Tamim Hasan – Medium

Aug 3

Elasticsearch A Easy Win For Bug Bounty Hunters || How To Find and Report

Assalamu Alaikum peace be upon you Hello hackers. I hope you are well. I am Tamim Hasan a Security Researcher and Bug Bounty hunter From Bangladesh 🇧🇩. Today I am telling you one of my recent finding which is about Elasticsearch. So let's started.

Bugbounty Writeup

5 min read

Elasticsearch A Easy Win For Bug Bounty Hunters || How To Find and Report

Published in InfoSec Write-ups

·Mar 29

Analyze your gau result with Gau-Expose Tool

Assalamu Alaikum peace be upon you Hello hackers. I hope you are well. I am Tamim Hasan a Security Researcher and Bug Bounty hunter From Bangladesh 🇧🇩. Today we learn how we analyze our gau URLs results with the Gau-Expose tool. Making this tool Idea comes from Sm9l. So Thank you mate.

3 min read

Analyze your gau result with Gau-Expose Tool

Published in InfoSec Write-ups

·Jun 21, 2021

403 forbidden bypass leads to HALL OF FAME

Assalamu Alaikum peace be upon you Hello hackers. I hope you are well. I am Tamim Hasan a Security Researcher and Bug Bounty hunter From Bangladesh 🇧🇩. Today we are talking about 403 forbidden bypass. I am trying to explain it in a simple way and after that, I will talk about some 403 bypass technic…

403 Bypass

5 min read

403 forbidden bypass leads to HALL OF FAME

Published in InfoSec Write-ups

·Feb 25, 2021

Github Dork

Use Github Dork For Finding Sensitive Information — Assalamu Alaikum peace be upon you Hello hackers. I hope you are well. I am Tamim Hasan a Security Researcher and Bug Bounty hunter From Bangladesh 🇧🇩.. Today I am going to talk about GitHub dork. So what is Github? GitHub is where over 56 million developers shape the future of software, together. Contribute to the open-source community, manage their Git repositories, and doing lots of stuff.

Bug Hunting

4 min read

Feb 13, 2021

Session Related Issue On Password Reset Function

Assalamu Alaikum peace be upon you Hello hackers. I hope you are well. I am Tamim Hasan a Security Researcher and Bug Bounty hunter From Bangladesh 🇧🇩. Today I am talking about a simple bug that I found on intigriti(a bug hunting platform). It is on the password reset function. So what is the password reset functionality? In simple words, It is a…

Bug Bounty

2 min read

Feb 3, 2021

FFUF Tips And Tricks

Read ffuf recon tool tips and tricks in just 5 minutes🚀🚀 — Assalamu Alaikum peace be upon you Hello hackers. I hope you are well. I am Tamim Hasan a Security Researcher and Bug Bounty hunter From Bangladesh 🇧🇩. Today I am sharing some tips and tricks about ffuf tool. I will try to make it simple and easier. For that beginner…

Fuzzing

5 min read

Feb 2, 2021

Nmap Cheat Sheet

Assalamu Alaikum peace be upon you — Hello hackers. I hope you are well. I am Tamim Hasan a Security Researcher and Bug Bounty hunter From Bangladesh 🇧🇩. Nmap, short for Network Mapper, is a free, open-source tool for vulnerability scanning and network discovery. Network administrators use Nmap to identify what devices are running on their systems…

Technology

3 min read