Hacker, Father and Founder
Madrid
Joined March 2017
- Tweets867
- Following584
- Followers2.4K
- Likes1.5K
One positive thing about #YesWeHack is that researcher seniority and past contributions are taken into account when allocating credits. Those who have supported the platform since its early days and consistently submitted valid reports are rewarded with a more than reasonable amount of credits. It's good to see long-term contributions being recognized. #bugbounty #bugbountytips
Bug bounty hunters are being treated like absolute shit by platforms these days... #hackerone #bugcrowd #bugbounty #bugbountytips
These days, you practically have to beg to get your bounty paid, even after your vulnerability report has already been validated. #bugbounty #bugbountytips
We got way too comfortable in bug bounty. Making thousands of dollars a week, sitting behind our PCs playing Fortnite, then spending 30 minutes on a couple of reports and calling it a job .
We were resting on our laurels.
Now AI has come along to shake things up, and honestly, it's about damn time. We needed that wake-up call. #BugBounty #BugBountyHunting #AI #CyberSecurity #EthicalHacking
One of the worst parts of bug bounty hunting is when you spend your time and expertise responsibly reporting a vulnerability, the company acknowledges it, takes the time to fix it, and even asks you to verify the fix only to close your report as “Out of Scope” afterward and basically tell you to fuck off. #bugbounty
Avoid bug bounty programs managed by Bugcrowd. Focus on programs where you can communicate directly with the company’s security team. It’s usually a much smoother experience and far better for your mental health. #bugbounty #bugbountytips
extremely easy to reproduce for beginners although 2FA is enabled on the web application, the mobile API does not enforce the OTP requirement, allowing the authentication flow to be bypassed. #bugbountytips #bugbounty
Secuaudit retweeted
this site mentioned 100+ bug bounty platforms
gokensai.com/blog/bugbountys…
The only thing an enterprise pentester is truly better at than a bug bounty hunter is Active Directory and Wi-Fi pentesting. 😭
Everything else? The bug bounty hunter is already speedrunning the internet. 💀
#bugbounty #infosec
Secuaudit retweeted
全球50个短信接码平台集合，前几个最常用，大家可以收藏一下
SMS-Activate：hero-sms.com
5Sim：5sim.net/zh
SMS-Man：sms-man.com
Tiger-SMS：tiger-sms.com
PingMe：pingme.tel
SMSSir：smssir.com
OnlineSim：onlinesim.io
GlobalSMS：globalsms.io
Receive an SMS：receive-a-sms.com
SMS Receive free：smsreceivefree.com
Online SMS：sms-online.co
Receive SMS online：smsreceiveonline.com
Get a free SMS number：getfreesmsnumber.com
Receive SMS：sms-receive.net
Receive SMS Online NET：receivesmsonline.net
Free SMS checks：freesmsverifications.com
7 SIM NET：7sim.net
HS3X：hs3x.com
Receive free SMS：receivefreesms.com
Receive free SMS NET：receivefreesms.net
Receive SMS Online IN：receivesmsonline.in
Receive SMS online：receive-sms-online.com
See SMS：smsver.com
Groovl：groovl.com
SMS.SELLAITE：sms.sellaite.com
Send SMS now：sendsmsnow.com
Receive SMS online EU：receivesmsonline.eu
Proovl：proovl.com/numbers
Anon SMS：anon-sms.com
Hide my numbers：hidemynumbers.com
Pinger：pinger.com
Free online phone：freeonlinephone.org
Capture SMS：catchsms.com
SMS Get：smsget.net
1S2U：1s2u.com
Receive SMS：getsms.org
Vritty：virtty.com
Text anywhere：textanywhere.net
Receive SMS online ME：receivesmsonline.me
Purchase virtual number：virtualnumberbuy.com
Free Receive SMS online：freereceivesmsonline.com
NDTAN SMS：sms.ndtan.net
SMS Listen：smslisten.com
Free virtual SMS number：freevirtualsmsnumber.com
SMS Tibo：smstibo.com
Receive SMS number：receivesmsnumber.com
Free SMS code：freesmscode.com
Online SMS numbers：smsnumbersonline.com
SMS reception：smsreceiving.com
Trash Mobile：es.mytrashmobile.com/numeros
Just found a Blind SQL Injection on a target protected by Imperva Incapsula WAF 🤯
I honestly didn’t expect SQLi to be possible there. The twist? Some parameters were Base64 + GZIP encoded, allowing the malicious input to slip through the WAF like butter. 🧈🔥
Beautiful finding. #BugBounty #bugbountytips #HackerOne
Secuaudit retweeted
L0p4Map combines nmap with real-time network topology graphs and automated device role detection.
github.com/HaxL0p4/L0p4Map
I just canceled my Claude subscription. It’s far too restrictive when it comes to cybersecurity questions—it often refuses to answer and categorically declines to help create a PoC for a legitimate vulnerability report. #bugbounty #claude
A local, offline-first arsenal for pentesting & bug bounty.
Payloads, a click-to-build command generator, GTFOBins, wordlists, an embedded CyberChef, reverse shells, a Burp reference, operational checklists and an engagement tracker — one fast, searchable, editable app that runs entirely on your machine. github.com/inflictx/Arsenal
Today, I helped my company secure a contract worth approximately $1.600,000 for the supply of synthetic turf for football pitches. As a token of appreciation, my director awarded me a $40 meal voucher. #Business #CompanyLife #CorporateLife #SalesSuccess #TeamSuccess #EmployeeRecognition #Leadership #Motivation #StartupLife #Entrepreneurship #CareerGrowth #Success
Secuaudit retweeted
Twilio charges $0.0079 per SMS.
a Russian dev open-sourced a tool that turns any old Android phone into a free SMS gateway.
it's called SMS Gateway. Install it on old phone, and it sends real SMS through your actual SIM card.
→ no Twilio. no per-message fees.
→ uses your existing SIM and carrier plan
→ full REST API + webhooks
→ 4.5k stars. Apache 2.0
→ run it locally or via free cloud relay.
100% Open Source.
