jarom @_jarom_

Bug bounty hunter | Software engineer in security | Building & breaking with automation + AI | DEFCON fan | Sharing tips & weird bugs hackerone.com/jarom Texas, USA Joined February 2009

Tweets

1K
Followers

354
Following

590
Likes

1K

jarom @_jarom_

a month ago

Had a fun time with the Google Security team yesterday, got to see a lot of innovative things they are doing to keep users safe. Definitely want to look into scalibr when I get back home . Excited to see what #defcon33 has to offer today!

1 0 3 127 0

Download Image

jarom @_jarom_

a month ago

If you’re going to DEFCON this year, would love to meet up and connect, I’ll be spending time at the @BugBountyDEFCON village. Come say hi!

0 0 1 115 0

jarom @_jarom_

6 months ago

Don't always have time to hack and the reports don't always turn out in my favor, but it's fun when they do! Just got a reward for a critical vulnerability submitted on @yeswehack -- Insecure Storage of Sensitive Information (CWE-922). #YesWeRHackers

1 0 7 270 0

Download Image

jarom @_jarom_

a year ago

Just got a reward for a vulnerability submitted on @yeswehack -- Unrestricted Upload of File with Dangerous Type (CWE-434). #YesWeRHackers

1 0 7 370 0

jarom @_jarom_

a year ago

I recently had the opportunity to speak @fwdcloudsec in Arlington, VA alongside some amazing people. My talk leveraged research published by Sam Cox and Ben Bridts that allows anyone to discover the AWS account ID of any S3 bucket. I go into detail of what I did (and any…

0 0 6 304 0

jarom @_jarom_

2 years ago

Excited to be presenting alongside some brilliant people in the Cloud Sec world this Monday and Tuesday @fwdcloudsec. I'm gonna drop a bug bounty tip for when you get AWS creds via SSRF, but they are source IP restricted. Hope to see you on the stream! youtube.com/@fwdcloudsec/s…

0 1 8 892 0

jarom @_jarom_

3 years ago

Got these awesome playing cards while waiting in line from @ravEmperorEye and this coin from @Arl_rose yesterday. Thanks @Hacker0x01 !

1 1 21 0 0

Download Image

jarom @_jarom_

3 years ago

First year making it out to #DEFCON, things look awesome!

0 1 29 0 0

Download Image

Ben Sadeghipour @NahamSec

3 years ago

That’s a wrap for @Hacker0x01’s #h1303

1 5 229 0 0

Download Image

jarom @_jarom_

3 years ago

Yay, I was awarded a $5,000 bounty on @Hacker0x01! hackerone.com/jarom #TogetherWeHitHarder it never hurts to run @pdnuclei using @pry0cc ‘s axiom on new private programs, you never know what you’ll find! #bugbountytip #bugbounty

2 7 79 0 17

jarom @_jarom_

3 years ago

Favorite challenge so far of #NahamCon2022 has got to be Flaskmetal Alchemist. Spent the last 2 hours understanding and building a payload, dropped in burp and out popped my flag 🥳 now on to find my new favorite ctf.nahamcon.com

1 2 14 0 2

securityfu @securityfu

4 years ago

AWS WAF's default configuration lets an attacker completely bypass it in POST requests, even if you've enabled the AWS Managed Rules. SQLi, SSRF, etc. Fortunately, there is a way to mitigate it #aws #waf osamaelnaggar.com/blog/aws_waf_d…

2 79 152 0 32

jarom @_jarom_

4 years ago

Yay, I was awarded a $2,000 bounty on @Hacker0x01! hackerone.com/jarom #TogetherWeHitHarder 2k down 998k to go! Sometimes vulnerable internal assets pop up outside the firewall🤷‍♂️ #bugbountytip

2 0 4 0 0

jarom @_jarom_

4 years ago

Awesome CTF by @d0nutptr and @Hacker0x01 🔥 If you’re into hacking and/or AWS security go give this a try!

d0nut 🦀 @d0nutptr

4 years ago

Awesome CTF by @d0nutptr and @Hacker0x01 🔥 If you’re into hacking and/or AWS security go give this a try!

0 6 45 0 2

0 1 2 0 1

Coalition Security @CoalitionSec

6 years ago

New blogpost: Trick or treat new price is neat blog.binaryedge.io/2019/10/31/tri… here is our Halloween gift to you enjoy your new starter accounts!!!