Kabuto

MalDev - Offensive Security Researcher - I post occasional infosec stuff and drama

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

Does the SIEM work here?

[Kabuto @meterpretered]

@realMax0r 2 tries easily, you have a week to search the two points that the circumferences meet

[Kabuto @meterpretered]

@thebrotherpill The last time the word virgin meant “unwed” was the 1200s and I guarantee you women were not sexually liberated and having premarital sex in the year 1200 lmao

[Kabuto @meterpretered]

@FGALABAMA @jamiemcln Weird how you can’t see any cars from space either

[Kabuto @meterpretered]

@0x_venus @IntelOpsV3 Someone needs to create an archive or something to graph all the derivative forums

[Kabuto @meterpretered]

@sdmat123 @emilyjuniper_ This photo is actually from the mid to late 1930s so you’re full of shit

[Kabuto @meterpretered]

@DrChrisCombs @TXVB d = w - 200; 300= d + w; d =w-200 & w = 300-d, d = (300-d) -200; 2d =100, d = 50cm

[Kabuto @meterpretered]

@C2IRIS This is finally relevant

[Kabuto @meterpretered]

@IntelOpsV3 @session_app @DoingFedTime @vxunderground @rmoskovy Totally missed that thanks. I remember looking at the asar for session and seeing the misconfig and thinking lol this is gonna be a problem some day

[Kabuto @meterpretered]

@YugoUnderground @SerbianSpirit_ You’re a retard, this is a threat intel report on a data breach and the origin of the data is Serbia, obviously they don’t know where the threat actor is from you idiot

[Kabuto @meterpretered]

@mramisuzuki @MikeSonko @Sassy_Khat Not to mention that this already exists and that this is just a smaller version for teeth. It’s like if I made a small towel and claimed to be the genius inventor of the hand towel lol

[Kabuto @meterpretered]

@thaulos @Fragbaza Brain so oneshotted by slop that you can’t only understand things as a metaphor for porn

[Kabuto @meterpretered]

@al_f4lc0n @immunefi What a bunch of idiots lol, the next person who’s desperate enough will find this writer and totally finger fuck their platform 😂 state of bug bounty in 2026

[f4lc0n @al_f4lc0n]

I Saved Injective's $500M. They Pay Me $50K.

I like hunting bugs on @immunefi . I'm decent at it.

- #1 — Attackathon | Stacks
- #2 — Attackathon | Stacks II
- #1 — Attackathon | XRPL Lending Protocol
- 1 Critical and 1 High from bug bounties (not counting this one)

Life was good. Then I found a Critical vulnerability in @injective .

This vulnerability allowed any user to directly drain any account on the chain. No special permissions needed. Over $500M in on-chain assets were at risk.

I reported it through Immunefi. The next day, a mainnet upgrade to fix the bug went to governance vote. The Injective team clearly understood the severity.

Then — silence. For 3 months. No follow up. No technical discussion. Nothing.

A few days ago, they notified me of their decision: $50K. The maximum payout for a Critical vulnerability in their bug bounty program is $500K. I disputed it. Silence again. No explanation for the reduced payout. No explanation for the 3 month ghost. No conversation at all. To be clear: the $50K has not been paid either.

I've seen others share bad experiences with bug bounty payouts recently. I never thought it would happen to me. I can't force them to do the right thing. But I won't let this be forgotten.

I will dedicate 10% of all my future bug bounty earnings to making sure this story stays visible — until Injective pays what I deserve.

Full Technical Report: https://t.co/lki2tL9bxw

[Kabuto @meterpretered]

@imfckxxgcherry @qryptoide @Rekthouse @King_Sukunaaa This is elementary physics that every retard knows. How can a machine that generates cold also output cold. Where is the heat (energy) from the warm air and external environment that is trying to warm up the fridge going?

[Kabuto @meterpretered]

@jamieantisocial Compiler flags that I determined by consulting a crystal orb 6 weeks ago on a random Monday, and nothing else works.

[Kabuto @meterpretered]

@SecondA16110022 @HansMarvel3 @JeffYoungerShow Nothing says readable and predictable like a tweaked with a knife right

[Kabuto @meterpretered]

@null6374 @amsryq @10x_er Ehhh not true. The hardware ID key is burned into the chip, not the pin. The pin is combined with this key to create a key for encrypting/decrypting the filesystem