Manoel Abreu (@reefbr) profile picture

CTF Player. Bug Bounty as a hobby.

Maceió - AL
Joined October 2008
Photo by Manoel Abreu (@reefbr)Photo by Manoel Abreu (@reefbr)Photo by Manoel Abreu (@reefbr)Photo by Manoel Abreu (@reefbr)Photo by Manoel Abreu (@reefbr)Photo by Manoel Abreu (@reefbr)Photo by Manoel Abreu (@reefbr)Photo by Manoel Abreu (@reefbr)Photo by Manoel Abreu (@reefbr)Photo by Manoel Abreu (@reefbr)
Giveaway brought to you by @hackinghub_io: 5x Blind XSS vouchers 5x Web Exploitation vouchers How to enter: 1⃣ Follow @BugBountyDEFCON + subscribe to our YouTube channel 2⃣Follow @hackinghub_io 3⃣ ❤️+🔃 this post 4⃣Comment this post Winners will be picked on Friday 8/29 Youtube channel: youtube.com/@BugBountyVillag… And if you made it this far, you might as well join our other social media channels and subscribe to our mailing list! it only takes a minute, and It helps us a lot, and makes possible to bring these giveaways to you. Mailing list: bugbountydefcon.com/mail TikTok: tiktok.com/@bugbountydefcon LinkedIn: linkedin.com/company/bugboun… Instagram: instagram.com/bugbountydefco…
137
134
2
271
30,973
Google's Product Security Team (my broader team!) is hiring in Brazil! Here's the link for the Manager we want to hire there to start the team! google.com/about/careers/app…
1
31
3
71
23,691
Manoel Abreu retweeted
tramoia.sh ??.??.2024
13
115
10
297
41,308
Manoel Abreu retweeted
🚨 @Hacker0x01 Bug Bounty Village na @h2hconference!!!! A agenda da nossa village de bug bounty na H2HC já está disponível. Vamos ter talks absurdas com bastante história e tricks. Para participar dos sorteios que irão ocorrer, se cadastra aqui: h1.community/events/details/…
2
23
4
72
15,492
It’s so bad that I wrote a thread 🧵 ⤵️
5
67
3
184
75,922
👀 Want to win a @flipper_net? 🐬 Retweet and Like to enter to win! 🦾 #defcon
🙌🏼 Thank you to @flipper_net for adding to our epic RTV CTF prizes! #defcon
76
782
11
1,099
105,497
Manoel Abreu retweeted
Calling all bug bounty hunters in Argentina, Brazil and Uruguay! 🗣️ @Mercadolibre is partnering with #h1ambassadors @niemand_sec, @reefbr, @arthurair_es, and @0xTeles for a special opportunity to #hackforgood! 🙌 Sign up here to confirm participation! bit.ly/3zzf5Qu
7
17
5
92
20,520
Also, when this tweet is two hours old (12pm Sydney time) I'll be live at twitch.tv/justinsteven breaking down how I found the bug and how it all worked. If you can't make it then it'll be on YouTube in the coming days, but if you can, come say hi! ❤️
2
5
1,262
Manoel Abreu retweeted
We're excited to announce that Caido, our web security auditing toolkit, is now available in public beta 🚀 We're grateful for your support and can't wait for you to give it a try. Let us know your thoughts and help us improve the tool 🙏 medium.com/@caido/caido-is-n…
11
125
11
398
94,355
Manoel Abreu retweeted
XSS 2 RCE on @flipper_net Got RCE through an XSS on lab.flipper.net , here's the writeup thread github.com/caioluders/pocs/b… (PoC Video, printing 1337 on the flipper screen)
8
72
4
342
a entrevista do g1 com o serj tankian conhecendo o system of a dilma viralizou em um perfil de metaleiros no tiktok, uma união de gerações
327
2,750
1,036
17,201
Manoel Abreu retweeted
And, after the event, I made the course "Modern Web Exploitation" of @Lets_GoHacking ministered by @reefbr and Bruno Cortes, the best web security course I"ve see. Really, I learned so much and I leave from it with the view that I knew very little about web security. Thanks guys.
1
8
This is the technical writeup in how we found and exploited the CVE-2022-41343 (RCE via Phar Deserialisation in Dompdf <= v2.0.0). We presented this vulnerability at Ruxmon September and we are finally doing the public disclosure! I hope you like it ;-) tantosec.com/blog/cve-2022-4…
2
68
4
183
oi pessoal Abrimos hoje as inscrições pro Hack Her_Way que vai até os dias 03 e 09 de outubro 💜 Podem participar mulheres (cis e trans) e identidades de gênero transfemininas que tem interesse em participar da área de infosec! Mais infos aqui: blog.nubank.com.br/nubank-ha…
7
27
1
54
Estaremos com os treinamentos EHPX e EHMWX, presenciais, na H2HC 2022. Imperdível ! Let's GoHacking ! #H2HC #gohacking #cybersecuerity #redteam
Os 3 treinamentos oferecidos pela H2HC foram postados no site (h2hc.com.br), nao percam pois as vagas sao bem limitadas! @h2hconference
3
7
o entregador da lalamove levando minha encomenda embora e fingindo tirar foto pra entrega, ainda teve a pachorra de marcar entregue e colocou um nome que não existe por favor ajudem dando RT, perdi muita grana nisso E aí shopping Iguatemi o que vão fazer em relação a isso?!
8
27
138
[Security Classes][PTBR] Algumas pessoas me pediram dicas de materiais para estudar. Para tentar ajudar, estou compartilhando algumas aulas que gravei durante a pandemia para os cursos do @SECRET_UFPR Espero que sejam úteis. Aula 1: TOCTOU e DirtyCoW (1/4) youtube.com/watch?v=Mrc1QUVW…
1
2
1
6
Manoel Abreu retweeted
CVE-2022-1774 - Leakage of third-party OAuth token via redirect in drawio : huntr.dev/bounties/6ac07c49-… That was an fun one. The application has an "redirect" parameter on the callback. GitHub login redirects the user back to the app, than uses that param to redirect it again. 1/n
1
20
1
83
⚠️New: There was an issue with Twitter's API that caused an undercount in Jair Bolsonaro's recent followers. We reanalyzed Jair Bolsonaro's recent followers, and 61,299 accounts were created since yesterday. Here is the data for other researchers: botsentinel.com/reports/docu…
116
921
438
3,517