hackermater

#: Mobile & AI Security Researcher | eMAPT | CVE-2026-123614 | AppSec

[hackermater @hackermater11]

It's hard to believe, but after a long time I got my FIRST BOUNTY... and yeah: it was a P1 Critical $3.000 !!!!

#bugbountytips don't try to automate everything, use Burp Suite and dedicate at least 1-2 weeks to understand the whole application and do manual hacking ;) #bugbounty

[hackermater @hackermater11]

@NabhaniMehdi true

[hackermater @hackermater11]

hacking LLM models is my new passion 🔥 (AI features are everywhere and those all are so soo vulnerable 🫪), not a joke.

[LaurieWired @lauriewired]

when I was a kid I wanted to make my signature a picture, like a cat or something

my mom told me that was a bad idea 😢

[hackermater @hackermater11]

@kymu___ always the best kymu ⚡⚡💯
thanks for sharing bro 🫡🫡🔥

[Karim @kbksi_]

an IDOR i found many times
sometimes the dev only check if you have access to the parent path to block you from accessing an item or file, if you don't have access to project B, then you're not gonna see the file that's in it
this can be bypassed in such cases where the server doesn't check if the file belong to the project by adding your project path and appending the victim fileID

i found this bypass many times apparently

[hackermater @hackermater11]

GHSA-hff9-5pqw-6w9f: Integer Overflow and Heap Buffer Overflow in imgproxy's ICO Loader - Mateo Fumis (hackermater)
https://t.co/djrYztIppe

[hackermater @hackermater11]

@Bugcrowd https://t.co/BbqDBZUHZs

if you want to use my methodology

[hackermater @hackermater11]

Another reward on Bugcrowd!!🥂🥂🎉💰
This may be not a common "big bounty price" but I just used Codex for AI security research and it took me only 2 hours to found it! 😅😂😂
Conclusion: "easy finding, more than enough bounty". 💰🥂
Thank you @Bugcrowd !! ♥️- #bugbountytips

[hackermater @hackermater11]

@Bugcrowd tip: always test features/endpoints nobody is looking at. IDORs are still being reachable but business logic are less common and still alive

[hackermater @hackermater11]

@BeardyBearer @Bugcrowd Absolutely congrats!! 🫡🫡🎉🎉

[hackermater @hackermater11]

https://t.co/lhuiYM2aK3

[hackermater @hackermater11]

I was hard working on updating my Gitbook of practical Cheat Sheets, and I have to say that I've never imagined how awesome it's now becoming ;) 📝🔐📸

[hackermater @hackermater11]

it's about hack smarter, not harder ... 🧠🔎🔬💥

[hackermater @hackermater11]

Remember: DO NOT RUSH in CYBER. Stay safe.
Cheers!

[kyoto @0xkyotozx]

Just posted 3 writeups of 3 disclosed bugs from @Hacker0x01 in my blog: https://t.co/i6AOdwFuwz

One RCE btw 😛

#bugbounty #hackerone #bolhasec

[hackermater @hackermater11]

I love Caido.

This is the feature we all were waiting for!! 🥳🥳🥳💯💯

Finally!! 🥷🥷💰💰

#bugbounty #bugbountytips #appsec

[Caido @CaidoIO]

Caido v0.58.0 adds Pipeline sessions to Replay.
Batch a set of requests, send them in one run, and hunt for race conditions:
➡️ Sequential: Fires them in order.
➡️ Last Byte Synchronization: Holds the final byte of each request and sends them all at once.
Read the details: https://t.co/YD6xux2hkD

[elhacker.NET @elhackernet]

Más de 100 entidades tecnológicas piden reforzar la ciberdefensa global ante ataques de IA

Más de 100 organizaciones de tecnología, ciberseguridad y servicios financieros se han unido a OpenAI en una carta abierta titulada "Un llamado a la acción colectiva sobre la ciberdefensa"

En este documento, advierten que los ciberataques potenciados por inteligencia artificial serán cada vez más frecuentes, por lo que instan a un impulso global en las defensas cibernéticas a medida que los modelos de IA se vuelven más capaces tanto para atacar como para proteger los sistemas digitales
https://t.co/tg9CTCpQmr

[hackermater @hackermater11]

@Kunjal6k @Hacker0x01 thanks bro 🙌

[hackermater @hackermater11]

Got rewarded with a $600 bounty! 🥳🥷

Thanks @Hacker0x01!
#bugbounty #bugbountytips

✍️ Keep hunting where others don't. Fewer duplicates, juicier findings.

The more original your approach, the more likely you are to uncover what everyone else missed. 🔥

[hackermater @hackermater11]

@juvfbmoiy @Hacker0x01 thank you 🤟🤟

[hackermater @hackermater11]

@darkx9i1 @Hacker0x01 thanks bro ;)