YoungVanda

Bug Hunter & Web App Pentester | 2024 Intigriti Champion | Intigriti 2024 Q1 2nd · Q2 3rd Leaderboard | Intigriti Top 50 Hackers

[YoungVanda @young_vanda_]

Rank 1 in the Last 90 Days & Rank 35 in All Time, just fewer than 90 days. 👾👾👾
Bro @intigriti, I'm being honest with you. I'm a bit savage, a bit uncivilized. 🍖🍖🍖
They send me nudes, but I f**k targets.

#Intigriti
#HackWithIntigriti
#BugBounty

[YoungVanda @young_vanda_]

@ott3rly 🔥🔥🔥

[YoungVanda @young_vanda_]

Also, check out the images and take a look at the timeline of when I submitted my reports. I found it pretty interesting :)

[YoungVanda @young_vanda_]

Keep an eye on program status. When a program gets flooded with reports and starts suspending, after just one or two reports, it's often better to monitor the status automatically and submit your report ASAP.

#bugbounty #bugbountytips #cybersecurity #grateful

[YoungVanda @young_vanda_]

@Hamzaonchain @intigriti 🙏🏼❤️ 💫

[YoungVanda @young_vanda_]

Been meaning to post this for a while (procrastination hit hard 😅).

Massive thanks to @intigriti for recognizing my 2024 performance!

Honored & grateful to be part of this amazing community ⚡⚡⚡

#HackWithIntigriti #BugBounty #InfoSec #Champ #Cybersecurity #Grateful

[YoungVanda @young_vanda_]

@MiniMjStar @intigriti 🙏🏼❤️ 💫

[YoungVanda @young_vanda_]

@intigriti 🙏🏼❤️💫

[YoungVanda @young_vanda_]

@BankyT3ch @intigriti 🙏🏼❤️💫

[YoungVanda @young_vanda_]

@YShahinzadeh 🔥🔥🔥

[YoungVanda @young_vanda_]

@0xabfe 😂😂😂

[YoungVanda @young_vanda_]

@omidxrz 🔥🔥🔥

[YoungVanda @young_vanda_]

@hacck3y I usually hunt solo, but I appreciate the offer. Maybe another time.

[YoungVanda @young_vanda_]

4/5 Reported Vulnerabilities got Accepted! 🔥🔥🔥

Recently, I found & reported many CSRFs. First thing I do is checking auth cookies' attributes.

1) Reported 2 more Open Redirects while analyzing the authentication flows.

#bugbounty #cybersecurity #grateful

[YoungVanda @young_vanda_]

Bruh… should’ve reported those last two sooner.
When will I ever learn?!! 😂😂😂

At least the view’s nice though. 📿📿📿

#bugbounty

[YoungVanda @young_vanda_]

@DaddyGiriga Yes 👍🏼

[YoungVanda @young_vanda_]

@MiniMjStar Did they mention any reason? I think it should have been accepted as High.

[YoungVanda @young_vanda_]

@DaddyGiriga After registering an account and logging in, I try to load an endpoint with my data and then identify the authentication cookies. I check their attributes, such as the HttpOnly and SameSite flags, and take notes.

[YoungVanda @young_vanda_]

@Threat_Shield Yeah, that can happen. Before reporting low-hanging or low-impact bugs, you should always check the OOS policy. If it’s not mentioned there, technically it should be accepted.

[YoungVanda @young_vanda_]

@z0x0b Bro, leaving bugs for the future is for action movies 😂
I even got a bonus on top of the bounty for the open redirect. So nah — if I find more, I’m reporting more 😂

I collaborated with some great hackers, but the WAF doesn’t even let you get started.

[YoungVanda @young_vanda_]

@ironCardSec Haha thanks! That’s nice of you!

[YoungVanda @young_vanda_]

@MiniMjStar 😅😂 Thanks mate. It depends — for example, in this case the CSRFs were leading to One-Click Account Deletion and One-Click ATO via Email Change, so definitely High.

[YoungVanda @young_vanda_]

@Amirmlkm Bro 🔥🔥🔥