chivato

full-time bug bounty hunter

[chivato @SecGus]

Yay, I was awarded a $18,000 bounty on @Hacker0x01!

Don’t normally post these, but proud of this one ☝️

#TogetherWeHitHarder

[The Saurus @TheSaurus831]

I was told by grown adults that he would implement sharia law

[SubwayTakes with Kareem Rahma @SubwayTakes]

Politicians should wear who sponsors them all over their clothes!! Feat. Zack Polanski(📍London)

[Yassine Aboukir 🐐 @Yassineaboukir]

2nd MVH in the bag at @Hacker0x01 H1-21 Live Hacking Event in Lisbon 🇵🇹

[Polymarket @Polymarket]

BREAKING: Vibe-coding platform Lovable reportedly suffered a breach that exposed users’ AI chat histories, source code, & database credentials.

[JimmyTheGiant @jimthegiant]

Why is this stuff legal

[sw33tLie @sw33tLie]

Not what I usually post about, but I genuinely think macshot is the best screenshot tool on macOS now, and it's free.

Almost 200 stars already in 4 days.

Just shipped v3.3.0 with a bunch of improvements thanks to the feedback from this thread https://t.co/YkIOZ6nE7g

Try it!

[sw33tLie @sw33tLie]

I wanted a screenshot tool for macOS better than anything out there, so I built one with @claudeai

Native Swift. No Electron.

Annotate, record screen, scroll capture, auto-redact PII, beautify, upload to Drive & more — one flow.

Free & open source forever.

macshot 🔗👇

[Lupin @0xLupin]

WE DID IT ! WE RAISED $5.9M PRE-SEED 🥳🎉🎉

[Angel Montes @_N0xi0us_]

Today I discovered that scammers are poisoning Google AI Overviews to display malicious data.
While searching for an airline support phone number, the AI-generated result surfaced a scam number operated by fraudsters.

Don't be lazy and double check the results 🫡

[Paul Powlesland @paulpowlesland]

A new public fountain has appeared in central London, but look closer & you’ll see that it’s a actually a fountain of filth. The water is black, the human victims of the sewage crisis are vomitting streams of liquid, whilst surmounted by a smug water executive with a briefcase stuffed with cash.

The fountain commemorates one of the biggest environmental crimes in British history, where water companies stole tens of billions of pounds that was supposed to be spent on our sewage system, gave it to shareholders and executives and illegally poured billions of lites of sewage into our rivers, lakes and seas instead. The channel 4 docudrama about the sewage crisis, #dirtybusiness, starts at 9pm tonight. Watch it, get sad, get angry and then join the thousands of people around the country demanding an end to the sewage crisis.

[Nagli @galnagli]

25 minutes video on everything you need to know about reconnaissance is now live 🎥

Methodology, approach and nuances on how to find all publicly facing assets of a given company on the internet.

enjoy : )

https://t.co/Nw0ZaAwNHW

[Pomme @pxmme1337]

hi everyone

i made a new website: an anonymous forum to discuss bug bounty and cybersecurity stuff freely all together.

one (optional!) cool feature is to get your bug bounty earnings verified by the website

check it out: https://t.co/qHZy0HNjxS

[The Spectator Index @spectatorindex]

BREAKING: Trump administration is preparing to enlist private businesses and cybersecurity firms to conduct offensive cyberattacks against foreign adversaries, according to Bloomberg report.

[Alexandrio @alexbindrei]

I won the Most Valuable Hacker award at H1 3120!

5 months ago I was invited to my first LHE where I achieved a 2nd place. It was an amazing experience that made me want to work harder to compete against myself. And after spending 15h a day in front of my laptop here we are :)

Big thangs to @Hacker0x01 and @salesforce for all the work during this event. Also to all the amazing hackers I’ve met during this days.

Last but not least… 🧵

[Ben @deobfuscately]

@HackingLZ

[chivato @SecGus]

@lifelessAI @yunginnanet I’m so sorry for your loss, may he rest in peace, from the few interactions we had it was clear he was a kind soul🙏🏼❤️

[vas @vasuman]

Vibe coding is crazy man.

Met a 12yr old making $600k a month with his vibe-coded SaaS he started 4 months ago.

I asked how he built so fast. He said he just made a design-doc in GPT and fed it to Cursor with Sonnet-4 and it worked first try.

His goal is to get to $2M a month this year.

Running everything under his Moms Stripe account.

His firebase got hacked and sensitive user information got leaked. Got arrested and being tried as an adult but the SaaS is still printing though.

None of this happened btw.