Mohamed Fodil

Fix Things and Break Others ¯\_(ツ)_/¯ | Old-School iOS Reverse Engineering | Electronic ST | WhiteHat | Bug Bounty Hunter | Acknowledged By Apple

[Mohamed Fodil @public___void]

My report to @msftsecresponse was assessed as "By Design". However, as a direct result of my report, Engineering had to update the docs to clarify undocumented/confusing behavior. Sometimes the Soft-Patch isn’t code, it’s the documentation.

#MSRC
#BugBounty
#CyberSecurity

[Mohamed Fodil @public___void]

@yasmeena_rezk إنا لله و إنا إليه راجعون. أعظم الله أجركم، الله يرحمو و يسكته الفردوس الأعلى من الجنة و يلهمكم جميل الصبر و السلوان

[Mohamed Fodil @public___void]

@ii1waleed @Bugcrowd Thanks! I did this many times with different programs and had never get it N/A

[Mohamed Fodil @public___void]

The Team promptly pushed a FIX for a Low-Hanging Fruit finding, and I delivered a FIX-Bypass just minutes later 🕑

@Bugcrowd
#BugBounty
#CyberSecurity

[Mohamed Fodil @public___void]

@jeetbhdr @Bugcrowd How that?

[Mohamed Fodil @public___void]

@iProgrammer16 و إياك أخي

[Mohamed Fodil @public___void]

@kymu___ Congratulations bro 🎉

[Mohamed Fodil @public___void]

@kymu___ Amazing write-up bro 👏👏 Thank for sharing!

[Mohamed Fodil @public___void]

@FTMO_com .....4...

[Mohamed Fodil @public___void]

@DsokeyyV أنا هو صاحب القصة شخصيا 😂😂😂
أنا بينت في ال PoC كيفية استغلال الثغرة و سحب ال PII بينما صاحبنا مبلغها origin reflection فقط، لكن بما أنو بلغ عليها قبلي بي 16 يوم يعني هو لي أخذ الباونتي.

[Mohamed Fodil @public___void]

@Harshva97597668 @Bugcrowd Yup! this makes me the happiest person in the planet

[Mohamed Fodil @public___void]

3 years ago (Sep 2023):
On @Bugcrowd I reported a CORS Misconfig exposing PII → Closed as N/A.

Yesterday (31 Jul 2026):
A program Team Member re-classified it as a valid P3, but marked duplicate of a report submitted 16 days earlier.

¯\_(ツ)_/¯

#BugBounty
#CyberSecurity

[Mohamed Fodil @public___void]

@ShuvamoyRoy1 @Bugcrowd This is the rules! whatever the impact you demonstrate, the 1st reporter wins!

[Mohamed Fodil @public___void]

@marxbanter @MintPressNews Those bitchhes are IOF pigs. FYI, every single israheli pig is a legitimate target, not only in Palestine but all over the world

[Mohamed Fodil @public___void]

@kymu___ @Hacker0x01 Congratulations bro 🎉 👏

[Mohamed Fodil @public___void]

@ide9x Well done bro 👏

[Mohamed Fodil @public___void]

@zohar_tov20936 @zesqyb Said the dirty zio pig 🐖

[Mohamed Fodil @public___void]

@zack0x01_ Let's celebrate this bro

😄😃😀😊😐😉😍😁😅🤔😌🤓
    😘😚😨😙😜😒🥹😕😂😇☹️
       😝😠😳😂🧐😎🤣🤨🤪😝

                               📱
                          😆/
                          <))
                            ||

[Mohamed Fodil @public___void]

@YossiBenYakar Glad to know that bitchh was sent to hell. Fuck her, fuck you, and fuck every single izraheli bastard. Fuck you ALL, you dirty scumbags 🖕

[Mohamed Fodil @public___void]

@msftsecresponse Thank you! I appreciate the collaboration and transparency from both the MSRC and Product Engineering teams. Always glad to contribute in strengthening the ecosystem.

[Mohamed Fodil @public___void]

My report to @msftsecresponse was assessed as "By Design". However, as a direct result of my report, Engineering had to update the docs to clarify undocumented/confusing behavior. Sometimes the Soft-Patch isn’t code, it’s the documentation.

#MSRC
#BugBounty
#CyberSecurity