BePractical – Telegram
BePractical
7.4K subscribers
232 photos
24 videos
6 files
395 links
If you have any doubts then email at faiyazahmad.online@gmail.com
Download Telegram
Media is too big
VIEW IN TELEGRAM
Hey everyone,

I'm thrilled and deeply grateful for the incredible response to our first web reconnaissance workshop! Your enthusiasm and feedback were amazing, and it's clear that many of you are eager to enhance your bug bounty hunting and penetration testing skills.

Due to high demand and many not being able to join the first batch, I'm excited to announce another round of the workshop! This is your chance to dive deep into web reconnaissance, learn practical techniques, and connect with a passionate community.

Why Join This Workshop?

-> Full Practical Session
-> Live Q&A session
-> Demo On Real Target

I genuinely appreciate your support and interest. Let’s continue this journey together and take our skills to the next level!

Reserve Your Spot Now:

India: https://rzp.io/l/bepracticalWorkshop
Other Countries: https://rzp.io/l/bepracticalInternational
Thank you once again for your love and support. Let’s make this second batch even more amazing!

Stay curious and keep hacking,
👍841
BePractical
Hey everyone, I'm thrilled and deeply grateful for the incredible response to our first web reconnaissance workshop! Your enthusiasm and feedback were amazing, and it's clear that many of you are eager to enhance your bug bounty hunting and penetration testing…
Here's some more information about the workshop

1. Timing: 7:00pm to 8:30pm
2. Duration: 7 days(20th July - 27th July)
3. Language: English
4. Last Date Of Registration: 15th July
5: Recordings for each session will be shared.

3 more days to register!
👍4
Hi, If anyone is having any trouble in payment using PayPal then please let us know
3
New video will be releasing tomorrow! Stay tuned

Also, there's only 2 more days remaining for registration!
9👍3
Hi everyone, Today is the last day to register in the workshop!
👍2
For those who have registered into the workshop which is going to be held on 20th July 2024, Your mobile number will be added in our group on 18th July 2024.Thank you. Keep learning, Keep Hacking!!!
👍3
19K subs completed!!🥳 Thank you everyone for your support❤️
21🔥4
Do you continuously montior your target for new assets?
Anonymous Poll
60%
Yes
40%
No
Bug Bounty Tip: While testing on endpoints like /uploadedFiles or /uploads where you think that the app is storing files..make sure to look for common files (like .txt,.pdf,.zip,.tar.gz)

In a recent penetration testing engagement, I was able to uncover sensitive log files and some invoices of a company using this same method!

Keep Hacking!
👍266🔥5
Hi everyone, I have recently found an interesting vulnerability which allowed me to get all the exposed log files that contains juicy information like hidden directories, credentials etc



Here's the methodology:

1. Did initial content discovery and found /system endpoint (It was giving 403 error)

2. Then i went to discover content inside the "/system" directory and found "/system/logs"

3. Finally, Got the log files!!!
33👍13🔥5😁2
Hi guys! I hope you all are doing well. First of all, I am really sorry that i am not uploading any videos for a long time. To be honest, I was not feeling well and lot of other things were happening at the same time so couldn't get the time to upload new videos. However, I will try my best to be active from now on & help the cyber security community with whatever i can!!

With that being said, Let me share an exciting news with you all. I am happy to share that i am currently ranking as number 1 hacker in one of the private VDP programs on hackerone! The only suggestion/advise i can give you all is:- Focus on 1 target & hunt on it for months!

Keep learning & Keep hacking🔥
🔥17👍1110
I am honored!
42👏11🔥5👍2😁1
Hi everyone, New video will be releasing tomorrow! Stay tuned
👍16🗿3
Sometimes i feel like h1 triager's goal is to just mark every report as "Informative"

I have recently submitted a report the a private company which was marked as Informative by H1 security analyst. I knew it was a valid security issue so i asked for mediation and the internal staff from the company then finally triaged the report
👏163👍1
A productive weekend on hackerone!
🔥30👍5👏5
Some more reports triaged this week!
Tip: Recon, Recon & Recon
👍7
To all my mates from our beloved country India, Happy Independence Day 🇮🇳
24🔥6👍2❤‍🔥1😇1
We’ve Reached 20K Subscribers on YouTube!

I can’t put into words how grateful I am today. Just a few months ago, we celebrated 10K subscribers, and now, we’re a community of over 20,000! I’m truly thankful to each and every one of you for your incredible support and encouragement throughout this journey.

To show my appreciation, I’m planning to host a free 2-hour webinar on bug bounty (I’ll announce the topic and date soon).

Thank you all so much from the bottom of my heart. Let’s keep learning and keep hacking together!
22👍6🔥3👎1🕊1