hunting for bugs is so addictive 🤤

it’s rained pretty much everyday so far this year in the uk lol never seen so much rain tbh, all the farmers fields look ruined

Working on updating renniepak 's JS parser bookmarklet that zseano talked about today at Nahamcon! 🫶

If you missed the talk on WAF bypass at NahamCon, you can watch it here :)

youtu.be/0OMmWtU2Y_g

🧧 Our researcher Igor Sak-Sakovskiy has discovered an XXE in Chrome and Safari by ChatGPT!

Bounty: $28,000 💸

Here is the write-up 👉
swarm.ptsecurity.com/xxe-chrome-saf…

Bugs & Benjamins
suno.com/song/c28ef48f-…

XSS in PDF.js! I think this is going to cause some chaos both client-side and server-side... really nice finding by Codean
codeanlabs.com/blog/research/…

:o

I've got a new blog post about how bug bounty hunting has been going for me in 2024 and what I feel about different bug bounty platforms.
hakupiku.com/posts/looking-…

“A local authority has announced it will ban apostrophes on street signs to avoid problems with computer systems. “

prevent sql? Nahh, change street names to fix the issue 😂
bbc.co.uk/news/uk-englan…

I’m kinda shocked hackerone is vulnerable to really basic stuff like IDOR via integer id lol nice finding & bounty though 👍

Looking after one kid by myself was a breeze, but two kids?! I think I’m going to have a mental breakdown soon 😂 hardest thing I’ve had to do. But grateful to not miss a single day with my boys 😇

The HackerOne Ambassador Club is available to anyone in the UK!

Whatever your skill level, all are welcome, we're here to help grow the community all over the UK.

Great things are coming, stay updated at:
h1.community/uk-hackerone-c…

#hackerone #bugbounty #bugbounty uk

Proud mentor moment 💪

Race Condition Authentication Bypass leading to Full Account Takeover: medium.com/@keizobugbount…