oolong

[oolong @OolongSec]

@hakluke "It's important that bug bounties remain accessible to everyone."
In that section, you expressed a worry that the expense of AI tooling may become a barrier. Any more thoughts on how BB could remain an open opportunity for diverse hackers to sharpen their skills?

[Intigriti @intigriti]

We're pleased to announce the official launch of our newest book: the Bug Bounty Starter Kit! 🚀

Over the past few years, we've put in a huge amount of work to share knowledge with the bug bounty community. Today, we're proud to turn it all into something tangible: a free guide designed to take anyone from zero to their first valid bug report.

It covers everything from recon and tooling, to exploiting SQLi, XSS, and BAC vulnerabilities, all the way through to writing a compelling report that gets triaged faster! 🤠

Grab your copy today! 👇
https://t.co/IScZKKibwb

[oolong @OolongSec]

@Monir_Ish @hackearam_eu @intigriti No problem; hopefully my experience sheds a bit of light. I'm sure there are other factors and criteria to getting private invites on Intigriti though. And, sure, you can DM me; I'll reply when I can.

[oolong @OolongSec]

@Monir_Ish @hackearam_eu @intigriti I've found that after getting an "Exceptional" severity submission accepted, I got a lot of private invites on Intigriti. Unluckily for me I've had a problem with with the ID check though . . .

[oolong @OolongSec]

@sondt1337 @_JohnHammond @M_alphaaa @kkevsterrr @RagnarSecurity @HuskyHacksMK @matl4c @nightwolf780 @Soups71 @BuildHackSecure @NahamSec Epic! Crushin' it 🦾

[oolong @OolongSec]

@sondt1337 @_JohnHammond @M_alphaaa @kkevsterrr @RagnarSecurity @HuskyHacksMK @matl4c @nightwolf780 @Soups71 @BuildHackSecure @NahamSec Thank you! 🙏
Awesome job competing yourself! 🕵️ ⌨️

[oolong @OolongSec]

I participated in the NahamCon 2024 CTF! Thanks @_JohnHammond @M_alphaaa @kkevsterrr @RagnarSecurity @HuskyHacksMK @matl4c @nightwolf780 @Soups71 @BuildHackSecure @NahamSec and all others involved! #NahamCon2024

[oolong @OolongSec]

I completed the Web Security Academy lab:
Finding and exploiting an unused API endpoint

@WebSecAcademy
https://t.co/4QXFgLCBUI

[oolong @OolongSec]

I completed the Web Security Academy lab:
Exploiting an API endpoint using documentation

@WebSecAcademy
https://t.co/CFDiFVJOTB

[oolong @OolongSec]

I completed the Web Security Academy lab:
Exploiting NoSQL operator injection to extract unknown fields

@WebSecAcademy
https://t.co/LaHangIWti

[oolong @OolongSec]

I completed the Web Security Academy lab:
Exploiting NoSQL injection to extract data

@WebSecAcademy
https://t.co/jIVyaQePVg

[oolong @OolongSec]

I've earned the Advent of Cyber 2023 Badge on TryHackMe for Completed the Advent of Cyber 2023! https://t.co/Un2WRWaTcf #tryhackme via @tryhackme

[oolong @OolongSec]

@WebLizzard @tryhackme 🤣 Yeah, I see it's "Insane". I haven't fired it up yet to actually try though, and maybe it'll be too much for the amount of time I'm willing to put into it atm. Glad the SQs will be public eventually

[oolong @OolongSec]

Really glad THM added the more advanced Side Quest this year. Very fun and lots to learn 🙂

I've earned the The Return of the Yeti Badge on TryHackMe for Completed at least one Advent of Cyber 2023 Side Quest Challenge! https://t.co/lofPOJbXLL #tryhackme via @tryhackme

[Web Security Academy @WebSecAcademy]

📣New topic alert📣

By guiding you step-by-step through the process of testing APIs, we will teach you to spot, understand, and then exploit them to their full potential.

Ready to get stuck in?

https://t.co/r3av7fGMh2

[oolong @OolongSec]

I completed the Web Security Academy lab:
Exploiting NoSQL operator injection to bypass authentication

@WebSecAcademy
https://t.co/tNitbO86dx

[oolong @OolongSec]

I completed the Web Security Academy lab:
Detecting NoSQL injection

@WebSecAcademy
https://t.co/nhgvmC9poX

[oolong @OolongSec]

Hijack - I have just completed this room! Check it out: https://t.co/856FlEuWAj #tryhackme #security #hijacking #automation #nfs #hijack via @tryhackme

[oolong @OolongSec]

Thank you for the lesson, @0xTib3rius !

Lesson Learned? - I have just completed this room! Check it out: https://t.co/6xzQmnMBsF #tryhackme #lesson #enumeration #web #lessonlearned via @tryhackme

[oolong @OolongSec]

OWASP Broken Access Control - I have just completed this room! Check it out: https://t.co/ixtLrYS76K #tryhackme #owasp #brokenaccesscontrol #web #php #owaspbrokenaccesscontrol via @tryhackme