bankroll @bankrollgov - Twitter Profile

bankroll @bankrollgov

28 days ago

@migtissera which harness?

1

0

764

bankroll @bankrollgov

about 1 month ago

@foilmanhacks 74

0

95

bankrollgov retweeted

s1r1us

@S1r1u5_

about 2 months ago

"3 random dudes” 1. hacked apple, again and again. https://t.co/5aZcB0RbjF https://t.co/UdsKrmfFJW https://t.co/hWDQaimW8c 2. your github enterprise is our github enterprise. https://t.co/u3UjajnBKq 3. get a discord message from me, get pwned. https://t.co/pX3RkjxNOX https://t.co/noscPNmZm9 4. oh yeah, at one point we basically had shells across the electron ecosystem. check the DEF CON research. https://t.co/1Th5fvpa21 5. your supabase database is my database. https://t.co/nOIKthdDnM 6. we got the posthog prod database. https://t.co/VIeGJz1hKq 7. react2shell? vercel paid us $170k for helping secure their waf. https://t.co/Y2RgQSdl3g 8. your palo alto vpn is my vpn. https://t.co/oVB068UhST 9. ai ides? we got shells for you, antigravity https://t.co/tsvSXQuSS0 10. windsurf rce. https://t.co/DpdGqmNRvu 11. turning cluely into malware. https://t.co/8QcIYhXQfS 12. ai browsers? sure, uxss: your perplexity browser is my browser. https://t.co/WVXlHzY0CB 13. openai atlas too. kinda uxss https://t.co/jkQWnLD7rV 14. hey, it’s not even our first time hacking discourse. https://t.co/viI1op7aMf 15. adobe coldfusion: pre-auth rce. because apparently we needed another one. https://t.co/aFILo3suP2 there’s a lot more. go dig. anyway, yes: “3 random dudes.” and @HacktronAI is full of more random dudes like these.

69

2K

237

1K

182K

bankrollgov retweeted

International Cyber Digest

@IntCyberDigest

about 2 months ago

Nightmare Eclipse, the person who has been dropping Windows zero-days, has finally decided to share his story. He's an ex-Microsoft employee, we had dinner together, and I've known him and his story for some time. His real name is Abdelhamid Naceri. He's a very talented and intelligent individual, and he came across as someone who'd be a real professional to work with. "If only I didn't pour my soul into that job with countless of stupid non sleep nights, i would have gotten over it..." - Naceri He loved Microsoft. I wouldn't say that what he did, releasing all those zero-days, was normal, but he felt he had no other option because of the injustice Microsoft did to him. They fired him, and you can read the vague reason they gave in the email sent to him by the Vice President of Engineering at MSRC, below. According to Abdel's account, VP Tom Gallagher met with him after the firing to tell him they were blacklisting him from Microsoft and writing him a bad reference so he'd never be able to get a job again. Normally you'd think, well, big deal, just find another job, right? But Abdel doesn't have a European passport, and he was only a couple of months away from getting permanent EU residence. So instead of granting him those couple of months, Microsoft fired him for a reason that, as far as we can tell, was never made clear, then fought him in court and offered him €55,000 plus a year's pay to drop the case. All while Abdel was releasing zero-days. Abdel continued suing Microsoft for unfair termination in Germany, a fight that has cost him over $200,000. He says Microsoft refused to reveal any details about the security breach and went another direction. If you are reading this, and you can offer him a LEGAL job, this is his e-mail: [email protected]

IntCyberDigest's tweet photo. Nightmare Eclipse, the person who has been dropping Windows zero-days, has finally decided to share his story. He's an ex-Microsoft employee, we had dinner together, and I've known him and his story for some time.

His real name is Abdelhamid Naceri. He's a very talented and intelligent individual, and he came across as someone who'd be a real professional to work with.

"If only I didn't pour my soul into that job with countless of stupid non sleep nights, i would have gotten over it..." - Naceri

He loved Microsoft.

I wouldn't say that what he did, releasing all those zero-days, was normal, but he felt he had no other option because of the injustice Microsoft did to him.

They fired him, and you can read the vague reason they gave in the email sent to him by the Vice President of Engineering at MSRC, below.

According to Abdel's account, VP Tom Gallagher met with him after the firing to tell him they were blacklisting him from Microsoft and writing him a bad reference so he'd never be able to get a job again.

Normally you'd think, well, big deal, just find another job, right? But Abdel doesn't have a European passport, and he was only a couple of months away from getting permanent EU residence.

So instead of granting him those couple of months, Microsoft fired him for a reason that, as far as we can tell, was never made clear, then fought him in court and offered him €55,000 plus a year's pay to drop the case.

All while Abdel was releasing zero-days.

Abdel continued suing Microsoft for unfair termination in Germany, a fight that has cost him over $200,000.

He says Microsoft refused to reveal any details about the security breach and went another direction.

If you are reading this, and you can offer him a LEGAL job, this is his e-mail: msnightmare@proton.me

105

5K

510

2K

232K

bankroll @bankrollgov

2 months ago

@0xRIXET

1

2

0

527

bankroll @bankrollgov

2 months ago

@pilvar222 which harness would you recommend to use?

1

0

68

bankroll @bankrollgov

2 months ago

@Zaddyzaddy tested in ZCode?

0

442

bankroll @bankrollgov

3 months ago

@Zaddyzaddy @BugBunny_ai thank you :)

1

0

51

bankroll @bankrollgov

3 months ago

@Zaddyzaddy @BugBunny_ai done

1

0

38

bankroll @bankrollgov

3 months ago

@Zaddyzaddy @BugBunny_ai Grok 4.6

0

1

0

79

bankrollgov retweeted

Z A D D Y

@Zaddyzaddy

3 months ago

Bug bounty programs are so weird. How do you mark RCE as “out of scope” when it’s RCE on your production host? Are you actually interested in fixing security issues, or just running a performative “security program”?

18

143

4

14

10K