I like bug bounty programs and breaking things that other people have built. I love kudos.
Joined February 2015
- Tweets1.5K
- Following197
- Followers10.6K
- Likes1.7K
mongo retweeted
@mongobug is the greatest
mongo retweeted
Let me be clear, Jonathan Scott @jonathandata1
is NOT a mobile security/malware/spyware researcher.
Jonathan is neither a skilled bug bounty hunter, nor a mobile security/malware/spyware researcher
Jonathan is a professional in fake news marketing.
This Post is from a suspended account. Learn more
mongo retweeted
I’m involved in a new independent academic study of #bugbounty programs and platforms, focusing on the challenges that hackers face: vulnstudy.cs.umd.edu/betterb… Please help us make #bugbounty better by participating! (focus group participants will receive a $20 gift card) please RT! – at Santa Clara, CA
mongo retweeted
In the name of pain, suffering, development, and fresh content, I'm going to be live streaming a new series. I aim to start next week.
I blogged (for the first time in ages) to share the details. Pleas have a read, and join me! buffered.io/posts/new-livest…
mongo retweeted
OK folks, here it is!
POLICE QUEST
A 64-bit Linux exploitation CTF challenge. Please have a play and let me know how you go. Enjoy!
buffered.io/posts/police-que…
Going to be dropping a CTF challenge I built ages ago. It appeared in the @kiwicon CTF but a far as I know it hasn't been popped yet.
Blog/release coming in the next day or so.
mongo retweeted
Last week I donated 90++ T-Shirts, Hoodies, Bags, Scarfs from 6 years of doing Bug Bounties to the Caritas and DRK.
If you run a Responsible Disclosure / VDP Program, please consider to add an option to donate the costs of printing it and sending it across the globe.
Thank you
mongo retweeted
Here's how I got a RCE on a Facebook server : blog.scrt.ch/2018/08/24/remo… !
mongo retweeted
[News] Today we announced Bugcrowd University to educate and empower the Crowd with the latest skills and methodologies. bgcd.co/2Okvv5r #ItTakesACrowd #OuthackThemAll
mongo retweeted
We've added an explicit Safe Harbor provision to our Bug Bounty program! Many thanks to @AmitElazari for the inspiration and a shoutout to @dropbox @scarybeasts blog.mozilla.org/security/20…
mongo retweeted
I've been silent on the recent #bugbounty convos around farming, particularly as @mongobug has shone a light on the problematic areas growing in the community. It was partly to figure out where I stand but also to figure out if I was part of the problem. 1/n
mongo retweeted
New blog out today by @Medearisss. Learn more about how we see #bugbounty market dynamics at Synack and how platforms should be upholding high standards of efficiency and effectiveness...to the benefit of the researchers and the customers.
syn.ac/2JQ6E73
mongo retweeted
New blogpost by @yrp604 "CVE-2017-2446 or JSC::JSGlobalObject::isHavingABadTime" doar-e.github.io/blog/2018/0…
mongo retweeted
What would be really great was if @Hacker0x01 and @Bugcrowd would release the full (anonymized) data regarding programs and submissions, and let third parties audit the raw data. I realize this probably won't happen though.
mongo retweeted
.@Bugcrowd is pleased to announce the June 2018 Hall of Fame winners, also featuring a researcher spotlight on dr0v3r: bgcd.co/2uhbnJK #OuthackThemAll
mongo retweeted
Drupalgeddon2 is back. Exploit is trivial, but a user must be authenticated with little privileges to exploit it. Here is a sample : pastebin.com/pRM8nmwj #Drupal #Drupalgeddon
mongo retweeted
Every time infosec piles on someone that doesn’t understand something we do, the general community loses a little faith, respect, and trust in us. It’s very hard to win that back. No one wants to listen to advice from a bully. xitter.cf/haroonmeer/status/9825…
