lalka

script kiddie

[lalka @0x01alka]

12k$ for simple path traversal on https://t.co/ij2u4NVHpS. Thanks @Facebook.

#BugBounty

[lalka @0x01alka]

Thx, g/vrp

#BugBounty

[lalka @0x01alka]

Writeup

5k$ g/vrp SSRF.

https://t.co/AGmS7G9vF3

Thanks for reading.

Regards.

#BugBounty

[lalka @0x01alka]

Парни с https://t.co/BbhXVe2sjQ прислали сет "script kiddie".

После примерки получил +10 хакенга и +5 удачи к статам.

Спасибо :3

#BugBounty

[lalka @0x01alka]

VK company launched bugbounty program on https://t.co/U5FhWwO8yb

#BugBounty

[lalka @0x01alka]

SSRF

5k$

#BugBounty

Join https://t.co/ChTRewW7BN

[lalka @0x01alka]

Path Traversal

$1,337$

Join https://t.co/ChTRewW7BN

#BugBounty

[lalka @0x01alka]

Short write up about last finding on Google VRP
https://t.co/P5IO9SqxqJ
#BugBounty #GoogleVRP

[lalka @0x01alka]

https://domain/?p=XSS - false
https://domain/?p[]=XSS - true

Yay, I was awarded a $2,000 bonus(+$1000 initial ) bounty on @Hacker0x01! https://t.co/StivK5HZA1 #TogetherWeHitHarder #bugbounty

[lalka @0x01alka]

I love the smell of "Nice catch!" in the morning.

#BugBounty #GoogleVRP

[lalka @0x01alka]

Lineage2 все,заебало(@NCSOFT). Пофармил адену в реале.
Баги за каждым новым GET/POST запросом :
-Youtubekids-rXSS
-Azure/Dynamics365-экосистема с открытиями каждый день(Повышение привилегий)
*Снова отложил маску Анонимуса и перестал давить кавычку до нового лета*
#BugBounty

[lalka @0x01alka]

The good old google dorks still work. Maximum profit with minimum effort. Remember, this is still a powerful source for finding bugs. I advise you to get your own tool with support for bypassing google captcha.

#bugbounty #bugbountytips

[lalka @0x01alka]

#bugbounty #Arknights

[lalka @0x01alka]

Yay, I was awarded a $4,000 bounty on @Hacker0x01! https://t.co/StivK5HZA1 #TogetherWeHitHarder

[lalka @0x01alka]

Accidentally got "Nice catch!" from #googlevrp while fuzzing some random things.

#bugbounty

[lalka @0x01alka]

@zseano @ATT Thanks mate :)

[lalka @0x01alka]

Spent some time on @ATT bugbounty program.

+ huge scope
+ generic bugs everywhere
+ good training platform for beginners like me

- they will totaly ignore you with your question
- not a transparent reward system
- still did not receive my reward ¯ \ _ (ツ) _ / ¯

#bugbounty

[lalka @0x01alka]

Yay, I was awarded a $1,400 bounty on @Hacker0x01! https://t.co/QteUNFeStH #TogetherWeHitHarder

[lalka @0x01alka]

Got 10k$(initial+final payments) for IDOR via graphql request. It was possible to change some information on all https://t.co/DfO7jgfFjB personal pages.

#BugBounty

[lalka @0x01alka]

Yay! 3133.70$ for RCE on *.withgoogle.com subdomain.

#BugBounty

[lalka @0x01alka]

5k$ for path traversal on *.paypal-corp.com subdomain

#bugbounty