Pentester, Software Security Engineer, Trainer, Public Speaker

Joined November 2017
portswigger.net/web-security… this lab actually requires user interaction. the Note is really confusing
48
Cosmin Craciun retweeted
Ready for the event? Report submissions will start tomorrow at 9:00 GTM+1! hackerone.com/superbet. Claim your spot on the hackerone leaderboard! #bugbounty #hackerone
3
6
26
5,342
Cosmin Craciun retweeted
Hey hackers! 📣 Check out this incredible live hacking opportunity. Hackers from all over can participate in this challenge with a few surprises for anyone onsite at the #DefCamp #HackingVillage November 23-24.🙌 See the details➡️ security.superbet.com/events….
With #DefCamp being just days away, Superbet and Happening have set all the details of the Live Hacking Event! Check the thread for details!
1
11
26
16,592
Replying to @NahamSec
thanks for having us. awesome evening!👍🏽
359
Getting some Sepolia ETH at @quicknode's faucet for my 3881B5F8 wallet! faucet.quicknode.com/ethereu…
1
56
Cosmin Craciun retweeted
That's a wrap for Round 1 of the #AmbassadorWorldCup! Congrats on an incredible round of teamwork. 🙌 Take a look at the stats! 📊 👨‍💻 239 hackers 🪲 262 valid bugs 💰170 bounties awarded 🤑 $515K in bounties paid (so far) See the full recap here: bit.ly/40ifdia
3
28
14
167
76,534
Replying to @Jhaddix
that’s why I always use ffuf —proxy
1
678
Just got a reward for a high vulnerability submitted on @yeswehack -- DNS Zone Takeover. #YesWeRHackers
1
1
11
2,611
Incorrect CVEs have significant effects in the industry, I am thinking making a talk on this topic.
I do have a problem with incorrect CVEs assigned. Just run into CVE-2021-45229, checked the Apache Airflow v2.2.3 source-code, input validation & html encoding is in place. No bypasses found until now. And this is just one of many examples I've found over time.
1
not an Windows guy, but the retro style font in Windows 11 Terminal is dope
Replying to @rgod777
It took me bit to realise whether it’s a joke or not. Apparently is not🤨
Replying to @TzahPahima
I’ve read your technical vulnerability walkthrough. Pretty straight forward, but it’s still not clear to me why did you need to trigger that race condition?
1
Cosmin Craciun retweeted
That's it for now, did I miss anything? A full and expanded blog with MORE & ALL links for this thread can be found on my blog: jhaddix.com/post/a-hackers-g… ✌🏻For more resources follow, retweet, & like!✌️ 11/
3
7
1
60
Replying to @Jhaddix @BSidesSF
I’ll be there for RSA, would be nice to meet you in person
1
Cosmin Craciun retweeted
🧵Mistakes I make in hacking or bug bounty 🧵 #bugbountytips and hacking tips I wish I always adhered to 🙃 cc @sr_b1mal
41
252
12
885