@sanjaymenon 🔥🔥

@Crudge Hi 👋 Once posted, you can't edit your report 🫣

#20 Vulnerable Snippet {{ solution }} ☑️

See more content on our blog: https://blog.yeswehack.com/category/yeswerhackers/

Bug: SQL injection 💉
Lang: PHP 🐘, MySQL 🐬

Check out the explanation in the image below!👇
#YesWeRHackers #BugBounty #YWHSnippet

RT @yeswehack@twitter.com

Vulnerable Code Snippet 💀
Level: Easy 🪲

Does it only work once?!

For all #BugBounty hunters, it is available on Github for hands-on testing! 👉 https://github.com/yeswehack/vulnerable-code-snippets/tree/main/new

#YesWeRHackers
Found the issue? Explain how in the comments! 👇

🐦🔗: https://twitter.com/yeswehack/status/1618972101943107584

Vulnerable Code Snippet 💀
Level: Easy 🪲

Does it only work once?!

For all #BugBounty hunters, it is available on Github for hands-on testing! 👉 https://github.com/yeswehack/vulnerable-code-snippets/tree/main/new

#YesWeRHackers
Found the issue? Explain how in the comments! 👇

The DOJO challenge is still on! 🕹️
Will you win the YesWeHack Swag? 🏅

Get direct access to the challenge below 👇
#YesWeRHackers #BugBounty

RT @yeswehack@twitter.com

⏰ DOJO Challenge #21 - EvilTwin-Admin

🎁 Top 3 reports win a swag pack!
🗓️ Submit your solution before 10/02/2023

Check it out here 👉 https://dojo-yeswehack.com/practice/4401d46f16b6

#BugBounty #YesWeRHackers #YWHDOJO

🐦🔗: https://twitter.com/yeswehack/status/1612841833905770498

#19 Vulnerable snippets solution! ☑️

See more content on our blog: https://blog.yeswehack.com/category/yeswerhackers/

Github repo updated as usual!
➡️https://github.com/yeswehack/vulnerable-code-snippets

Vuln: Open Redirect ⛔️
Lang: JavaScript ⚡️

Check out the explanation in the image below!👇
#YesWeRHackers #BugBounty #YWHSnippet

RT @nullcon@twitter.com

⭐We are thrilled to 😎Welcome back @yeswehack@twitter.com as our 🥈Silver Sponsor! 👊They have been fabulous with their support for the #Infosec community, right from our 1st edition of #NullconBerlin

🎟️Get ready for the adventure➡️http://bit.ly/3Tq3Em2

#NullconDE2023 #GreenCon #Sponsor

🐦🔗: https://twitter.com/nullcon/status/1617444033726484484

RT @yeswehack@twitter.com

Vulnerable code snippets time!💀
Level: Easy 🪲

~ [#]vulnerable..?

Try it out at Github: https://github.com/yeswehack/vulnerable-code-snippets/blob/main/new/vcode/19-new.php

#BugBounty #YesWeRHackers
Found the bug? Explain how in the comments! 👇

🐦🔗: https://twitter.com/yeswehack/status/1616435388507201536

Vulnerable code snippets time!💀
Level: Easy 🪲

~ [#]vulnerable..?

Try it out at Github: https://github.com/yeswehack/vulnerable-code-snippets/blob/main/new/vcode/19-new.php

#BugBounty #YesWeRHackers
Found the bug? Explain how in the comments! 👇

Happy Lunar New Year from all of us at @yeswehack@twitter.com ! 🧨

We would like to wish everyone a prosperous year of the Rabbit. 🐇 May this year bring you happiness, good health, and many opportunities for growth and development. Thank you for being a part of our community. 🚀

Not 1️⃣, not 2️⃣, but 3️⃣ public #BugBounty programs by @openxchange@twitter.com are now available on our platform, to earn up to €5K! Before you start digging, check out our interview with @MartinHeiland@twitter.com, CISO at OX, to know what you can expect from these programs 👉 https://blog.yeswehack.com/yeswehack-news/a-sneak-peek-into-open-xchange-public-bug-bounty-programs/

💡 Want to find out how to discover IDORs by doing code reviews? Check out this video from @Farah_Hawaa@twitter.com 👇

A great opportunity to check our code snippet challenges! 💉

🔗 https://github.com/yeswehack/vulnerable-code-snippets

#BugBounty #YesWeRHackers

RT @Farah_Hawaa@twitter.com

NEW VIDEO 🚨

In this one, I am showing how I analyse some code snippets to find an IDOR vulnerability 🔍

Click below to watch:

https://youtu.be/xBZps1k1sxI

🐦🔗: https://twitter.com/Farah_Hawaa/status/1615690238621540352

Pimp My Burp #7 is out! 🥷

We take a dive into the Burp extension HaE! 🤯

This extension can detect custom regex patterns and highlight them for you so you don't miss the juicy bugs!

Find out more 👉 https://blog.yeswehack.com/yeswerhackers/pimpmyburp/pimpmyburp-7-how-hae-burp-suite-extension-help-you-daily-hunting/

#YesWeRHackers #bugbountytips

RT @Farah_Hawaa@twitter.com

NEW VIDEO 🚨

In this one, I am showing how I analyse some code snippets to find an IDOR vulnerability 🔍

Click below to watch:

https://youtu.be/xBZps1k1sxI

🐦🔗: https://twitter.com/Farah_Hawaa/status/1615690238621540352

#18 Vulnerable snippets solution! ☑️

Congrats @budanthara@twitter.com!
See you in DM for the swag 🎁

See more content on our blog: https://blog.yeswehack.com/category/yeswerhackers/

Type: Local File Inclusion
Lang: PHP🐘

Check out the explanation in the image below! 👇
#YesWeRHackers #YWHSnippet

📣 @Nullcon@twitter.com Berlin is offering a #BugBounty scholarship awarding FREE conference tickets to lucky bug hunters.

Apply here before 20 January → https://share.hsforms.com/1md3-olgVTmOXS-t9nsSGcg4d2c8

RT @c14dd49h@twitter.com

Thanks you @yeswehack@twitter.com for my first rewards 🎉 😎 #bugbounty #Rewards #yeswehack

🐦🔗: https://twitter.com/c14dd49h/status/1614565501115535361

Vulnerable Code Snippets Time 🥷
Level: Medium 🐝

This web application does not like dot dot slash!

Try it out at Github: https://github.com/yeswehack/vulnerable-code-snippets/tree/main/new

#BugBounty #YesWeRHackers
Found the issue? Explain how in the comments! 👇

🎁 The best solution gets an exclusive swag!

🔥 W00t! Nice catch @drak3hft7@twitter.com ! Who will be the next one? 😎

#YesWeRHackers #BugBounty

RT @drak3hft7@twitter.com

Thanks to @yeswehack@twitter.com for this reward.

thanks to this I got this award: #SURGEON. This achievement is awarded to hackers winning the Max Reward on a program.

#bugbounty #cybersecurity #securityresearch #YesWeRHackers

🐦🔗: https://twitter.com/drak3hft7/status/1613545851644690432