Escalating Your Bugs With GDPR Impact

[@faique2995]

HTTP request smuggling bounce off my head #misunderstoodNA

[@shotdregghun8374]

Self XSS is a bug I'd say is misunderstood. If it's combined with registration CSRF, then it suddenly becomes true XSS via CSRF. Never say self XSS is useless, combine it with other bugs to create attack chains. #misunderstoodNA #bountypls

[@SEX_ON_DRUGS]

nice video i havent seen a bug bounty video on this topic before

[@samh5247]

IDOR - ppl sometimes don’t get the difference between public and private data. #misunderstoodNA

[@ordavid3703]

One of the misunderstood subjects is How to avoid vulnerabilities by doing secure code reviews, In addition CSRF Subject and how to recognize and use #misunderstoodNA

[@gk_eth]

I guess S3 bucket takeover is misunderstood since some cloud enumeration tools throws 404 buckets which can be created by anyone shows less or null impact.. #misunderstoodNA

[@RX_100.0]

Rxss and rate limiting, Subdomain take over issues were most misunderstood #misundeestoodNA #bountypls

[@devangsolanki4622]

Most misunderstood bug would be cros misconfiguration #missunderstoodNA

[@mahtabmehek]

Low hanging fruits aren't prioritised enough, can you please touch on this topic? #misunderstoodNA #bountypls

[@SaiKrishna-eo5tf]

Race condition and CORS misconfiguration #misunderstoodNA

[@Kamikaze00ish]

Looking forward to seeing more videos from you! XSS doesn't make sense to me because I'm still so new and learning everything. #misunderstoodNA #bountypls

[@deepakparmar6863]

Open Redirect is mostly misunderstood #misunderstoodNA

[@mayank-ir7tm]

Sensitive information disclosure #misunderstoodNA

[@manmoon7396]

Application level DOS #misunderstoodNA #bountypls

[@kasperskyhackfi]

CORS, Web cache poisoning #misunderstoodNA

[@Diddy81]

prototype pollution #misunderstoodNA

[@rami3sam]

Sensitive information disclosure especially if it's done by verbose error messages if they provide rich information about something very useful, when devising your exploits that could be the difference between failed and successful exploitation #misunderstoodNA

[@rami3sam]

sometimes the person who will triage your report wouldn't understand how disclosing that information is dangerous and would only see cryptic messages that doesn't have any meaning

[@alexandart2130]

Please talk about JWT token #bountypls

[@mosaa.mohmed8478]

web cache poisoning #misunderstoodNA

[@marvelmaniac_]

rate limiting issues #misunderstoodNA

[@bignonbaba5696]

account takeover #misunderstoodNA

[@breakingthroughinside]

DOM based XSS #misunderstoodNA

[@JayCyberSecurity]

i bet it's CSRF #misunderstoodNA

[@Sumit-yadav806]

Dom basses xss #misunderstoodNA

[@rohanrajgupta3614]

Dom xss #misunderstoodNA

[@liverecon]

one demo your day a day

[@dhruvikagarwal6544]

One of the most misunderstood bug is Weak Input Validation. If an application is accepting special characters like , ? then that is not a weak input validation, unless you have a proof that the same is stored/reflected without any encoding #misunderstoodNA

[@manishneupane6070]

👏👏

[@behnamdadashi9059]

I Would like to learn more about Mass Hunting, also I think HTTP smuggling is one of the most misunderstood bugs. #misunderstoodNA #bountypls

[@AsifIqbal-qg8lp]

I think sometimes some bugs like No Rate Limiting in some endpoints misunderstood because clients(not all) think that it will not going to affect their application however it can affect them badly. Like if there is no proper rate limiting set in a forget password endpoint where user gets mail for reset password link then user can be easily flooded with mail which makes a bad impact for that organization. #misunderstoodNA

[@Xplo8E]

#bountypls i want to know more about graphql Pentesting and Parameter pollution

[@shreyapohekar8418]

One of the misunderstood bug is subdomain takeover. Seeing those error messages corresponding to different services doesn't really mean that it is a subdomain takeover. People need to do a full poc to prove it. #misunderstoodNA

[@Pr4547h]

#misunderstoodNA XXE

[@pushpinderkaur6570]

Would love to learn cloud security, esp AWS. #bountypls

[@zenkoyuri]

Would love to learn more about cloud security #bountypls

[@samratgupta8487]

Great One..

[@mrblackhat8088]

1st