Erick Fernando

[Erick Fernando @erickfernandox]

Thanks, @intigriti, for sharing my write-up alongside findings from some of the most notable hackers. :)

[Intigriti @intigriti]

@albinowax @voorivex @gregxsunday 4️⃣ $1000 Bounty: Scaling a self-redirect to XSS in a Web 3.0 system

@erickfernandox documents how they turned a low-impact self-redirect into a full XSS by chaining it with a Web 3.0 platform's authentication flow, landing a $1,000 bounty.

https://t.co/7aaXv97wB7

[Intigriti @intigriti]

We just dove into our shelf of archived bug bounty write-ups from the most notable hackers! 🤠

In this issue, we selected 5 compelling articles (that are still relevant today) to share with you, from which you can learn something new! 😎

🧵 👇

[Erick Fernando @erickfernandox]

Proud to be named the Most Valuable Hacker (MVH) for Q1 2026 in the Goldman Sachs program on @Hacker0x01. 🏆

#bugbounty #hackerone

[Erick Fernando @erickfernandox]

@Hacker0x01 is responding to Support quickly; this time it only took them 11 months and 22 days to reply. 🫤

[Erick Fernando @erickfernandox]

My first vulnerability capable of compromising accounts on a social network.

Yay, I was awarded a $15,000 bounty on @Hacker0x01! https://t.co/5mQ3hnJARF #TogetherWeHitHarder

[International Cyber Digest @IntCyberDigest]

🚨 WARNING: A 0day vulnerability in Adobe Acrobat Reader is being actively exploited in the wild for 4 months now.

Simply opening a malicious PDF can lead to data theft and potentially full system compromise.

Adobe has not released a patch for this vulnerability.

[Erick Fernando @erickfernandox]

@hunter0x7 thanks 😁😀

[Erick Fernando @erickfernandox]

I love Cache Poisoning! ❤️

#bugbounty #bugcrowd

[Erick Fernando @erickfernandox]

@xandsz__ @Bugcrowd Kkkk

[Erick Fernando @erickfernandox]

Starting the year with a beautiful XXE exfiltration at @Bugcrowd.

#bugbounty

[Erick Fernando @erickfernandox]

@JoaoGomes12243 @Bugcrowd Obrigado @JoaoGomes12243 😄👏🏻

[Will Gates @WllGates]

A very good xss payload.🔥

<sCriPt x>(((confirm)))``</scRipt x>

credit: @viehgroup

#bugbountytips #xss #bugbounty

[Erick Fernando @erickfernandox]

@PhilippeDelteil @Hacker0x01 Thank you! Coming from the best of Chile, it's an honor. 😁

[Erick Fernando @erickfernandox]

Yay, I was awarded a $10,000 bounty on @Hacker0x01! https://t.co/5mQ3hnK8Hd #TogetherWeHitHarder

[Erick Fernando @erickfernandox]

@pwnj0 @Hacker0x01 That was a great Christmas present. lol

[Erick Fernando @erickfernandox]

@xandsz__ @Hacker0x01 O caminho é longo ainda viu kk

[Erick Fernando @erickfernandox]

Critical Vulnerability Rewarded by Deutsche Telekom (T-Mobile Germany/European Union)

#bugbounty #p1

[c4ng4c3ir0 @c4ng4c3ir0]

Tamo bem rankeado na @bugcrowod no mês de agosto dentre os BR hein @sushicomabacate @erickfernandox

[Erick Fernando @erickfernandox]

@c4ng4c3ir0 @sushicomabacate 👏👏

[Erick Fernando @erickfernandox]

@cyberx00t Next, I generated a token using the OAuth code, and the generated token was an Amazon Cognito JWT. Using any regular user's Amazon Cognito token, I could access resources in any company system that user had access to.

[Erick Fernando @erickfernandox]

A simple open redirect can wreak havoc.

Simple open redirect -> misconfigured OAuth authentication flow -> privilege abuse using Amazon Cognito token

#bugbounty #bugcrowd