3NVZ | Robert S.

Simplicity is the Ultimate Sophistication.

[3NVZ | Robert S. @YourFinalSin]

@NeverGiveUP8333 I think it’s always worth learning new stuff
Maybe it gives you an idea about something and you try something new that AI doesn’t know about

[3NVZ | Robert S. @YourFinalSin]

Found this very interesting article about SSRF and abusing microservices - maybe it's gonna help someone!

https://t.co/JKpbGRyfHa

[3NVZ | Robert S. @YourFinalSin]

@the_IDORminator These seem to be some insane programs you’re on 🙂

[3NVZ | Robert S. @YourFinalSin]

One high-severity vuln a week, keeps my mood at its peak 🙂

[3NVZ | Robert S. @YourFinalSin]

Here is a payload which might work for you, if you got an XSS, but it's blocked by Cloudflare WAF💥

Was able to bypass Cloudflare WAF with this and escalated it ultimately to ATO!

[3NVZ | Robert S. @YourFinalSin]

@3ftetfw Great read, thanks for sharing ✌️

[3NVZ | Robert S. @YourFinalSin]

Is it just me or do various bug bounty platforms feel increasingly worse?

First response and triage experience has gone downhill big time. I have multiple P2/High severity reports that are 15-30 days old that weren’t even looked at by triage yet..

[3NVZ | Robert S. @YourFinalSin]

@HarrySandh21970 If bug bounty/cybersecurity would be solved, any other digital field would’ve been solved as well
AI is a tool with limits, just as any other tool. If you love hacking, don’t leave

[3NVZ | Robert S. @YourFinalSin]

@3ftetfw If you do it for the love of hacking and puzzle solving, you’ll be good!

[3NVZ | Robert S. @YourFinalSin]

@3ftetfw That’s crazy
I didn’t know that it’s that bad

[3NVZ | Robert S. @YourFinalSin]

@Xg0d_ I feel you bro

[3NVZ | Robert S. @YourFinalSin]

@ethical_h4ck3r_ Yeah true haha

[3NVZ | Robert S. @YourFinalSin]

@s4botai77563 Wow that’s a crazy concept

[3NVZ | Robert S. @YourFinalSin]

@Jayesh854255941 I only hunt on main apps, so I don’t do any subdomain enumeration or similar

[3NVZ | Robert S. @YourFinalSin]

Here is a little dork for you, if you wanna learn a thing or two about Client-Side Vuln Hunting!

site:https://t.co/6ohtbhA5UD "client-side"

[3NVZ | Robert S. @YourFinalSin]

@Jayesh854255941 Yes, exactly

[3NVZ | Robert S. @YourFinalSin]

@Jayesh854255941 Yeah, I kept notes on everything that I was learning and also came back to these notes if I found something similar on a target
I’m using Notion for that - it’s free

[3NVZ | Robert S. @YourFinalSin]

@Abdelmajid14619 Can't disclose, otherwise it wouldn't be a challenge anymore!

[3NVZ | Robert S. @YourFinalSin]

First report accepted and paid on GitLab! 💥

Tip: Learn as much as you can about your target from public data/reports, before you start hunting on them

[3NVZ | Robert S. @YourFinalSin]

Another nice filter bypass - Can recommend!

I just pwned the "Dojo #50 - Bucket Vault" challenge on @YesWeHack!
https://t.co/02wOO5ZUbL

[3NVZ | Robert S. @YourFinalSin]

@th31nitiate Yeah for sure. Especially for highs and crits there’s always a window for an attacker

[3NVZ | Robert S. @YourFinalSin]

Another high-impact GitLab vuln found 💥
Ended up duplicate, but this one involved a nice server-side filter bypass.

Getting closer, I’m not stopping until I land that paid High on GitLab!