Pentester, Software Security Engineer, Trainer, Public Speaker
Joined November 2017
- Tweets27
- Following120
- Followers48
- Likes10
portswigger.net/web-security… this lab actually requires user interaction. the Note is really confusing
Cosmin Craciun retweeted
Ready for the event? Report submissions will start tomorrow at 9:00 GTM+1! hackerone.com/superbet. Claim your spot on the hackerone leaderboard! #bugbounty #hackerone
Cosmin Craciun retweeted
Hey hackers! 📣 Check out this incredible live hacking opportunity.
Hackers from all over can participate in this challenge with a few surprises for anyone onsite at the #DefCamp #HackingVillage November 23-24.🙌
See the details➡️ security.superbet.com/events….
With #DefCamp being just days away, Superbet and Happening have set all the details of the Live Hacking Event!
Check the thread for details!
Getting some Sepolia ETH at @quicknode's faucet for my 3881B5F8 wallet!
faucet.quicknode.com/ethereu…
Cosmin Craciun retweeted
That's a wrap for Round 1 of the #AmbassadorWorldCup! Congrats on an incredible round of teamwork. 🙌
Take a look at the stats! 📊
👨💻 239 hackers
🪲 262 valid bugs
💰170 bounties awarded
🤑 $515K in bounties paid (so far)
See the full recap here: bit.ly/40ifdia
Just got a reward for a high vulnerability submitted on @yeswehack -- DNS Zone Takeover. #YesWeRHackers
started working on a CLI tool for reNgine. Basic features at the moment. PRs accepted
github.com/cwavesoftware/ren…
I do have a problem with incorrect CVEs assigned. Just run into CVE-2021-45229, checked the Apache Airflow v2.2.3 source-code, input validation & html encoding is in place. No bypasses found until now. And this is just one of many examples I've found over time.
Cosmin Craciun retweeted
That's it for now, did I miss anything?
A full and expanded blog with MORE & ALL links for this thread can be found on my blog:
jhaddix.com/post/a-hackers-g…
✌🏻For more resources follow, retweet, & like!✌️
11/
Cosmin Craciun retweeted
🧵Mistakes I make in hacking or bug bounty 🧵
#bugbountytips and hacking tips I wish I always adhered to 🙃
cc @sr_b1mal
Cosmin Craciun retweeted
4/8/22 #bugbountydiary #bugbountytips
Everyone is sick in the house but I had some running scans I needed to check up on.
I found a SQL injection bug on a blog.
Here's how I did it, so you can learn...
👇
🚨Like, retweet, & follow for more hacker tips!🚨
1/x
Cosmin Craciun retweeted
Another long (hacker) story thread 🧵
= Stealing checks worth millions & pwning a bank =
Here’s how I did it, so you can learn.
I was once contracted to do a penetration test on a bank…
Like, retweet, and follow for more hacker stories!
(1/x)
Cosmin Craciun retweeted
Nice XMR mining rig at Romania's National Institute for Physics and Nuclear Engineering! I wonder if EU funds are covering both the electricity and the GPUs - hxxp://194.102.59.[81]:443/ (AS2614)
Check out my new blogpost about Windows patching & CVE-2018-0825 ixiacom.com/company/blog/get…