Marlon Fabiano (@astrounder) header
Marlon Fabiano (@astrounder) profile picture

Hacking e Bugbounty

Curitiba, Brasil
Joined February 2020
Photo by Marlon Fabiano (@astrounder)Photo by Marlon Fabiano (@astrounder)Photo by Marlon Fabiano (@astrounder)Photo by Marlon Fabiano (@astrounder)Photo by Marlon Fabiano (@astrounder)Photo by Marlon Fabiano (@astrounder)Photo by Marlon Fabiano (@astrounder)Photo by Marlon Fabiano (@astrounder)Photo by Marlon Fabiano (@astrounder)
Marlon Fabiano retweeted
#ESETResearch has discovered the first known AI-powered ransomware, which we named #PromptLock. The PromptLock malware uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts on the fly, which it then executes 1/6
57
640
156
2,606
410,711
Marlon Fabiano retweeted
In September, some of the best security researchers in the world joined the @amazon and @AWS teams in Edinburgh, Scotland, for a live-hacking event fit for a Scottish king. 👑 This collaboration with the security researcher community is vital to Amazon and AWS' commitment to comprehensive security for their users and customers. See the highlights and which security researchers were able to climb to the top of the leaderboard.🥇
4
24
1
181
30,087
Marlon Fabiano retweeted
The list of teams moving on to the Sweet Sixteen round of the #AmbassadorWorldCup is here! 🙌 These 16 teams from around the world will jump in on Tuesday, October 22, to kick off a ‘Sweet’ round of bug hunting for our AWC partners. 💪 Who will have what it takes to make it to the Elite Eight? Cheer them on! 📣 bit.ly/3SwGbkV
5
18
16
103
48,685
Marlon Fabiano retweeted
We're live in the beautiful city of Edinburgh for #H10131! For this live event, the world's top researchers will work side by side with the Amazon/AWS team to hunt for potential bugs. This partnership is one important piece of Amazon and AWS's comprehensive approach to security. Who will take the MVH title? 🧐
2
7
104
9,543
⚡ Source Code and data exfiltration via Github Copilot 👨🏻‍💻 @astrounder ➟ GitHub 🟨 Low 💰 $1,000 🔗 hackerone.com/reports/238309… #bugbounty #bugbountytips #cybersecurity #infosec
1
3
41
2,922
GitHub disclosed a bug submitted by @astrounder: hackerone.com/reports/238309… - Bounty: $1,000 #hackerone #bugbounty
9
4
47
4,125
Marlon Fabiano retweeted
1
2
378
Marlon Fabiano retweeted
📡Hacker encontra duas vulnerabilidades zero-day no GitHub Copilot "Os dois zero-days permitiam a exfiltração do código do desenvolvedor", @astrounder Acompanhe: tecmundo.com.br/seguranca/28…
1
7
39
2,380
Marlon Fabiano retweeted
🇧🇷🇧🇷🇧🇷🇧🇷
Today marks the official start of the 2024 #AmbassadorWorldCup! 40 teams and over 700 hackers from around the world are taking on the challenge to help our AWC partners, @SuperbetRomania, @amazon, and @Mercadolibre, strengthen their security. 🙌 Who will claim victory?
2
6
1,012
Marlon Fabiano retweeted
tramoia.sh ??.??.2024
13
115
10
297
41,308
Marlon Fabiano retweeted
🚨 @Hacker0x01 Bug Bounty Village na @h2hconference!!!! A agenda da nossa village de bug bounty na H2HC já está disponível. Vamos ter talks absurdas com bastante história e tricks. Para participar dos sorteios que irão ocorrer, se cadastra aqui: h1.community/events/details/…
2
23
4
72
15,492
Mozilla Core Services disclosed a bug submitted by @astrounder: hackerone.com/reports/205339… #hackerone #bugbounty
6
15
3,897
Marlon Fabiano retweeted
We've passed to next phase on @Hacker0x01 Ambassador Cup. Great job, team o/
1
4
1
23
2,699
Marlon Fabiano retweeted
XSS 2 RCE on @flipper_net Got RCE through an XSS on lab.flipper.net , here's the writeup thread github.com/caioluders/pocs/b… (PoC Video, printing 1337 on the flipper screen)
8
72
4
342
Marlon Fabiano retweeted
Another vision for SSRF by @phor3nsic_br - gccybermonks.com/posts/ssrfv… #bugbounty #bugbountytips #bugbountytip
1
19
2
36
CVE-2021-40822 Full SSRF Geoserver and LAB for you to hack! gccybermonks.com/posts/cve-2… @gccybermonks
5
14
Marlon Fabiano retweeted
Full SSRF On GeoServer CVE-2021-40822 #0day #bugbountytips
1
10
1
20
Marlon Fabiano retweeted
Falha grave na Microsoft Atacante poderia burlar o código 2FA de usuários e enviar o OTP para outro número conseguindo acesso. Vuln também abria porta para phishing e vishing. Tudo isso era possível usando a própria infra da Microsoft
2
13
1
75