Just finished reporting a critical vulnerability, but it’s almost midnight and I have school at 7 AM tomorrow. Fingers crossed it gets accepted and isn’t a duplicate 😭

Yay! I just had 7 different reports, which were in the triaged state for almost 2 months, marked as duplicates of a single report. Love bug bounty!

A rating system that hackers can use to provide public feedback about programs.

Performing speculative work for companies that may, or may not, abuse you feels gross.

I propose we replace semantic versioning with pride versioning

I recently found a blind FreeMarker SSTI on a bbp. It was not possible to RCE but I found some nice gadgets to enumerate accessible variables, read data blindly or perform some DoS. I documented that here if someone is interested
gist.github.com/n1nj4sec/5e3...

Thrilled to have my first two bugs accepted! Both are P3s. Still waiting on 14 in triage and 1 in the new state. Feeling more motivated now

Today in my #Hacker #News feed:

Holy crap. Sometimes web research is like magic, all you need is a foot in the door.
Also, how do you screw up authorization so bad?
As a last note, it's unbelievable that EA doesn't have a bug bounty program. Wtf

battleda.sh/blog/ea-acco...

This is really great research by @ryotak.net -

I appreciated that he covered some of his experiments along the way, and how he landed on a finely tuned way of finding a 12-char hash collision with a command injection payload at the end.

flatt.tech/research/pos...

Doing some @portswigger.net advent calendar this year as well. Join me on advent.j15.se

Its not affiliated with Portswigger but it will link you to one of their chapters each day (random for max excitement)

Its created 100% using Cursor so any bugs is AI’s fault

Is it normal for a program to triage bugs in less than an hour sometimes, but then take several weeks to complete validation?

This is so pathetic.

Company with a annual revenue of 25 BILLION USD reduces my bounty by $5 because I didn't supply my IP address.

For a postMessage XSS, so the only thing showing up in their logs would be me opening the homepage...

Hehe just got a report triaged in 22min !!
#bugbounty

👋 @bsky.app you are exposing users to potential SSRF attacks in your documentation. Let's fix this.

p.s. you don't have a security contact address in your support website, and no security.txt meta. Let's fix this one too.

Yesterday - found a really nice bug but missing something to achieve greater impact. Decided to sleep on it and figure it out today.

Today - wake up, no electricity 😭 Just hoping no one submits it before me lol

Earlier this year, Assetnote's Security Research team discovered a vulnerability in Sitecore XP (CVE-2024-46938) that can lead to pre-authentication RCE.
Order of operations bugs are one of my favorite types of bugs :) Write up and exploit script here: assetnote.io/resources/re...

☝️ With Bluesky's increasing popularity, bug-bounty hunters can demonstrate the impact of a subdomain takeover in yet another way: if foo[.]example[.]com is vulnerable, you may be able to claim @foo[.]example[.]com as your handle. Handy for impersonation and phishing. 😈

bsky.social/about/blog/4...

The "bug bounty hunters and content creators" starter pack is now up to 60 users! Follow this to get instantly connected to the bug bounty community & let me know if I've missed you off!

go.bsky.app/GD7hKPX

After more than 6 months of no success in bug bounty I’m finally starting to see results. In the last two week I submitted 12 bugs here are the results:

1 N/A
3 dups
7 in the triaged state !!!
1 in the new state

Let’s hope I finally get some bugs in.