an engineer by god's design.
pulling dreys
Joined August 2020
- Tweets818
- Following179
- Followers820
- Likes2K
p4 retweeted
Quick tip for new bug hunters: don't focus on AI agents. And If a hunter shares his exact agent setup, everyone just gets the same results and duplicate bugs. Nobody gives away their whole blueprint; they only share small tips.
p4 retweeted
Pwnbox is now officialy on Github too^^. If you like Pentesting, Reversing, Active Directory and more, including privacy and Zero Log config without needing to rice everything, try Pwnbox.
github.com/kernelstub/Pwnbox
p4 retweeted
As you guys know, I'm working on Talos, but the infra costs are getting pretty expensive and I can't really afford to cover it all myself.
So far, Talos has discovered 1 QEMU guest escape, 1 QEMU webserver RCE, 3 Ghost CMS RCEs, 4 Mustache.js RCEs, 1 Handlebars.js RCE, 2 Linux LPEs, 1 MariaDB RCE, and 1 Apache httpd RCE and a couple more.
If you're able to donate towards the infra, I'd really appreciate it. Anyone who helps out will get early access to try some of the scans.
XMR
4B1kJ1pRDT9TNEptAYA3ukXECmy4FeTP9Xh6FfPRU3Ld2gibvhwVWZkNcEdoVEsbq11R9TWvoKiFVSqBpBqzWSnKLWxHkmS
BTC
bc1qfchhysft0t5f0stvwcnw5lgznd7hssgkwv6pc5
ETH
0xcB78C57597CB94EDCc4F763BC6bb61f660f9B8ba
LTC
ltc1qtvfmk0ce9wgv8dp88qzhytnyj2f55a2qmunxgj
SOL
CocvM9rDAS998tN4bqD4GdFHJrgBWSB2r5zMH1xyupRS
p4 retweeted
How I Could've Accessed 17 Trillion Microsoft Records
blog.faav.net/how-i-couldve-… :)
p4 retweeted
Just reported probably the most complex client-side ATO chain I’ve found in my career to @GoogleVRP (plus a few other cool vulnz!), can’t wait to write about it :)
devving exploits like this used to take me weeks, now we’ve cut it down to just a couple of days, wild times :P
p4 retweeted
Happy to be a part of the goated @zenith256 team -- you know where to reach out if you need an audit 😛
A gold medal, CISA acknowledged CVEs, and a pentest for Kanye West.
Meet Zenith auditor, @dreyand_.
From CTF beginnings to finding bugs in AT&T, Spotify, and the U.S. Department of Defense, let’s see what makes DreyAnd one of the best security researchers in the space.
p4 retweeted
i'm taking a pause from hacking to resume building bugbountyhunter.com. i regret closing it down and I shouldn't of done it. everything will be back online EXACTLY as it was very soon and i've got some big plans for the future. and yes, that includes zseano methodology v2 ;)
p4 retweeted
the problem with any online course, specifically the computer science ones is that they make you feel there is something valuable on the other side of the paywall, and while doing it gives a false sense of hope and pleasure that you are learning something to make it out there in the competitive world.
the core problem with any online course is structured in a way to make you feel good about learning, its enjoyable to finish labs, chapters and get certificates. If it is making you feel good, its an entertainment not education.
learning is painful, its like being healthy and just like physical strength you need to suffer and stress tested in gym to gain physical strength. similarly, you need to suffer while learning to gain intellectual strength, the edge mentally over others. suffering is the only way to the top, embrace it.
p4 retweeted
It’s time to lock in. If you’re struggling with bug bounties, spend the next few weeks finding a target you personally enjoy. Bigger the scope the better! Then focus on them everyday for the entire year. Aim to hack 2-3 hours minimum a day. You’ll learn lots and find bugs.
GL!
p4 retweeted
I think the top bug hunters should be rewarded by the bug bounty platforms with DATA.
I want to know which projects are actually worth my time to audit, not waste hours on trial and error.
Give us a transparent list of projects that actually care about security. It’d save a ton of time and lead to way more valuable findings, a win for everyone.
Here are some parameters for example:
Actual Average triage response time
Average payout time
Average severity accepted
Percentage of duplicates vs. valid reports
Number of resolved vs. open reports
Last bounty paid / last report date
Median payout per valid report
Max payout per vulnerability type
Historical bounty trend
% of reports marked “Informative”
MOST IMPORTANT OF ALL:
Dedicated security team presence which should be rated by the security researchers that were paid at the end for that program.
I would gladly pay out of my pocket or percentage of all my findings to get this data.
It would make a huge difference at least for me.
p4 retweeted
Found a neat XSS trick chaining two primitives: `javascript:` scheme + `window.name`
p4 retweeted
If you’re a full-time BBH and not doing novel research, hunting new attack surfaces, or pushing real security research, don’t stress—AI will take over your job in the next 2 years
p4 retweeted
🕵️♂️ Calling fellow Bug Bounty hunters who consume daily blogs, articles, talks, and research
There’s too much surface-level content out there -finding the meaningful gems is hard.
I’m starting a closed group (currently me & @4osp3l)
Retweet + comment “Interested” if you want in