Bugsgalore

Full time bug bounty hunter | Security Analyst | Application Security Engineer

[Bugsgalore @BugsgaloreSec]

Found it in a JS file that's been public for years.

Triaged P1. 🐛

Nobody had grepped for it. That's the whole trick.

#bugbounty #bugcrowd #infosec #ethicalhacking

[Bugsgalore @BugsgaloreSec]

7.7 High, accepted 📈

Reminder that "already reviewed" scope isn't reviewed. This was in a flow that hundreds of hunters have looked at and did not find.

Look harder at the parts everyone assumes are boring.

#BugBounty #Recon #Infosec

[Bugsgalore @BugsgaloreSec]

Yay, I was awarded a $3,000 bounty on @Hacker0x01! https://t.co/KJnP8SFSIq #TogetherWeHitHarder

[Bugsgalore @BugsgaloreSec]

I earned $10,000 for my submission on @bugcrowd https://t.co/jdvByrth3S #ItTakesACrowd

[Bugsgalore @BugsgaloreSec]

Report RCE on a program in 2021 on @Bugcrowd, it gets patched but not marked resolved.

2 Years later, report bypass of patch in new ticket.

Duped against old 2021 ticket. Despite CVE and OWASP classing such bypasses as distinct issues.

BC getting worse.
#bugcrowd #bugbounty

[Bugsgalore @BugsgaloreSec]

@GodfatherOrwa Congrats, happy to learn !

[Bugsgalore @BugsgaloreSec]

@irsdl Speaking of 10 years ago - Do you know If it is possible to exploit ASPNET 1 viewstates? https://t.co/nNdQ81vlYw only seems to generate ASPNET 2 viewstates and I can't find any writeups about it. Thanks

[Bugsgalore @BugsgaloreSec]

@irsdl Bump

[Bugsgalore @BugsgaloreSec]

@irsdl Do you know If it is possible to exploit ASPNET 1 viewstates? https://t.co/nNdQ81vlYw only seems to generate ASPNET 2 viewstates and I can't find any writeups about it. Thanks

[Bugsgalore @BugsgaloreSec]

@ghost7363 Everyone will just vanish with it 😂

[Intigriti @intigriti]

@BugsgaloreSec @redbull The king of Redbull has arrived! Bow down!

[Bugsgalore @BugsgaloreSec]

Yay, I was awarded a $2,000 bounty on @Hacker0x01! https://t.co/KJnP8SFSIq #TogetherWeHitHarder

[Bugsgalore @BugsgaloreSec]

When the Redbull arrives 😎
Behold the Redbull Throne (400 Cans)

Thanks @redbull & @intigriti

#bugbounty

[Bugsgalore @BugsgaloreSec]

@satoshi So, Craig, how much did this handle set you back? lmao.

[Bugsgalore @BugsgaloreSec]

Mornin