PlatasSec

Cybersecurity Professional - p.t. Bug Bounty Hunter - Top #80 @Intigriti | MSc | CISA | eWPTX | eCPPT | CAPen

[PlatasSec @PlatasSec]

It's being a great Q on @intigriti platform, finally achieved 250+ valid submissions - looking forward to how this one ends!
https://t.co/9GuT47s069

[PlatasSec @PlatasSec]

kudos to @intigriti for stepping in and raising this to the company, which finally re-reviewed the issue and rewarded the remaining bounty aligned with Medium severity, as I initially reported.

[PlatasSec @PlatasSec]

@intigriti I already did, but also support team is not being much helpful with automated responses.

I'm just hoping that Intigriti's triage team gets back to what it used to be, it was amazing the triage times in the past, but now it's become the slowest one in the space...🙏

[PlatasSec @PlatasSec]

Few weeks ago, I found a High severity #IDOR vulnerability on @Bugcrowd platform that led to ATO!
Once again, developers messed up by returning the session access token of the victim, allowing me to gain full access to the user's account.

#BugBounty #Hacking

[PlatasSec @PlatasSec]

@JoaoGomes12243 @Hacker0x01 Seems they're speeding up as they used to take very long time for the first triage. Looking forward to seeing more improvements coming up!

[PlatasSec @PlatasSec]

I keep progressing on @Hacker0x01
bug bounty platform as this weekend I reported 3 valid cross-tenant IDOR #vulnerabilities (1 High, 2 Medium).

Less than 4 days and I got them all triaged - quite surprised but glad to see such speedy work of H1 triage team!

[PlatasSec @PlatasSec]

Digging through #JavaScript source code often reveals juicy endpoints not (intentionally?) exposed in the UI. They’re often highly vulnerable, specially when those are developed for internal use or potentially 'trusted' users. Cheers to the developers!🤘

[PlatasSec @PlatasSec]

First valid report on @Hacker0x01 platform just got triaged with a Medium severity IDOR found in public program @Klarna!

#bugbounty #hacking #IDOR

[PlatasSec @PlatasSec]

@0_hack3r @intigriti Beast, you smashed it again💪

[PlatasSec @PlatasSec]

@intigriti

[PlatasSec @PlatasSec]

I've officially entered the overall Top 100 (currently ranked #98) on the @intigriti Bug Bounty platform — 120+ valid vulnerabilities, and Top 1 in 3 private programs!

Looking forward to growing further & climbing even higher in the rankings.

#BugBounty #Intigriti #hacking

[PlatasSec @PlatasSec]

Sweet High vulnerability on @Bugcrowd , breaking personal record!

IDOR allowed low-priv. user to change payment configurations of other companies 🤘

#bugcrowd #hacking #bugbounty

[PlatasSec @PlatasSec]

@0_hack3r @intigriti You're a beast!

[PlatasSec @PlatasSec]

Great performance on the @intigriti Bug Bounty platform — I've surpassed 1k points and ranked 4th on the last 90-day leaderboard!

[PlatasSec @PlatasSec]

More compliments from companies coming in! This time it's for a Critical #IDOR reported on @intigriti platform - that's what we're here for!🫡

#BugBounty #hacking #HackWithIntigriti

[PlatasSec @PlatasSec]

Reporting is the hardest and most boring part of #BugBounty, but sometimes it's just worth it when companies appreciate good quality reports - kind bonus received on @intigriti platform!

#hacking #pentesting

[PlatasSec @PlatasSec]

@0_hack3r @intigriti You're just breaking all records! Congrats brother 🤘

[PlatasSec @PlatasSec]

@intigriti Thank you Intigriti - specially the entire triage team! You all provide the best experience for researchers.

Keep it up! Looking forward to more gifts coming from Bug Bounty and a successful 2025 🚀

[PlatasSec @PlatasSec]

Starting the week with 2 juicy IDORs as P2 in @Bugcrowd - nice Christmas gift $X,XXX🎁!

https://t.co/I2x0TwDeXs

#BugBounty #Bugcrowd #ItTakesACrowd

[PlatasSec @PlatasSec]

Kudos to @intigriti's triage team - you guys make our research experience amazing with your speedy response times.

Always happy to help triaggers by making easy-to-follow reports ;)

#bugbounty #intigriti