Yoshizawa

Bug Bounty / Security / OSCP

[Yoshizawa @security_index]

Googleのバグバウンティで報奨金 $31,337 ゲット✌️
Thank you @GoogleVRP !

[Yoshizawa @security_index]

@tanukichi_cs @GoogleVRP ありがとうございます！😊

[Yoshizawa @security_index]

Just got $1,337 from @GoogleVRP.
Keeping the momentum going.
#GoogleVRP #BugBounty

[Yoshizawa @security_index]

@Bicktivism @GoogleVRP It was S1.

[Yoshizawa @security_index]

@Codinplus31 @GoogleVRP Thanks! It really is motivating. Appreciate the encouragement.

[Yoshizawa @security_index]

@lcz53860891 @msftsecresponse Thanks!

[Yoshizawa @security_index]

Received $7,500 from the Azure Bounty Program! 🎉

Really happy to see the hard work pay off.
Thank you @msftsecresponse

#BugBounty #MSRC

[Yoshizawa @security_index]

@chwrld24 @GoogleVRP I'm sorry, but I'm unable to disclose detailed vulnerability information due to program rules and responsible disclosure practices. Thank you for your understanding.

[Yoshizawa @security_index]

Googleのバグバウンティで報奨金 $31,337 ゲット✌️
Thank you @GoogleVRP !

[Yoshizawa @security_index]

@ZhangYuGeV @msftsecresponse I recommend focusing on one target that interests you and learning it deeply with AI!

[Yoshizawa @security_index]

@incarnate_xyz @msftsecresponse Yeah, I worked with AI to investigate and find it.

[Yoshizawa @security_index]

@msftsecresponse Thanks a lot! Glad it was useful. Appreciate the kind words from the team.

[Yoshizawa @security_index]

@soul0x0 @msftsecresponse Thanks!

[Yoshizawa @security_index]

@JeremiahAl64612 @msftsecresponse Thank you!

[Yoshizawa @security_index]

As of Oct 1, 2026, Google OSS VRP no longer accepts product vulnerabilities.
Some Cloud repos may still go through Cloud VRP.
Use other VRPs or Patch Rewards.
Pre-Oct 1 reports are unaffected. Update planned for Q1 2027.
#bugbounty #GoogleVRP @GoogleVRP

https://t.co/eUitOyzEcL

[Yoshizawa @security_index]

@vasiign @DilawerSec @GoogleVRP I think it was P2, S2.

[Yoshizawa @security_index]

Google VRPから、別件のSSRFで報奨金 $2,500 をいただきました🎉
先日とは別の脆弱性です。
今後も地道にやっていきます！ありがとう！ @GoogleVRP

#bugbounty #GoogleVRP

[Yoshizawa @security_index]

@WaseemSharf8rk @GoogleVRP I think the most important thing is to find your own area of expertise and then persistently hunt on targets where you can actually leverage that specialty.
😊

[Yoshizawa @security_index]

@NANO_302 @GoogleVRP In that case, I think it falls under Tier 3!

[Yoshizawa @security_index]

@Aditya_sec_info @GoogleVRP It was found on Google’s own product.

[Yoshizawa @security_index]

@ctfstudent That’s really sad. It’s truly hard when something is taken away without any chance to verify. 😔

[Yoshizawa @security_index]

Daybreak Blue 👏👏

[Yoshizawa @security_index]

@NANO_302 @GoogleVRP Google doesn’t tell me which tier the report was classified as, so I don’t actually know either. Sorry about that.