Yoeri Vegt

Student | Attempting to Bug Bounty Hunt | Dutch Hackerone Ambassador | Proud Dutchy 🇳🇱
Dream big ⭐

[Patrik Grobshäuser @ITSecurityguard]

Stop blaming AI slop for what bug bounty platforms did to themselves.

👇 wrote down some thoughts about the state of triage

https://t.co/0dq1I61YGd

[Yoeri Vegt @YoeriVegt]

@disclosedh1 @NOBBD Would it be an option to remove the URL's from the post? Format the image nicely, give the severity, bounty paid state, and perhaps you can still make it an interesting post! 😅

[HackerOne @Hacker0x01]

Two communities. One goal. 🔐

Germany 🇩🇪 and the Netherlands 🇳🇱 are teaming up for a community hacking meetup!

Featuring yoerivegt (NL) and Lauritz (DE), our previous Ambassador of the Quarter.

This is what progress looks like: researchers leading from the front and pushing security forward together.

👉 Learn more and check out how to join the event: https://t.co/63QANLLRXl

[Yoeri Vegt @YoeriVegt]

View it for yourself at https://t.co/BpkTstFhhS

[Yoeri Vegt @YoeriVegt]

I visualized HackerOne's report IDs against their submission dates to see how report volume has changed over time.The growth in the last few months is insane. AI bubble, or not?

I really hope I screwed up the pulling or parsing of the data somehow.

[Pomme @pxmme1337]

3.1 "(ii) HackerOne may use Confidential Information to develop and/or improve its Services (for example, to identify trends, and to train AI models)"

https://t.co/yQxh6p1bwZ

We're all getting fucked aren't we

The more we report the more we're fucking our future selves

We can't stop cause we need money

God damn gg @Hacker0x01 you win I guess

Time to buy a farm and some cattle

[Pomme @pxmme1337]

hi everyone

i made a new website: an anonymous forum to discuss bug bounty and cybersecurity stuff freely all together.

one (optional!) cool feature is to get your bug bounty earnings verified by the website

check it out: https://t.co/qHZy0HNjxS

[Yoeri Vegt @YoeriVegt]

@vxunderground @nikhil_mitt @struppigel CRTE would be amazing! ❤️

[HackerOne @Hacker0x01]

What. A. Day. ⚡

We kicked off #H13120 Community Day with @Salesforce—where security researchers shared insights on AI, protocol security, and social engineering, and wrapped up with a welcome reception to learn and connect.

#HackForGood #TogetherWeHitHarder #AI

📸:

[HackerOne @Hacker0x01]

🧠 We’re heading to Amsterdam for H1‑3120 | Community Day — and you’re invited.

Join us for a full day of learning, security testing, and connecting with the local security community.

Here’s what to expect:
✅ Expert-led sessions on AI, protocol security testing & social engineering
✅ Meet fellow security researchers, customers & the HackerOne team
✅ Learn how offensive security drives real-world impact

📍 Nov 6 | Hyatt Regency Amsterdam
🎟️ Free to attend — RSVP now 👉 https://t.co/Z5nTRVTIC3

Let’s hack, learn & build the future of security — together.

#H1Community #BugBounty #Cybersecurity #AIsecurity #H1Amsterdam

[Yoeri Vegt @YoeriVegt]

@if0rg0tit @Hacker0x01 @Mateus_Riad @yougina @5CA_Global Thank you so much for joining! I really enjoyed it!

[Yoeri Vegt @YoeriVegt]

Yesterday we wrapped up the Dutch @Hacker0x01 Bug Bounty Challenge with a great in-person meetup in Utrecht.

We had insightful show&tells from @Mateus_Riad and @yougina , plenty of hacking, and good conversations. Many thanks to @5CA_Global for hosting us. 🫶

[Yoeri Vegt @YoeriVegt]

@Hacker0x01 @Mateus_Riad @yougina @5CA_Global Want to learn more about Hackerone community events, participate in them, or even help the community by hosting one?

Learn more at https://t.co/vV36rOKzNM

[Blaklis @Blaklis_]

Release is out :

https://t.co/RwTHtEIAjs

This patches a pre-auth RCE and a customer ATO that I found a few days ago on Adobe Commerce and Magento.

If you're using it, patch asap! This wouldn't be surprising to see TA using them in a few hours or days, at most.

#magento

[Yoeri Vegt @YoeriVegt]

I wrote a new short blog about an Ada Support misconfig. An allowlist still trusted a domain no one owned, so I bought it, embedded the real on my domainchat, and after login I could read OAuth tokens and the chat transcript.

https://t.co/1016blfvE6

[Yoeri Vegt @YoeriVegt]

@Bugcrowd This payload wouldn't even work, it's trying to execute javascript from the src attribute?

[solst/ICE of Astarte @IceSolst]

Oh no they got my http intercepting proxy too????

[Yoeri Vegt @YoeriVegt]

De NL @Hacker0x01 Community organiseert een 10-daagse Bug Bounty Challenge (17–27 sep)!

Remote hacken + afsluitende fysieke meetup op 27 sep bij 5CA in Utrecht incl. borrel 🍻

🔗 Meer info: https://t.co/v9kIUmq7BJ
👾 Discord: https://t.co/JrzpNl75bb
🧑‍💻 Max 50 fysieke plekken!

[Yoeri Vegt @YoeriVegt]

@jobertabma @NahamSec @stokfredrik @Hacker0x01 That's so nice of you, thanks! I'll give it a good try tomorrow!

[Yoeri Vegt @YoeriVegt]

@jobertabma @NahamSec @stokfredrik @Hacker0x01 Awesome, thanks! I'm quite excited to see how HAI can help hackers!