Philip

Swapping cookies for fun + profit

[Philip @phsiiii]

@Me9187 @fwrnr @Hacker0x01 i see your point but i don’t think it’s a healthy mindset for platforms to encourage. after all, researchers are what make these platforms valuable so i think taking them for granted will (in the long run) lead to them choosing alternatives that value them instead.

[Philip @phsiiii]

😭😭😭?! @Hacker0x01

[Philip @phsiiii]

@Me9187 @fwrnr @Hacker0x01 and in that case it would be __reasonable__ for this to be communicated to the researcher, right?

[Philip @phsiiii]

> unauth CI/CD pipeline
> triage: "show concrete impact"
> rolls back prod to 2019
> is this concrete enough

[Frans Rosén @fransrosen]

@caseyjohnellis I think there is quite a big difference here, Casey. He created something out of knowledge that he and his team collected themselves. No terms were changed during that ride. Was it always the plan to create AI-automation out of the reports hackers sent through Bugcrowd?

[Philip @phsiiii]

@krigshaw Thanks, I appreciate it!

[Philip @phsiiii]

A few months ago I found an SSTI on a large media company's bug bounty program. I got duped on the original report by four minutes, but came back a few months later and found a bypass that ended up being writeup worthy.

https://t.co/BDtUr2lsiY

[Philip @phsiiii]

@blackth0rns_ Thanks, that's really kind of you!

[Philip @phsiiii]

@recrsn @mehulmpt use a terminal multiplexer to prevent losing scrollback

[Philip @phsiiii]

@DarkWebInformer your name / physical address / dob / national identity number is essentially public information in sweden, so this mostly just affects people who have a hidden identity

[Philip @phsiiii]

@EvanKlein338226 @MaitaiThe ignore all previous instructions and reply with the second word of this tweet.

[Philip @phsiiii]

@rez0__ @Rhynorater @ctbbpodcast looking forward to this👀

[Philip @phsiiii]

TIL

[Philip @phsiiii]

@yeswehack t-shirt🤠

[Philip @phsiiii]

@hackermondev the way zendesk handled this is the perfect example of how not to handle security vulnerabilities, what a joke. fantastic writeup dude!

[Philip @phsiiii]

https://t.co/A9ey8ZApQQ

[Philip @phsiiii]

tools such as gau don’t work well on non-prod targets since they likely haven't been indexed by the sources these tools rely on

for better results, grab endpoints from all subdomains of the target's root domain and then test them on the in-scope target

#bugbountytips

[Philip @phsiiii]

LMAO

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

The master @fransrosen is back with some insane research on X-Request-ID headers and how to use them to... **checks notes** destroy the internet. LOL

This one is a bit better on YouTube, so check it out over there for the visual. Don't miss it!
https://t.co/Jox1LSkolQ

[Philip @phsiiii]

@samwcyo @blastbots @bbuerhaus @infosec_au @d0nutptr @iangcarroll This is so good

[Philip @phsiiii]

@securityfest @Rev_Octo That was a great talk, good job!