Mikassa53

Ethical Hacker at @bugcrowd & @hacker0x01 & @intigriti

[Mikassa53 @Mikassa53]

@AnticsDecoded Depends on impact, what information are you seeing

[Mikassa53 @Mikassa53]

@dennis_malware @whokilledme78 I put in 100% efforts and lots of reading

[Mikassa53 @Mikassa53]

Just scored a reward @intigriti, check my profile: https://t.co/gPltdR91xB #HackWithIntigriti
Vulnerability: Unauthorized access to sensitive information

[Mikassa53 @Mikassa53]

@vippubg90796263 @Bugcrowd Dm

[Mikassa53 @Mikassa53]

I earned $$$ for my submission on @bugcrowd https://t.co/S6d5ta4nNQ #ItTakesACrowd

[Mikassa53 @Mikassa53]

@ilaalioui2000 Hhhhhhh

[Mikassa53 @Mikassa53]

two different endpoints = same vulnerability because same information is disclosed in both endpoints :)
#hackerone

[Mikassa53 @Mikassa53]

@RockingKumar6 I'll keep it in mind

[Mikassa53 @Mikassa53]

@RockingKumar6 They weren't even going to triage first one, when they did they refuse to triage the second report 🤷🏻

[Mikassa53 @Mikassa53]

@techoxified @intigriti congrats 🥳🤑

[Mikassa53 @Mikassa53]

@fattselimi how about weed+Coffee ?

[Mikassa53 @Mikassa53]

@_iamviolin This is indeed a vulnerability if it is required to send documentation to prove your identity..

[Hasan Sheet @hasansheet]

BUG : unlimited reputation in hackerone platform ! Closed as informative !
@Hacker0x01

[KNOXSS @KN0X55]

#KNOXSS 2nd Giveaway!

✅ Follow us
✅ Like and share this

To enter a draw for one of the 5 6-months subscriptions we are offering!

Want to find some vulns?

Get one of our plans and test for #XSS consistently.

Sign up now!
https://t.co/nNqODwzUC0
Your best bet on XSS.

[Mikassa53 @Mikassa53]

Update: I requested Bugcrowd support and they re-opened report after 1 hour.

[Mikassa53 @Mikassa53]

Found similar vulnerability and it was closed as N/A today
Vulnerability: 2FA back up codes are pre-generated and don't change on enabling 2FA
https://t.co/BvTf6GLm9I

Do you think this vulnerability is not applicable?

[Mikassa53 @Mikassa53]

@sarperavci This is frustrating

[Mikassa53 @Mikassa53]

@Fabrikat0r It's actually bugcrowd

[Philippe Delteil @PhilippeDelteil]

Bug bounty hunting is very stressful. Hunters have al most no power against companies or platforms. There's an asimetry of power and information. Programs (companies) can refuse to accept a bug just because they can. Programs might delay triage and payment for months, even years

[Mikassa53 @Mikassa53]

@scgajge12 @intigriti congrats