p4

the logic guy pwning fortune 500.
an engineer by god's design.

[p4 @peeefour]

If you learn how to "go deep" in bug bounties before learning how to "go wide", you will have the ability to go deep into every asset you find when going wide. It just makes sense #bugbounty

[DreyAnd @dreyand_]

Happy to be a part of the goated @zenith256 team -- you know where to reach out if you need an audit 😛

[p4 @peeefour]

@dreyand_ @zenith256 i am now more proud than i ever was. damn, you never cease to amaze me bro

[p4 @peeefour]

logic turns subtle details and information into quality vulnerabilities

[p4 @peeefour]

@krishnsec the most relatable shit i've read all day 🤣🤣🤣🤣🤣

[p4 @peeefour]

@MiniMjStar @J0R1AN @gmail admins of the app probably see your email somewhere at some point. try blind

[p4 @peeefour]

@zseano @TheSmallFelix @iAmYourBigHomie sean just ignore him he has no idea what hes talking about and hes ragebaiting because he has nothing better to do

[zseano @zseano]

i'm taking a pause from hacking to resume building https://t.co/H7tDJivomZ. i regret closing it down and I shouldn't of done it. everything will be back online EXACTLY as it was very soon and i've got some big plans for the future. and yes, that includes zseano methodology v2 ;)

[p4 @peeefour]

back to clicking buttons

[p4 @peeefour]

@payloadartist idk tbh. i stopped using anthropic like a month+ ago and when i came back to use it again when opus 4.7 had just dropped i requested cyber use case before i even paid for the subscription. i got accepted like an hour later and havent been blocked by opus 4.7 for testing yet

[p4 @peeefour]

this is sad. genuinely comparable to a circus.

[p4 @peeefour]

he started in 2025 and pwned every feature of a public programs MAIN APP. im proud of my boy but this just goes to show, anything is possible with the right mindset. keep up the great work twin. 🕷️🙏🏾

[sin99xx @sin99xx]

Last one, now I'm gonna spend time on learning more coz I guess I found everything from last research.

[p4 @peeefour]

@sin99xx good work gangsta. im going to sleep now was just checking something before i closed my eyes. ttyl 😂😂

[p4 @peeefour]

@zseano live in denial

[xssdoctor @xssdoctor]

@intigriti If the attack requires only a free self-signup account, its still PR: none

[p4 @peeefour]

some of the shit i see you bug bounty engagement farmers tweet is actually sickening 🤣🤣🤣

[p4 @peeefour]

@EvanKlein338226 @Hacker0x01 yeah there were a number of violations i described in my follow up and GDPR article 4 being one i referenced. thank you anyways because if i hadn't known any better originally, i would have taken this advice.

[p4 @peeefour]

ok so my report detailing a PII disclosure was hit with a reply from the security team that says: "the report does not lead to a security risk or exposure of customer/PII". what is this about? @Hacker0x01

[p4 @peeefour]

@Hacker0x01 it is almost as if AI handled the triage of the whole report with zero human in the loop.

[p4 @peeefour]

thanks bro, to get impact i start by understanding the companies business model and features which allows me to build a mental threat model and potential test cases for each feature. ideas should come naturally at this point. now, try to understand their implementation of flows.

[Lakshan Perera 🇱🇰 @tecchirp]

@peeefour Amazing man, I wanted to ask do you usually chain bugs together to show maximum impact, or are these just authorization IDOR bugs ?

[p4 @peeefour]

i woke up from a nap and i couldn't find the energy to hunt at that time. i eventually had a thought and then executed said thought. now i don't wanna stop hunting 😆😂