trial

/goal hack the planet @Poneglyphsec

[trial @mainteemoforfun]

@watcherendpoint That with some brainstormed attack scenarios, if extension available try this and that, (mainly focused on custom extensions and how they processed users input and who have access to them)

[trial @mainteemoforfun]

Alhamdulilah, My highest bounty so far, this was found back then using opus 4.6(and some skills) on azure horizondb CVE-2026-85878

[trial @mainteemoforfun]

@watcherendpoint I corrected that it was 4,8 , besides that they seem the same to me for security research
Manual (recon, and mapping important attack surface) by itself was amplified by llm basically i put a lot of a bug class findings into conversation, combined …

[trial @mainteemoforfun]

@PoCForge For poc i have a specific skill when it comes to cross tenant or privilege escalation inside cloud, where i use canary files/content and models has to adapt whatever it produce to reading that content

[trial @mainteemoforfun]

People defending this don’t know terms and conditions they accept before submitting a report, if you intend to play the vigilante just don’t do bug bounties, playing the double sides is bit hypocritical

[International Cyber Digest @IntCyberDigest]

Bugcrowd just banned the security researcher who shared the Lime vulnerability with us, after Yahoo News picked the story up.

[trial @mainteemoforfun]

@zhero___ congratulations man! hopefully you attend virtually enshaa allah!

[trial @mainteemoforfun]

ta ana bghit ykun endi two startups one in paris and one in sf so haters can sleep well at night

[trial @mainteemoforfun]

@methematikoi allaaaah I love the hate towards that dude, I remember I tried to reason with him once and blocked me, maaan he is such a slop, was made from hype and Mgharba Hnan

[trial @mainteemoforfun]

@drissnafiii @marouane53 LoL u guys are real intimidated by « revenue », bro moat was hype and trends, hamdulilah blockani w hanani from his slops

[trial @mainteemoforfun]

@K7al_L3afta عندك نكونو ديجا شريناه

[trial @mainteemoforfun]

@pakar_ai @vfxacs If you are cyber verified you can do it

[Siddharth @jeetbhdr]

Made over $25K hacking marketplace app permission issues across various bug bounty programs.
Here's my latest writeup on how a malicious app might take over a GitHub repository: https://t.co/LmPuptQpnZ

#bugbounty

[trial @mainteemoforfun]

@conor11clancy Hi i dropped you a message

[trial @mainteemoforfun]

My bad this was using 4,8, 4,6 was used to prepare and orchestrate the attack scenarios

[trial @mainteemoforfun]

Alhamdulilah, My highest bounty so far, this was found back then using opus 4.6(and some skills) on azure horizondb CVE-2026-85878

[trial @mainteemoforfun]

@LossFunctions Claude i am cvp verified and codex i am using daybreak

[trial @mainteemoforfun]

Also, and due to the fact that most of the times its shared instead of dedicated hardware, you can find different kind of cross tenants issues, and most of them are logical, doesn’t require you fuzzing the engine, that’s exactly what I am trying to build at @Poneglyphsec 1/n

[trial @mainteemoforfun]

Microsoft’s finding wasn’t my only hit for managed db bugs using AI

https://t.co/ZIgvW1Iuxg
And I know its full of em dashes (i wrote initial draft and AI rewrote later)

Besides this managed runtimes/dbs are a good area of research 1/n

[trial @mainteemoforfun]

Alhamdulilah, My highest bounty so far, this was found back then using opus 4.6(and some skills) on azure horizondb CVE-2026-85878

[trial @mainteemoforfun]

@topkingmo They even respond fast to my messages and ask me for details and don’t close reports without a word

[trial @mainteemoforfun]

@S1r1u5_ I hope companies can wake up and decide that white hats will help doing more like this with AI

[trial @mainteemoforfun]

@CyberQueenMara I don't remember I was getting any bounties from OSS
maybe pwn2own targets, but they need some depth analysis

[trial @mainteemoforfun]

@mfmASmOO7 become good at coding with C++, networking, and jump to CTFs, use AI as tutor and accelerator, that what I heard from someone who got 100K from google in bug