bara🇦🇷

Security Analyst at @faradaysec

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

Part 2 of one of our craziest episodes so far, with an insane amount of tips you can start applying right now on every target you hack on, thanks @brutecat for sharing everything with the community!

Episode 178, part 2

[skull @brutecat]

Hacking Google with A.I. for $500,000

https://t.co/S8NbDU9ZaN

[Dark Web Informer @DarkWebInformer]

‼️ Nightmare Eclipse is back on GitHub under a new alias and has released a new Windows Defender vulnerability zero-day called RoguePlanet.

PoC: https://t.co/n0xF6uGt4u

New GitHub Account: https://t.co/qwU93VedpH

[Yassine Aboukir 🐐 @Yassineaboukir]

“Bug bounty is dying” is noise.

Lock in. Make money. Use AI to 10x your output. If it eventually dries up, you’ll have enough capital to start that biz or enough experience to land a job.

Simple as that.

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

What kind of bugs do the top Adobe hackers actually find?

Second half of episode 176!

[YesWeHack ⠵ @yeswehack]

Yes @Rhynorater, you read it right!

Our triage team is comprised exclusively of security engineers with mandatory OSCP & OSWE certs + deep CVSS expertise. They know their stuff 🔥

Since Justin brought them up in this clip, should we do an interview with our triagers? We’d cover their workflows, top submission tips, and some funny report memories!

Let us know in the replies 👇

[skull @brutecat]

StubZero: $148,337 RCE in Google Cloud Production

https://t.co/m7cBnSTaj4

[bara🇦🇷 @0xbara]

@Mike07Masanga @ctbbpodcast it's for paid members only on the ctbb discord

[Faraday Security @faradaysec]

@ekoparty WE ARE COMING🚀

Este es el team de Faraday que va a estar representándonos durante estos días.

Charlas, demos, AI, automatización y nuevas formas de entender la seguridad ofensiva.

Si estás por la Eko, pasá a saludarnos, no te lo vas a querer perder 😉

#Faraday

[Jopraveen @jopraveen18]

people are too busy in exploring chrome, kernel and other oss CVEs,
meanwhile a DOMPurify bypass was silently dropped 👀

https://t.co/OCzsMzrQ1t

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

[Joseph Thacker @rez0__]

I made a /goal command for claude code:
https://t.co/7LkZNVbkAO

[bara🇦🇷 @0xbara]

@zhero___ 🤣

[bara🇦🇷 @0xbara]

@OreoB1scuit not having a response from a program kills your motivation for hacking? really?

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

Running a Figma plugin is enough to land cross-platform zero-click RCE on Figma Desktop...

Read the writeup on the Critical Research Lab https://t.co/16w1iiWEmF

And thanks @Dav3nn for the incredible post, what an amazing chain! =)

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

In episode 172, Justin did a meta-analysis on code review.

A ton of cool tips came out of this episode, check it out!

Ep 172: part 1

[slonser @slonser_]

And this makes sense given how many CTFs are held per year.
However, the ideal CTF challenge, in my opinion, should follow this formula:
"The author conducted a mini-research project and instead of publishing it, turned it into a challenge."

[bara🇦🇷 @0xbara]

@clarincom tenes que cerrar el aeropuerto, los genios hacen eso