r00tdaddy

[r00tdaddy @rootd4ddy]

@Hacker0x01 submissions seem broken right now, can you fix please?

[r00tdaddy @rootd4ddy]

@I_Am_Jakoby Look at the image @I_Am_Jakoby, this wasn’t a leak.. pops doesn’t know how autofill works 😆. There’s at best, a handful of numbers left in that scroll bar…

[r00tdaddy @rootd4ddy]

@thedawgyg @Azx7af Private stream, then make everyone a collaborator.

[r00tdaddy @rootd4ddy]

@CaverhillTravis @The_Cyber_News So patching means no more SQLI/XSS?!

[r00tdaddy @rootd4ddy]

@vxunderground @cyberwarfarelab

[r00tdaddy @rootd4ddy]

@GreatbabyGb @Dghost_Ninja Client id is not secret. What can you do with it?

[r00tdaddy @rootd4ddy]

@techspence Only deny logon locally for workstations? What about the various other logon methods that cache credentials.

[r00tdaddy @rootd4ddy]

@bytehx343 Nice work!

[r00tdaddy @rootd4ddy]

@CryptoChronicX Yes pls

[r00tdaddy @rootd4ddy]

@rez0__ This has been making its rounds for at least 3 months now.

[r00tdaddy @rootd4ddy]

@0xHun73r No impact

[r00tdaddy @rootd4ddy]

@techspence Your missing a whole lot here @techspence

Deny access to this computer from the network
Deny log on as a batch job
Deny log on as a service

What about all the other T0 builtin groups? EA,Account Operators,administrators, dnsadmins,dcom, cert publishers etc.

[r00tdaddy @rootd4ddy]

@InsiderPhD Can someone say infostealer?

[r00tdaddy @rootd4ddy]

@wadgamaraldeen I’m saying you didn’t try hard enough. Is there another gadget to chain it with at this moment? Maybe, maybe not. That’s what’s notes and JavaScript monitoring is for. Come back to it later.

Reporting an open redirect on any bbp today will likely yield similar results.

[r00tdaddy @rootd4ddy]

@wadgamaraldeen But it did have zero impact to the company. You’re presenting a hypothetical. The quicker you understand that the quicker you will find real bugs.

You should have kept that open redirect in your notes. Combined with an xss on another page would be an ato.

[r00tdaddy @rootd4ddy]

@atomiczsec @PerplexityComet Can I get an invite pls @atomiczsec

[r00tdaddy @rootd4ddy]

@Bugcrowd and @FISGlobal are scamming together on bugcrowd. That is all :)

#BugBounty

[r00tdaddy @rootd4ddy]

@7h3h4ckv157 @PinkDraconian Or they won’t and bugcrowd mediation will side with their paying customers…

[r00tdaddy @rootd4ddy]

@NorthstarCharts @RemindMe_OfThis in 30 days