Joined July 2010
Facebook vulnerability that allowed attacker to remove/overwrite the Cover Photo of any Facebook Events roy-castillo.blogspot.com/20… #bugbounty
1
11
18
Roy Castillo retweeted
JULIAN ASSANGE IS FREE Julian Assange is free. He left Belmarsh maximum security prison on the morning of 24 June, after having spent 1901 days there. He was granted bail by the High Court in London and was released at Stansted airport during the afternoon, where he boarded a plane and departed the UK. This is the result of a global campaign that spanned grass-roots organisers, press freedom campaigners, legislators and leaders from across the political spectrum, all the way to the United Nations. This created the space for a long period of negotiations with the US Department of Justice, leading to a deal that has not yet been formally finalised. We will provide more information as soon as possible. After more than five years in a 2x3 metre cell, isolated 23 hours a day, he will soon reunite with his wife Stella Assange, and their children, who have only known their father from behind bars. WikiLeaks published groundbreaking stories of government corruption and human rights abuses, holding the powerful accountable for their actions. As editor-in-chief, Julian paid severely for these principles, and for the people's right to know. As he returns to Australia, we thank all who stood by us, fought for us, and remained utterly committed in the fight for his freedom. Julian's freedom is our freedom. [More details to follow]
6,919
82,522
12,277
272,225
20,138,526
Roy Castillo retweeted
🔥 New Post: Announcing InAppBrowser - see what JavaScript commands get injected through an in-app browser 👀 TikTok, when opening any website in their app, injects tracking code that can monitor all keystrokes, including passwords, and all taps. krausefx.com/blog/announcing…
306
11,725
2,700
26,798
I really can't understand why there is so much ego in infosec. Relax, life is short to be pissed off all the time. If you think you are too special just consider there are people out there researching on nuclear physics, applied mathematics, beating diseases without bragging. – at Wandsworth, London
11
46
5
234
Long thread but serious talk. Seeing a massive problem in the security industry today. We have brand new candidates lacking "hands on" experience coming into the workforce and finding it extremely difficult to find a job. 1/10
160
398
104
1,854
For a while now, we've been working on templates and submission guidance for @Bugcrowd researchers. This is now open source, at github.com/bugcrowd/template… Learn more: ✍️bugcrowd.com/blog/3-key-comp… 📽️youtu.be/-8Mtu8nEhnU
7
85
6
281
Roy Castillo retweeted
Here's a really cool mind map for pentesting Active Directory xmind.net/m/5dypm8/
35
576
11
1,910
This is your yearly reminder that ALL Udemy Bug Bounty courses are a waste of money. The content you need is out there, completely for free. Don't believe me? Here is a list of the best Bug Bounty Ressources out there 🧵👇 #bugbountytips #BugBounty
100
498
16
1,604
Hacking is not complex, it just has a lot of prerequisite knowledge. There's nothing hard about learning the knowledge, there's just a lot of it, so it takes time.
9
38
208
Roy Castillo retweeted
"Your adversary does not wait for you to finish patching." - The Art of Cyber War
12
239
16
868
We (@Bugcrowd) have a Junior Security Engineer role available if anyone is keen. It’s an opening on my team which means you get to work with me closely, aiding in improving Bugcrowd’s security! It’s also gives you a chance to work with insane talent! JD: grnh.se/fdcc5c2a1us
23
84
7
307
Roy Castillo retweeted
Can you read this?! Then we need you at the #oktabash2021! Sign up below 🏃🏽‍♀️ 🏃🏽 bgcd.co/3gusT60 #bugbounty #bugbountytips #hackers
4
5
25
Roy Castillo retweeted
🧡 Researcher appreciation post! 🧡 We're proud of you, and all of the hard work you do! Make sure to take a well deserved break when you need to 😌
5
5
141
Roy Castillo retweeted
I found some design and implementation flaws in Wi-Fi again. All Wi-Fi devices are affected. It was a long ~9 months embargo, over this time a lot of info has been collected and that info now available at fragattacks.com
32
1,110
139
2,619
Roy Castillo retweeted
Check out our blog post on Context Aware Content Discovery blog.assetnote.io/2021/04/05… - we drop a tool (Kiterunner - github.com/assetnote/kiterun…) and some datasets. Hope you can find more endpoints through our work!
13
221
7
536
I know there are lots of people waiting for the recent Microsoft Exchange pre-auth RCE on our side. This is a short advisory and detailed timeline. proxylogon.com/ #proxylogon
9
425
24
941
SQL Injection theory video is up! In this video we talk about: 1 - What is a SQLi vulnerability? 2 - How to find SQLi vulnerabilities? 3 - How to exploit SQLi vulnerabilities? 4 - How to prevent SQLi vulnerabilities? youtube.com/watch?v=1nJgupaU…
25
330
21
1,061
Roy Castillo retweeted
Lots of (most?) hackers don't manage/extend their @Burp_Suite configs and BApp's as well as they should be. Let's discuss! 👉youtu.be/qrM5ZigH-PI #bugcrowdtipjar #bugbountytips #hacking
5
88
4
299
Roy Castillo retweeted
Recently @Rhynorater sparked a discussion about exploiting blind SSRFs. At @assetnote, we've collected some information together and have created a Glossary of Blind SSRF Chains which can be found here: blog.assetnote.io/2021/01/13… - we hope people can use it as a reference!
14
341
18
746
Roy Castillo retweeted
Hi! After many requests on my last video, I have made a video about 5 P2 bugs that I noticed are super common from my experience as a triager. Click the link below to know what those bugs are and get some insights from a triager’s POV. 😇 #bugbounty youtu.be/BtcjTyPWzaA
16
35
4
342
Roy Castillo retweeted
2020 was rough year, in so many unexpected ways, but the infosec community came together, and we wanted to share a message with our fellow platforms: youtu.be/KuOfSsp1VrI Thanks @codingo_ for helping us roll into the new year!
5
20
7
99