build AI agents that can solve the CTFs the
11
7
143
2
0
5
They know the business
0
0
4
Worst Identity verification by
@Bugcrowd
🥲 can't match my face with my Identity Card so can't get verified for lifetime I guess. Same was accepted by other platform 🙂
1
0
5
1
0
5
1
0
3
🤣they never stop
Dear Scammer, (
@FalgunR
@cyberoctet
,
@cehvikas
)
I request You To Don't Use My Bounty Screen Shot and Name. Otherwise
( Ye last warning ⚠️ hain nhi to phir Name search krne per Sb se phele scammer wala article aayega tmsbka Google per )
#bugbounty
#BugbountyTips
4
13
34
1
0
4
@ReebootToInit5
@krishnsec
@SuyashS91823422
@RootxRavi
@cyberx00t
@Bugcrowd
Ek ladka bol rha wo $250 deta hai
2
0
4
0
0
4
isn't the root cause same for
#2516250
and
#2513082
(Program Member Could Duplicate Report To A Non Related Program Original Report)
@Hacker0x01
@errorsec_
0
0
4
Op write-up , if you are new to the community or struggling
0
1
4
@stokfredrik
Your videos really helped me in my starting days and gave me the courage to start hunting , Thank you man🙏
0
0
4
So do I ❤️
0
0
4
@ThisIsDK999
over 50% of the total bug-bounty earnings has been donated to local charities. <3
1
0
4
we hackers only have access to Sandbox features and this really kills our time and is frustrating. please improve this and update the sandbox.
Multiple of my reports got closed as Informative because it was on Sandbox.
(2)
1
0
3
@Currencycloud
please do something we all Indians are dependent upon you.
@Hacker0x01
#Bugbounty
#hackerone
ATTENTION all India based researchers !!!!
Seems like
@Hacker0x01
payment partner[
@Currencycloud
] is no longer processing INR local & SWIFT (USD) payouts to India as per this post -
Kindly update your payout preference in
@Hacker0x01
10
10
69
0
0
4