Mikael

Your future cybersecurity colleague. Learning through bug bounties since April 2024.

[Mikael @1leakim]

Yay, I was awarded a $10,000 bounty on @Hacker0x01 ! https://t.co/wZjyDQbRFB #TogetherWeHitHarder

[Mikael @1leakim]

@Blaklis_ @swisscom_csirt Congrats!

[Mikael @1leakim]

Yay, I was awarded a $600 bounty on @Hacker0x01! https://t.co/wZjyDQcpv9 #TogetherWeHitHarder

[Mikael @1leakim]

Yay, I was awarded a $100 bounty on @Hacker0x01 ! https://t.co/wZjyDQbRFB #TogetherWeHitHarderYay

[Mikael @1leakim]

Yay, I was awarded a $890 bounty on @Hacker0x01 ! https://t.co/wZjyDQbRFB #TogetherWeHitHarder

[Mikael @1leakim]

@ML_Ayuda @Hacker0x01 They haven't paid me yet

[Mikael @1leakim]

Yay, I was awarded a $2,000 bounty on @Hacker0x01! https://t.co/wZjyDQbRFB #TogetherWeHitHarder

[Jorian @J0R1AN]

While playing a challenge by @salvatoreabello, I found a pretty interesting way to exploit Dangling Markup with a strict CSP.
All you need is an <iframe>, <object> or <embed> set to about:blank, with a dangling name= attribute. This vulnerable page should be iframable.

[Mikael @1leakim]

In May, me and @vitobotta found an unauthenticated sql injection in OneLogin. I made a short blogpost about it https://t.co/apfiQHcKm9

[Mikael @1leakim]

@NahamSec Wish the best for you ❤️

[Mikael @1leakim]

After mostly working on HackerOne and getting some crits there, today I got my first P1 and overall bounty on bugcrowd! Very funny ato hahah

[Mikael @1leakim]

@MrTuxracer I'm talking about a private hackerone program that starts with the letter S and ends in Y. Is yours similar?

[Mikael @1leakim]

@emil_lerner Thank you for providing the gif image sir! I have 1 more question. In the video you also upload a postscript file with the png file extension. Are these just normal postscript files, or are they also somehow modified to pass some mime type checks for example?

[Mikael @1leakim]

@emil_lerner Thank you very much sir, I appreciate it! Have a nice rest of your week :-)

[Mikael @1leakim]

@emil_lerner Great talk sir! 1 question though. In the beginning you talk about using gif-images that do not have any palettes. I have been reading through the gif-format specification but having hard time understanding it. How can I create a gif-image that does not have a palette?

[Mikael @1leakim]

@gregxsunday Are you also going to make youtube videos about the 4 upcoming case studies?

[Mikael @1leakim]

If you ignore the $25 I got as a bonus on a duplicate report about 1 week ago, I was recently awarded with my first bounty on hackerone and 3rd bounty overall. I'm pretty happy about this one!

[Mikael @1leakim]

@NahamSec 🎅🏼

[Ben Sadeghipour @NahamSec]

🎯With the holidays coming up, I'm going to host a week of giveaways starting with my Hands-On Web Hacking course which includes:

✅ 100+ lessons
✅ 15+ hours of video content
✅ Dedicated community

👉🏼https://t.co/yZGD6JgBO3

🎁To enter: retweet and reply with a 🎅🏼