Found a cool bug at Meta.
From misconfigured Grafana instance to R/W access on 507 private Meta repositories.
Wrote up the full chain here:
sectricity.com/blog/misconfi…
$157k bounty awarded by @metabugbounty
Preben retweeted
Belgium launches Europe’s first nationwide safe harbor for ethical hackers
portswigger.net/daily-swig/b…
Preben retweeted
Tien jaar geleden werd ik aangeklaagd voor het melden van een kwetsbaarheid in een Belgisch bedrijf.
Vanaf morgen is België het eerste land ter wereld waar testen zonder toestemming niet langer strafbaar is. Mooi moment om mijn 'strafblad' in te kaderen!
Meer nieuws morgen!
Preben retweeted
We are gearing up for our 2nd international live hacking event! We are super excited to have talented people like @TomNomNom join us! #HackWithIntigriti #1337UP1119
This quoted post is unavailable.
Preben retweeted
You're looking at the first ever image of a black hole. It was captured by the #NSFFunded @ehtelescope project. #ehtblackhole #RealBlackHole nsf.gov/news/special_reports…
Preben retweeted
The video is missing a good techno track, but other than that: great PoC and bounty! youtu.be/1oFpTNsPu_w
Preben retweeted
There has been some really awesome .NET research done recently, this whitepaper is a great reference when you come across .NET deserialization bugs/when code auditing. Machines running .NET have just become so much easier to own: nccgroup.trust/au/our-resear…
Preben retweeted
Last week we organized our first Howest Student CTF. Now that we've all got the chance to catch up on the missed sleep it is time for a recap of the event!
insecurity.be/blog/2019/03/2…
Preben retweeted
@prebenve @TimothyVanH and @DevTriesInfoSec giving a talk @OPOSEC in Oporto: "Supply Chain Attacks for Software Dependencies"
Preben retweeted
GitHub Desktop RCE (OSX) Bug Bounty writeup:
pwning.re/2018/12/04/github-…
Thank you @GitHubSecurity for the bounty!
Preben retweeted
Those moments where you're working with loops, lengths and indexes and you know how to do the +1 or -1, 0 based or 1 based math shizzle, but you're too lazy to perform the mental effort so you end op typing whatever and seeing if it works out or not.
Always a pleasure to bug bounty hunt with my friend who's a dev. His insights really help @DevTriesInfoSec
Preben retweeted
Hacker Panel at @Shopify in Montréal hosted by @yaworsk with @0xACB @TheBoredEng and @itscachemoney! Sharing bugs and showcasing hacking and security to the entire company front and center! #h1514 #TogetherWeHitHarder
Preben retweeted
join our first #owasp meeting in West-Vlaanderen!
Upcoming @owasp_be chapter meeting in Bruges on October 23 with @pdcremer and Nathan Desmet on Distributing Software Security Knowledge, and @PhilippeDeRyck on API Security Pitfalls ... RSVP at owasp-belgium-2018-10-23.eve…
Preben retweeted
I'll be in Barcelona for a week with @0xteknogeek and @prebenve starting tomorrow if anyone wants to grab a few drinks :)