Officially Top 5 All-Time on HackerOne's Leaderboard following a 10G💰 bounty from a public program 🤠 hackerone.com/leaderboard/al… #BugBounty

Working on Shockwave - External Attack Surface Management. in my Self Driving Waymo around RSA with Ian Carroll and Sam Curry - we have fantastic driver on board 🤖🚕

Enjoying a champagne at Grand Hyatt 🇭🇰 lounge and getting collaboration invite from Frans Rosén on Sunday? That’s what dreams are made of 😅 Looking forward to catching up with folks next week in Poland ✈️ #BugBounty

The new HackerOne policy around CVE reports is concerning, especially for High & Critical ones, as it potentially keeps hundreds of their customers vulnerable to critical ransomware-leading risks by withholding information as they are automatically being set as "Informative."

Thanks Nagli for the feedback. There is no new policy but there was a documentation error, which is now fixed. Keep the feedback coming!

Just got awarded the prestigious P1 Warrior Belt by bugcrowd for submitting over 100 valid critical submissions to companies on their platform, manually and using shockwave.cloud automation engine. Among the companies that I worked with to remediate critical,

The Polyfill[.]io backdoor is wild! from what I read all over on Twitter the person who was in charge of the domain sold it to rogue actors back in February and ever since it served as backdoor to hundreds of thousands major websites that had it referenced within a script tag,

🤝

One of my coolest bugs just got paid! Let's go & Onwards : ) #BugBounty

Excited to share some big personal news today, I have joined Wiz to enhance their Risk & Threat Exposure Management and build a new disruptive Risk MDR offering. It's been quite a ride working on Shockwave - External Attack Surface Management. for the past couple of years as a solopreneur and as a

Spent some quality time doing Europe 🚂 hacking and business trip with Joel Margolis (teknogeek) to recharge from Vegas 🎰 shenenigans. Lufthansa First Class Limo 🛫 Prague 💺Vienna 💺 Budapest. We earned 2-3x the trip cost on the 3rd day thanks to #BugBounty

Had the opportunity to share a bit about myself and my Bug Bounty journey during an interview at Louis Vuitton Vuitton's Live Hacking Event, hosted at their main HQ in Paris - big shout-out to YesWeHack ⠵ for hosting a great experience 💎

What a shame by Detectify when they force out the equity of one of their co-founders who pretty much invented the concept of recon 10 years ago. I don’t worry for Frans as he still destroy any high-paying Bug Bounty program and one of the best ever to collab with 🤝

Yay, I was awarded a $20,000 bounty on HackerOne! Honestly, It's been a while since I had a good experience with #BugBounty program and twitter is usually full of rants. I want to thank Zoom BBP Team for their co-operation on the report 💎

Look's like HackerOne reputation points system is officially dead. Create a Self-Serve VDP Bulk submit 5000 reports Bulk resolve Enjoy 35,000 reputation points. With 100% self-serve VDP's, creating separate leaderboards isn't enough - points have to be removed.