jca

Bug bounty enthusiast

[jca @_j_ca]

Had a great time presenting @brucon . In case you missed my talk on Bypassing Firewalls with API-to-API hacking, you can still watch it on Youtube https://t.co/glYMmChU0R

[jca @_j_ca]

@qkaiser I might know a place. Give me a follow for DM plz.

[jca @_j_ca]

@Rhynorater @therceman There is a case: JS in html attributes will interpret html encoding:
onclick="console.log('hello'-alert()-'')"

[jca @_j_ca]

@DOBBELAEREW @intidc I thought NDA's can't be enforced when reporting illegal activities. Consumer protection is a protected domain under whistleblower's law. You can only publish after reporting to internal & federal channels to no avail.

[Inti De Ceukelaire @intidc]

Vanaf vandaag laat de Belgische wet ethisch hacken zonder voorafgaande toestemming toe. Maar wat zijn de kleine lettertjes, en kan iedereen nu zomaar overal aan het hacken slaan? Een draadje 🧵👇

[jca @_j_ca]

@nnwakelam Back in the day, you could pair that with the x-bufferbot header.
That would cause the target to forward to prerender[.]io.
Prerender would honor the x-forwarded-host and render the wrong site.
That would get cached, and result in takeover of the target origin.

[jca @_j_ca]

Followed @Agarri_FR 's Mastering Burp course last week, and it was awesome.
Highly recommended if you want to bring your Burp skills to the next level.

[Intigriti @intigriti]

"The best bugs are super weird bugs that you can't really classify and almost find by accident" ~ @_j_ca 🤭

We had a chance to talk with the one and only @_j_ca about everything bug bounty!

Check out the interview now! 👇

[jca @_j_ca]

What an amazing weekend at the #1337UP0622 Live Hacking Event.
Met so many incredibly talented hackers at this flawlessly organized event.
Thanks to @intigriti and the people of the target app for your hard work making this possible!
#HackWithIntigriti #bugbounty

[jca @_j_ca]

@honoki I would use this! To quickly copy all UUIDs from a target for example. Way better than the 'strings project.burp | egrep' oneliner I'm using now.

[jca @_j_ca]

@seanmeals check out @qkaiser 's research

[jca @_j_ca]

@intigriti Make way for the new generation!

[jca @_j_ca]

@honoki You mean something like Odoo?

[Intigriti @intigriti]

You're invited! To celebrate our #1337UP1120 virtual live hacking event this weekend, @realytcracker will perform an exclusive liveset on our YouTube channel. Come join us and feel the live hacking vibes, this Friday starting at 20:00 CET. 🎧
https://t.co/yN1AqeoiUk

[Intigriti @intigriti]

"The most important thing for me is that I need to feel that somebody has my back. That the game is played fair. I think this is where Intigriti excels."
Very kind words from top hacker @_j_ca about our platform! 😍
👇 Read his full #BugBusiness interview:
https://t.co/RPiPFE6ynO

[jca @_j_ca]

@intigriti @MattiBijnens @Kuromatae666 @PentesterLand @Zwoltopia Profile pic changed.
Thanks @intigriti and @Zwoltopia !

[Intigriti @intigriti]

We wanted to take a moment to recognise four amazing @intigriti ethical hackers for their contributions to our platform & community over the past quarter. 😊 Congrats, @MattiBijnens, @Kuromatae666, @_j_ca and @pentesterland.
✏️ Thanks @zwoltopia for the wonderful portraits! 😍

[jca @_j_ca]

Most hilarious xss vector:
Write & publish a book with xss on the cover, then 0wn all the shopz!! @thornmaker @sirdarckcat @garethheyes

[jca @_j_ca]

Yay! Reached the all-time top spot on @intigriti .
Quickly screenshotting before @honoki takes his claim back.