portswigger.net/web-security… this lab actually requires user interaction. the Note is really confusing
Cosmin Craciun retweeted
Ready for the event? Report submissions will start tomorrow at 9:00 GTM+1! hackerone.com/superbet. Claim your spot on the hackerone leaderboard! #bugbounty #hackerone
Cosmin Craciun retweeted
Hey hackers! 📣 Check out this incredible live hacking opportunity.
Hackers from all over can participate in this challenge with a few surprises for anyone onsite at the #DefCamp #HackingVillage November 23-24.🙌
See the details➡️ security.superbet.com/events….
With #DefCamp being just days away, Superbet and Happening have set all the details of the Live Hacking Event!
Check the thread for details!
Replying to @NahamSec
thanks for having us. awesome evening!👍🏽
Getting some Sepolia ETH at @quicknode's faucet for my 3881B5F8 wallet!
faucet.quicknode.com/ethereu…
Cosmin Craciun retweeted
That's a wrap for Round 1 of the #AmbassadorWorldCup! Congrats on an incredible round of teamwork. 🙌
Take a look at the stats! 📊
👨💻 239 hackers
🪲 262 valid bugs
💰170 bounties awarded
🤑 $515K in bounties paid (so far)
See the full recap here: bit.ly/40ifdia
Replying to @Jhaddix
that’s why I always use ffuf —proxy
Just got a reward for a high vulnerability submitted on @yeswehack -- DNS Zone Takeover. #YesWeRHackers
started working on a CLI tool for reNgine. Basic features at the moment. PRs accepted
github.com/cwavesoftware/ren…
I do have a problem with incorrect CVEs assigned. Just run into CVE-2021-45229, checked the Apache Airflow v2.2.3 source-code, input validation & html encoding is in place. No bypasses found until now. And this is just one of many examples I've found over time.
Replying to @rgod777
It took me bit to realise whether it’s a joke or not. Apparently is not🤨
A good series for beginners web pentesters labs.detectify.com/2022/05/1…
Replying to @TzahPahima
I’ve read your technical vulnerability walkthrough. Pretty straight forward, but it’s still not clear to me why did you need to trigger that race condition?
Cosmin Craciun retweeted
That's it for now, did I miss anything?
A full and expanded blog with MORE & ALL links for this thread can be found on my blog:
jhaddix.com/post/a-hackers-g…
✌🏻For more resources follow, retweet, & like!✌️
11/
Cosmin Craciun retweeted
🧵Mistakes I make in hacking or bug bounty 🧵
#bugbountytips and hacking tips I wish I always adhered to 🙃
cc @sr_b1mal










