Gabriel Figueroa

Security Researcher | Bug Bounty Hunter

[Tibo @thsottiaux]

The difference between having a tool and being a tool is subtle these days and it’s easy to accidentally build yourself into being a tool. Don’t be a tool.

[Gabriel Figueroa @Gabbsec1337]

It was about time to add another xss!🔥🔥🔥

#XSS #BugBounty

[Gabriel Figueroa @Gabbsec1337]

🔥🔥🔥

[HackenProof @HackenProof]

Top 3 researchers this week:

🥇 fergabriel711
🥈 @killchainn
🥉 Observer888

Amazing work! Keep going 💪

Want your handle here? Join active programs:
https://t.co/whfHUbqK9P

[HackenProof @HackenProof]

Top 3 researchers this week:

🥇 fergabriel711
🥈 @killchainn
🥉 Observer888

Amazing work! Keep going 💪

Want your handle here? Join active programs:
https://t.co/whfHUbqK9P

[Gabriel Figueroa @Gabbsec1337]

@LiveOverflow Solo vuelvan a iniciar sesión con la llave física .

[Gabriel Figueroa @Gabbsec1337]

@theXSSrat The patch was applied in another context (SQLi) haha, this submission hasn't been classified yet ☺️☺️

[Gabriel Figueroa @Gabbsec1337]

Today's reward, very grateful!

#BAC #BugBounty #Bugcrowd

[Gabriel Figueroa @Gabbsec1337]

Update: I was told it was a known bug and that they had applied the patch the same day, hours before I did the test! However, they asked me to do a retest which came back negative; it was indeed patched. What should I do?

[Gabriel Figueroa @Gabbsec1337]

Today I verified a Stored XSS vulnerability in a Jira integration. A user with minimal permissions could store JavaScript using analytics metadata and execute it in another account's session when opening the project dashboard. 🐛⚡

#BugBounty #XSS #Bugcrowd

[Gabriel Figueroa @Gabbsec1337]

@thsottiaux Now they can rewrite the past as they please 👌🏻

[Gabriel Figueroa @Gabbsec1337]

@Z723jz Exactly, your perspective is great.

[Gabriel Figueroa @Gabbsec1337]

This is what my second brain in Obsidian looks like 🧠

Connected notes, techniques, and hypotheses to hunt for vulnerabilities with AI. Each investigation adds context and new ideas for the next one.

#BugBounty #Obsidian #AI

[Gabriel Figueroa @Gabbsec1337]

@aw3nyy Linux

[Gabriel Figueroa @Gabbsec1337]

Everything is appreciated!

#BugBounty #Bugcrowd

[Gabriel Figueroa @Gabbsec1337]

@0trusts Bbp

[Gabriel Figueroa @Gabbsec1337]

Finishing up some unfinished tests from last night, today we found SQLi 🔥

#SQLinjection #BugBounty #Bugcrowd

[Gabriel Figueroa @Gabbsec1337]

@cyberx00t I also use AI, to a certain extent.

[Gabriel Figueroa @Gabbsec1337]

We await answers 🔥

#RCE #BugBounty #Bugcrowd

[Gabriel Figueroa @Gabbsec1337]

#XSS ONFIRE ! 🔥🔥🔥

#xss #bugbounty