BugCod3 GP — Telegram group messages

16 May 2026

Aslekar

Mohsen HNThanks, it is not behind CDN, I am passed that. The thing is, there are so many ports and services running on it, including the one I have breached into, that I don't know which one to pick to focus on 😵‍💫 Therefore I tired to scan them all to pick one, yet never finished scanning. I will try to na

web/ web application 80 443 8000 8008 8080 8081 8088 8443 8888 9000 9001 3000 3001 5000 5001 4200 7001 Database 3306 5432 27017 6379 9200 9300 11211 5984 system service & remote 22 23 3389 5900 5985 5986 445 139 network service & email 25 110 143 465 587 993 995 53 service Dev / Admin / Panel 2082 2083 2086 2087 2095 2096 10000 15672 25672 service API / Microservices / Cloud-ish 5000 5001 6000 7000 7001 8000 8080 8888 9000

🙏1

17:03

19 May 2026

Rose

Another one bites the dust...! Banned Loky001. Reason: no promoting other chats

20:40

20 May 2026

Mohsen HN

How to report a security bug? I emailed the company, got no response for a week, I then called them and an operator told me they would call me back. I then got a call from one of their technicians, I told them about the security bug and they said "those systems are outdated, we are going to replace them completely soon". Until then, all their sensitive information is exposed, it seemed very odd to me that they don't care about it. Should I call again? Or I was thinking, maybe I should make it more dangerous and threatening?

12:15

A
Aslekar
is the program you reported hackerone or bugcrowd, or is it an external program?
15:29
1. M
  Mohsen HN
  It's an external program. Stores sensitive medical information about people.
  15:43
  1. A
    Aslekar
    and I'm guessing it's an iranian program?
    16:22
  2. A
    Aslekar
    you should not expect to pay a bounty from foreign programs, especially Iranian ones, unless that site itself has a bug bounty program.
    16:24
A
Aslekar
never threaten anyone or speak to anyone in a threatening tone, because you will end up hurting yourself.
16:21
1. M
  Mohsen HN
  I actually was very calm and explained the Bug to the person, he acknowledged the bug, but said that are not doing anything about it, as it's being replaced in the near future. I know the risk because it's about very sensitive information, yet I'm surprised of their reaction. Yes it's Iranian program, and yes I may have expected a bounty or something, but they didn't care.
  17:26
  1. A
    Aslekar
    for Iranian programs, you should only use reputable programs such as Bug Dasht and Bug Bounty Soton, or any program that Bug Bounty offers.
    17:40

Whole thread · 7 replies →

30 May 2026

ㅤ

ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ

Salam Owner Sash client injas?

23:10

A
Aslekar
Link
click to show
T.me/BugCod3BOT
23:11
1. ㅤ
  ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ
  payam toye robbot ro dar yaft mikoni?
  23:11
  1. A
    Aslekar
    Link
    click to show
    T.me/YourAnonBugCode be in payam bde
    23:22
    1. A
      Aslekar
      pv pm bde
      23:32
  2. A
    Aslekar
    bayad bezani ro dokme contact admin bad type kni va send kni
    23:26
    1. ㅤ
      ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ
      mizanm valy bug dare Ngar
      23:30

Whole thread · 6 replies →

ㅤ

ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ

bot bug dare

23:30

A
Aslekar
che bugi?
23:31
1. ㅤ
  ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ︎ㅤ
  khod be khod chandin bar payam mide welcome message mifreste
  23:32

Whole thread · 2 replies →

Oenomaus

Video sticker
sticker.webm · 108 KB

☕️

🤣1

23:43

31 May 2026

Artin Zakeri

Upload Forge is a powerful, production-grade security tool designed to detect and exploit file upload vulnerabilities in web applications. Built for penetration testers and security researchers, it automates the process of testing file upload forms against a wide variety of bypass techniques. https://github.com/errorfiathck/upload_forge

ㅤ

سلام کسی هست؟

O
Oenomaus
درود
08:02

Whole thread · 1 reply →

29 June 2026

Rose

Hi Вера, welcome to BugCod3 GP! Remember to be respectful and follow the rules.

17:51