Andrea Dattola

Penetration Tester | Bug Hunter | CVE-2022-28866, CVE-2021-26596, CVE-2021-26597 | Hall of Fame (Nokia:

[Andrea Dattola @andreadattola96]

@elonmusk You 💪🏻

[Andrea Dattola @andreadattola96]

@NahamSec @PentesterLab #nahamcon2023

[Ben Sadeghipour @NahamSec]

I have a one year @PentesterLab voucher for one random person retweeting and replying to this tweet with #nahamcon2023 :)

[Andrea Dattola @andreadattola96]

@BHAIPATEL5G @yeswehack I took advantage of the following headers:
X-Forwarded-Host; X-Forwarded-Server; X-Host. In Response the attacker’s url was saved in a <script> tag calling a specific “.js”. So i created a file with the same name and path injecting my js payload 😊

[Andrea Dattola @andreadattola96]

Just got a reward for a critical vulnerability submitted on @yeswehack.https://t.co/BmTXL6T7oN #YesWeRHackers

Yes ! My first Critical XSS (rated 9.9/10) exploiting Web Cache Poisoning.

[Socios.com Italia @SociosItalia]

🎟 GIVEAWAY 🎟

Vinci 2 biglietti per la finale di #CoppaItaliaFrecciarossa:

✅ Segui @SociosItalia
✅ Retweet

Estrarremo a sorte 2 vincitori il 05/05.

#Road2Rome | @SerieA | @Juventusfc | @Inter

[Andrea Dattola @andreadattola96]

Just got a reward for a vulnerability submitted on @yeswehack.https://t.co/BmTXL7aaqN #YesWeRHackers CWE-352: Cross-site request forgery (CSRF)

[Andrea Dattola @andreadattola96]

Just got a reward for a vulnerability submitted on @yeswehack.https://t.co/BmTXL6Szzf #YesWeRHackers

[Oleg Kutkov 🇺🇦 @olegkutkov]

Today’s tests of the #Starlink in #Kyiv

[Andrea Dattola @andreadattola96]

Just got a reward for a vulnerability submitted on @yeswehack.https://t.co/BmTXL6Szzf #YesWeRHackers

CWE-400: Uncontrolled Resource Consumption

[devansh ⚡️ @0xAsm0d3us]

A list of interesting payloads, tips and tricks for bug bounty hunters.

https://t.co/5nJJNKn1iA

#bugbounty #hacking #cybersecurity

[Andrea Dattola @andreadattola96]

Just got a reward for two high IDOR submitted on @yeswehack.https://t.co/BmTXL6T7oN #YesWeRHackers #BugBounty 🎉🎊

[Andrea Dattola @andreadattola96]

Immenso Nadal ! Complimenti 🎊 #Nadal #AusOpen

[Laudantes @Laudantes]

@giu_spez @nickkwolff Giuseppe sappi che ti contatterò a breve per fare qualcosa su LB, nel caso tu vorrai. Mi piace molto il tuo stile di ragionamento, ho tenuto due mesi pieni di analisi tattiche continue e potresti essere ben inserito nel discorso.
Così sdoganiamo dei lati della cosa per bene.

[Andrea Dattola @andreadattola96]

@yeswehack Thx !! 🎉🎉

[Andrea Dattola @andreadattola96]

Glad to announce that I just received a reward for my first critical vulnerability submitted on @yeswehack.https://t.co/BmTXL6Szzf #YesWeRHackers !!

[Andrea Dattola @andreadattola96]

@doge_dash https://t.co/SqppZoOqn7!!

[Andrea Dattola @andreadattola96]

Just got a reward for a vulnerability submitted on @yeswehack.https://t.co/BmTXL6Szzf #YesWeRHackers
CWE-434: Unrestricted Upload of File with Dangerous Type
I uploaded the Eicar (https://t.co/43kPu4x1FN) file successfully 💪🏻

[Andrea Dattola @andreadattola96]

@mypixid @yeswehack Reflected Cross Site Scripting ✅😃

[Andrea Dattola @andreadattola96]

Just got a reward for a vulnerability submitted on @yeswehack.https://t.co/BmTXL6Szzf #YesWeRHackers 💪🏻