Cosmin Craciun

Pentester, Software Security Engineer, Trainer, Public Speaker

[Cosmin Craciun @cWaveSoftware]

https://t.co/X6bgvHfgwC this lab actually requires user interaction. the Note is really confusing

[CMD - Constantin @CMD_0_0]

Ready for the event? Report submissions will start tomorrow at 9:00 GTM+1! https://t.co/OmkXw6rZGo. Claim your spot on the hackerone leaderboard! #bugbounty #hackerone

[HackerOne @Hacker0x01]

Hey hackers! 📣 Check out this incredible live hacking opportunity.

Hackers from all over can participate in this challenge with a few surprises for anyone onsite at the #DefCamp #HackingVillage November 23-24.🙌

See the details➡️ https://t.co/daG6cYbPdY.

[Cosmin Craciun @cWaveSoftware]

@NahamSec thanks for having us. awesome evening!👍🏽

[Cosmin Craciun @cWaveSoftware]

@NahamSec @defcon @Jhaddix @stokfredrik RSVP'd. Looking forward

[Cosmin Craciun @cWaveSoftware]

Getting some Sepolia ETH at @quicknode's faucet for my 3881B5F8 wallet!
https://t.co/0JuQxGhaBS

[HackerOne @Hacker0x01]

That's a wrap for Round 1 of the #AmbassadorWorldCup! Congrats on an incredible round of teamwork. 🙌

Take a look at the stats! 📊

👨‍💻 239 hackers
🪲 262 valid bugs
����170 bounties awarded
🤑 $515K in bounties paid (so far)

See the full recap here: https://t.co/TO18sqZWxI

[Cosmin Craciun @cWaveSoftware]

@Jhaddix that’s why I always use ffuf —proxy

[Cosmin Craciun @cWaveSoftware]

Just got a reward for a high vulnerability submitted on @yeswehack -- DNS Zone Takeover. #YesWeRHackers

[Cosmin Craciun @cWaveSoftware]

started working on a CLI tool for reNgine. Basic features at the moment. PRs accepted
https://t.co/5wjRNs5UkN

[Cosmin Craciun @cWaveSoftware]

Incorrect CVEs have significant effects in the industry, I am thinking making a talk on this topic.

[Cosmin Craciun @cWaveSoftware]

I do have a problem with incorrect CVEs assigned. Just run into CVE-2021-45229, checked the Apache Airflow v2.2.3 source-code, input validation & html encoding is in place. No bypasses found until now. And this is just one of many examples I've found over time.

[Cosmin Craciun @cWaveSoftware]

not an Windows guy, but the retro style font in Windows 11 Terminal is dope

[Cosmin Craciun @cWaveSoftware]

@rgod777 It took me bit to realise whether it’s a joke or not. Apparently is not🤨

[Cosmin Craciun @cWaveSoftware]

A good series for beginners web pentesters https://t.co/xmO7AzSdce

[Cosmin Craciun @cWaveSoftware]

@TzahPahima I’ve read your technical vulnerability walkthrough. Pretty straight forward, but it’s still not clear to me why did you need to trigger that race condition?

[JS0N Haddix @Jhaddix]

That's it for now, did I miss anything?

A full and expanded blog with MORE & ALL links for this thread can be found on my blog:

https://t.co/VYpsoGToEj

✌🏻For more resources follow, retweet, & like!✌️

11/

[Cosmin Craciun @cWaveSoftware]

@Jhaddix @BSidesSF I’ll be there for RSA, would be nice to meet you in person

[JS0N Haddix @Jhaddix]

🧵Mistakes I make in hacking or bug bounty 🧵

#bugbountytips and hacking tips I wish I always adhered to 🙃

cc @sr_b1mal