Quad kill by @VulsightSec: four valid reports and $40,000 earned!
Four more impressive payouts for a researcher who consistently earns big rewards on HackenProof.
Congratulations on a great result! 🏆
Next milestone: CPTS.
After earning eJPTv2 (94%), I'm now working through the Hack The Box Penetration Tester Job Role Path as I prepare for CPTS.
Three modules down, many more to go. Looking forward to sharing what I learn along the way.
#HackTheBox#CPTS#LearningInPublic
I have a fully prepared 12- and 24 week coaching bundle ready for any want-to-be bug bounty hunter, OSCP certifications and other cybersecurity engineers:
https://t.co/4O4TDACvQn
If you would rather have a single call to confirm your doubts you can grab a 90 minute call with me via https://t.co/L52za1UmBf
Are you ready to rock the world of ethical hacking?
A massive, well-organized database of real on-chain exploits with full technical breakdowns.
- 845+ reproduced incidents
- detailed analysis for every hack
- Foundry PoCs you can run immediately
- easy navigation by chain and vulnerability type
https://t.co/k01Oiso4x7
🚨$780.7M lost across 92 hacks in Q2 of 2026
Two incidents alone account for 75% of the money stolen, while most of the hacks are for smaller amounts.
Check out the full report here:
https://t.co/CmJ0pLja7e
‼️BREAKING: Telegram's core t[.]me domain has been placed on serverHold at the .me registry, a registry-level status that drops it from DNS worldwide and dead-ends every t[.]me link.
Domain records show the change happened today, with no public explanation yet from Telegram, the .me registry, or backend operator Identity Digital.
I see many people demotivated due to AI and feels like its been a while since I ranted. Probably a mild take but here is how I stay motivated. Nothing really new just how I use what people have said to keep my motivation up. The normal 2026 disclaimer, what is in this post isn't actually 100% in line with my opinion; yes I know there are holes in my logic but some rabbit holes are best "on read".
The biggest change for me is Linus Torvalds saying something along the lines of idk why people say AI makes things, people make thing. If communication was so global in the 70's I am sure people would have said similar things during the conversion from assembly to C. Humans are creating instructions for the compiler to make a program. So why didn't we think the compiler made it? Without internet I think it would take me around 2 minutes to write hello world in C (i know embarrassingly slow but man have i gotten lazy over the years). Do it in assembly? That's probably an hour. Which is a 30x difference of time. Okay now lets say we are in the year 2010 and have Python. I timed myself and it was 3 seconds. That's a 40x time difference from my C. Why did I think I made the program and not python made it?
Unfortunately, the only thing I can come up with is how much we communicate and how quick ideas/sentiments can form. I'm sure C/Python got hate when they first came out. Hate can be a really goo fuel -- Most engineers I know have their best work come out of "hate coding" something to prove someone wrong. Only to later realize they social engineered themself into doing an amazing thing. Could be wrong here, but I think Pythons Flask is a good example of this as it started as an April fools joke. Quite literally "the most engineer thing ever" to have a funny joke spiral out of control and grow beyond their wildest dreams... Kind of like that guy that was vibe coding games last year when AI was "bad", or heck even the W̷a̷r̷e̷l̷a̷y̷ C̷L̷A̷W̷D̷I̷S̷ ̷C̷l̷a̷w̷d̷B̷o̷t̷ ̷M̷o̷l̷t̷B̷o̷t̷ ̷ err OpenClaw person. Really with all those name changes I'm shocked they landed at OpenAI instead of MSFT.
Anyway, our hate on vibe coding created the sentiment that we aren't creating things anymore (AI makes things). I don't really view it that way, AI just makes me 20-30x faster; which is similar to the jumps between Assembly -> Compiler -> Scripting. Actually now that I think about it, I remember trying to learn C many times because scripting wasn't a "real language" and it would never run a web server or it wasn't capable of editing memory (silly times indeed). AI is enabling us to develop faster and expanding the number of people that can do things, which is not new; quite literally every time we come up with a new way to interact with machines -- it does the same thing.
So yes - Anyone can make a cool demo that looks real now but they are still going to spend hours getting AI to work out all the bugs and do it better. To me they are still making something, it is other people telling them they aren't -- Funnily enough, those people trying to convince others they aren't making things, is what in return demotivates themself because it poisons their thought process when it comes to this topic.
So uh. If you look for my permission to learn something? Vibe on and let the good times roll. Just make sure you do things safely, obey terms of service, and try not to end humanity.
Oh wait. That disclaimer. Using AI in a way that causes humans to spend a lot more time than they are used to is bad mmkay? Seeing all the low effort CTF Work, blog posts, bug bounty, etc does get annoying... oh wait I have a diclaimer to the disclaimer. If you use AI to eat up time of scammers, like tricking call center scammers into chatting with robots for hours, I thank you for your token donation to helping fight that plague.
🎭 Faker – Generate Realistic Fake Data (such as names, addresses, and phone numbers.) for Development & Testing
Faker is one of the most widely used open-source Ruby libraries for generating realistic fake data. It helps developers populate databases, create test fixtures, and build demos using fake names, addresses, emails, phone numbers, financial data, and much more.
✨ Key Features:
• 👤 Generate fake names, profiles, bios, and job titles
• 📧 Create realistic email addresses, domains, and passwords
• 🏠 Generate addresses, cities, countries, ZIP codes, and phone numbers
• 💳 Produce finance, banking, cryptocurrency, and transaction data
• 🌍 Supports 40+ locales for localized data generation
• 🎲 Deterministic random generation using configurable seeds
• 🔒 Unique value generation to avoid duplicate test data
• ⚡ Ideal for Rails applications, API testing, database seeding, and automated tests
🔗 https://t.co/b8HiklbE3k
#Ruby #RubyOnRails #Faker #Testing #DatabaseSeeding #OpenSource #SoftwareDevelopment #DeveloperTools
🚨 New bug bounty alert! 🚨
@0xIntuition is now live on Immunefi with a bug bounty of up to $100,000 USD for security researchers who can uncover vulnerabilities in their cross-chain, token-curated knowledge graph.
Start hunting: https://t.co/2jcFuMMiST