Christian Lopez 🦄

(in)Security Leader | Bug Bounty Connoisseur | I know things | Security Researcher at @xbow // Before: @NCCGroupInfosec @Synack @EY_Ireland

[Christian Lopez 🦄 @phr0nak]

@stokfredrik 1. Infosec is small world. Be nice and humble. You're probably talking to your future employer/employee/colleague.
2. Learn to write reports.
3. Don't let people decide for you to which platforms use. Use all of them and increase your chances of learn.

[Christian Lopez 🦄 @phr0nak]

I am hiring!! https://t.co/NCPLdaCoBM

[Christian Lopez 🦄 @phr0nak]

https://t.co/i3yx0Wvp2X

[Christian Lopez 🦄 @phr0nak]

I'd like to believe there is a story behind the scenes, but checking in 44 seconds if the asset is in scope, it is not a duplicate, it is valid, impactful, and reproducible? If this is automated, I wonder what are the stats for FP and FN...🤔

[Roberto Nunes @0x_Akoko]

Wow Fast @Bugcrowd Triage

Triaged in just 44 Seconds 😂
Thanks for Bugcrowd/ Bugcrowd triage Team

[Christian Lopez 🦄 @phr0nak]

"Success is not final. Failure is not fatal. It is the courage to continue that counts." – Winston Churchill

[Christian Lopez 🦄 @phr0nak]

@CoreyD97 @Burp_Suite Happy Bday 🙂

[Christian Lopez 🦄 @phr0nak]

@monkehack I was in the DMZ and JSA a few years ago. Totally recommend it. I remember seeing tourists groups on the other side and thinking what story their guide was sharing. Also remember when I got to the "blue house" and how I was extra careful to not cross the line 😅

[Christian Lopez 🦄 @phr0nak]

I am in London for Black Hat Europe 2023. If you want to meet and have a chat about how @NCCGroupplc can help to fulfill your Bug Bounty needs, DM :) #BHEU

[Christian Lopez 🦄 @phr0nak]

https://t.co/xVozsXRlFz

[Jack Rhysider 🏴‍☠️ @JackRhysider]

Every time you click this link, it will send you to a random Web 1.0 website

https://t.co/Z8Pnt0EDXA

[Christian Lopez 🦄 @phr0nak]

@dcuthbert The screenshot I attached was taken after reading your tweet. You are right do, before it was at this setting by default. But I was able to change it.

[Douglas Day @ArchAngelDDay]

100 (very) short bug bounty rules:

[Christian Lopez 🦄 @phr0nak]

@intigriti Could you spell that for me?

[Christian Lopez 🦄 @phr0nak]

@olearycrew Sent. Thanks.

[Christian Lopez 🦄 @phr0nak]

Am I the only one not receiving the API key after sign up? @pdiscoveryio any help?

[ProjectDiscovery @pdiscoveryio]

Great news! Chaos is now available in beta for ✨ everyone ✨

If you already signed up, you will need to sign up again – but as soon as you fill out the new form, you'll get your API key right away.

https://t.co/wDQbAaJbuC

#hackwithautomation #pdteam

[Christian Lopez 🦄 @phr0nak]

@irsdl @CoreyD97 I can only speak for my team at NCC Group. The answer is ABSOLUTELY NOT. Not even after X period of time.

[Christian Lopez 🦄 @phr0nak]

After so many years there are still people who believe Triagers get commission for rejected reports. ¯\_(ツ)_/¯

[Christian Lopez 🦄 @phr0nak]

#MyTwitterAnniversary

[Christian Lopez 🦄 @phr0nak]

@pry0cc @Hacker0x01 Merry Christmas 🎅