Aditya

A security guy who likes to break things

[Aditya @Green_terminals]

Got a bounty and swag from @GoogleVRP

Let's keep the momentum :)

[Aditya @Green_terminals]

Cool research by @brutecat

[skull @brutecat]

Hacking Google with A.I. for $500,000

https://t.co/S8NbDU9ZaN

[Aditya @Green_terminals]

@wunderwuzzi23 That's awesome, man seriously, the biggest bounty I have seen for an AI bug. You must be the person behind the AI 2FA bypass bug on instagram 👀

[Aditya @Green_terminals]

@BugBountyDEFCON @hackthebox_eu @PentesterLab I am preparing for the HTB CWEE exam, and by winning the HackBox annual license, I can broaden my knowledge across various domains, such as hardware, mobile which will help in doing security research.

[Bug Bounty Village @BugBountyDEFCON]

Time for another giveaway!

We will pick 6 winners to win one of the following:

1x Annual VIP @hackthebox_eu Licence
5x @PentesterLab 3 Month Licences

To enter:
1️⃣ Follow us @BugBountyDefcon
2️⃣ Like this post ❤️
3️⃣ Re-tweet this post 🔁

Giveaway open until Monday June 15th! GOOD LUCK!

[Aditya @Green_terminals]

@rez0__ I think maybe the company must have closed the program, as I saw a few days ago someone got a bounty from Huntr. After Palo Alto acquired it last year, has something changed?

[skull @brutecat]

Not everyone who reports to Google Cloud VRP does a writeup, but critical bugs still show up in CVEs and release notes

Made a tool that aggregates both so you can see the types of bugs getting found in GCP

https://t.co/S8C6q67r2N

[Aditya @Green_terminals]

@elonmusk Bruh, you have 14 children 👀

[Aditya @Green_terminals]

@bug_vs_me For me it worked after starting a new session if it's not working for you then reachout to claude support and it happens their cyber use case is not bulletproof.

[Aditya @Green_terminals]

@simranrambles Wait until you see data exfiltration using it

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

Not even Google is safe from RCEs, and we brought @brutecat on the pod to talk about his hacking journey on Google!

https://t.co/FtkQysEeiC

[Ciarán Cotter @monkehack]

🐵 MonkeHacks #98
Kyiv, Dublin Bug Bounty Meetup, Moving Fast

#bugbountytips #hacktheplanet #BugBounty https://t.co/Lm9OzR90xP

[Aditya @Green_terminals]

@sapirxfed @fwdcloudsec You are anonymous

[Faav @efaav]

. @brutecat posts some of the most high quality interesting blog posts in bug bounty imo https://t.co/0EVKHMvbgf

[Aditya @Green_terminals]

@J0R1AN @garethheyes That's awesome, dude. Seriously, this is a very cool finding.

[Jorian @J0R1AN]

I won't keep you in mystery any longer, here's how I found an XSS vulnerability *in* Shazzer!
The chain involved some interesting browser techniques no sane developer could foresee. Check out the details below:
https://t.co/nY20Anz0VO
(and thanks @garethheyes for making Shazzer!)

[Aditya @Green_terminals]

@Rhynorater that's cool justin I am joining today my first hackalong looking forward to learn from you :)

[Aditya @Green_terminals]

@ITSecurityguard You are right, Patrik. If a top researcher like @infosec_au is facing this issue, what about normal researchers who work hard every day to submit a report, in the hope that the platform will see their report, but they removed the human part that acted as a bridge for both.

[Patrik Grobshäuser @ITSecurityguard]

Stop blaming AI slop for what bug bounty platforms did to themselves.

👇 wrote down some thoughts about the state of triage

https://t.co/0dq1I61YGd

[Aditya @Green_terminals]

@_jensec You are right, dude. Seriously, the wait time is so long that after a certain period of time, it leads to less motivation. If platforms can't handle it, then it's better they acknowledge it publicly and ask for public feedback to improve it. Many programs are closing duetoAI slop

[Jenish Sojitra @_jensec]

AI will kill bug bounties NOT because it’s better than human hunters.

It’ll kill them because platforms are failing at handing triage queues and unable to distinguish legit bugs from AI Slops.