lethal

Bug Bounty Hunter | Director at lyunexia

[lethal @Scalar360]

For me it's a great start after college.
Kudos to triagers of @Bugcrowd

[Noah @NoahKingJr]

Me to Claude: "Make no errors. DO NOT HALLUCINATE. YOU ARE AN EXPERT SOFTWARE ENGINEER "

[Ben Sadeghipour @NahamSec]

I've been in the bug bounty scene for over a decade now. $2M in bounties later, I figured it was time to sit down and talk about everything I've learned! 👉🏼 https://t.co/08n3TETXvc

[Luke Stephens (hakluke) @hakluke]

Bug bounty question:

If you submit a bug, and it gets marked as an internal dupe because "the team already knew about it", is it fair to ask for proof?

[lethal @Scalar360]

@SupportWakefit Pathetic experience! Ordered 2 wardrobes on Sept 21, delivery due Oct 25 — still “in process.” Now told to wait till Nov 18! More 1 month of delay = loss for me. If not delivered by Nov 1, I’ll escalate this legally. Need accountability from upper management!

[lethal @Scalar360]

@WakefitCo Pathetic experience! Ordered 2 wardrobes on Sept 21, delivery due Oct 25 — still “in process.” Now told to wait till Nov 18! More 1 month of delay = loss for me. If not delivered by Nov 1, I’ll escalate this legally. Need accountability from upper management!

[Harsh Jaiswal @rootxharsh]

😴😴

[Youssef Sammouda (sam0) @samm0uda]

If you can't hack yourway into learning hacking from available resources, you don't have what it takes to be a hacker or you'll never become a great one. In other words, this is something you achieve the hard way and not something you can buy.

[lethal @Scalar360]

@iDiablo5 @SynackRedTeam Great brother 🔥🔥🔥

[lethal @Scalar360]

#bugbountytips #bugbounty

If you are hunting on finely established companies, try out some tutorials or guiding videos of them, you will find some features which you never used in other ways and the secret is, no one else did also.

[lethal @Scalar360]

#bugbountytip [2]
Never let your pending/open report number bar less than 1.
That will become your motivation to pay more time in finding more creative critical issues, because you know even if you fail, you have some reports pending which will pay you at the end.

[lethal @Scalar360]

#bugbountytips [6]

To know internal technologies study career/job openings of your target, your can see the required skills in specific technology in JD. Now you can modify your recon based on that.

[Detectify @detectify]

Here's a snippet from @TomNomNom's recent appearance on @TheASWPodcast. Watch the entire interview w/ @Codexatron here: https://t.co/3O6BAbwwwh #security #API

[lethal @Scalar360]

@Bugcrowd can we have "buy me a coffee" kind of feature for our triagers. Were hunters can appreciate triagers more then in words.

[lethal @Scalar360]

@Bugcrowd 4) Getting quick response from ASE after my comment on my reports.

[lethal @Scalar360]

@victorio_yes @detectify 😀😀😀😀

[lethal @Scalar360]

@detectify Thanks !! for the welcome and sorry for missing the confirmation, it was my mistake.

[lethal @Scalar360]

@th3cyb3rc0p @detectify Thanks 😊

[lethal @Scalar360]

#!/bin/bash

for i in {1..100};
do
sleep 1d
if [welcomeTweet == true] && [$user == 'Scalar360'];
then
echo "Thanks @detectify"
else
echo "Tweet not found, day $i "
fi
done

Result:
Tweet not found, day 43
Tweet not found, day 44
Tweet not found, day 45

[Michael Skelton @codingo_]

A lot of people who want to do bug bounties for a living, but should you? Let's discuss!

📽️Video: https://t.co/Bhj8CEcH6D
✍️Written (most detailed): https://t.co/4enPQsvYTP

[lethal @Scalar360]

@intigriti @msftsecurity and @NCIIPC's swag bags

[Ali khan @log4shell_]

Account Takeover