error4o4 @error404sec

Offensive Security | Bug Bounty Hunting and Web Application Security. Madrid Joined February 2010

Tweets

11K
Followers

3K
Following

3K
Likes

9K

error4o4 @error404sec

2 months ago

It’s really amazing to be able to ask AI and get the right answer without having to google 3 different things , but at the same time I kind of feel that it’s also making me more ignorant than before. Is there any prompt that you use to avoid this? Like… don’t show me, teach me?

0 0 0 153 0

error4o4 @error404sec

3 months ago

I would love to see someone streaming when they do their content discovery. Do you know someone that shows thar part of the recon? #bugbounty

0 0 0 179 0

error4o4 @error404sec

3 months ago

I feel like BB game is definitely about being consistent and about falling and getting up again till you start finding bugs!

0 0 4 288 0

error4o4 @error404sec

3 months ago

Wtf

publiclyDisclosed @disclosedh1

3 months ago

Wtf

1 10 78 15K 20

Download Image

0 0 0 197 0

publiclyDisclosed @disclosedh1

3 months ago

HackerOne disclosed a bug submitted by @0xw2w: hackerone.com/reports/2937622 - Bounty: $1,200 #hackerone #bugbounty

1 10 78 15K 20

Download Image

error4o4 @error404sec

3 months ago

Hands up for @S1r1u5_ and @rootxharsh for this amazing talk! I was looking for this kind of orientation! Thanks guys! youtube.com/watch?v=Z8gO77…

0 1 0 421 1

error4o4 @error404sec

3 months ago

A reminder to myself… don’t just bookmark researches , actually make some time to read it in the week 😅

0 0 4 152 0

error4o4 @error404sec

3 months ago

Im on this moment of my life where it feels real good to see other people doing bugbounty/hacking/CTF stuff (youtube), but I start to feel really anxious when I try to do stuff! Does that happen to you also?

0 0 1 176 0

error4o4 @error404sec

3 months ago

Is it just me that read js files in the dev tools? I love it but I’m not sure if it’s the best way

0 0 0 168 0

error4o4 @error404sec

4 months ago

When I grow up(I’m almost 40) I want to be like @Rhynorater , @rez0__ , @0xLupin and @monkehack ! What an amazing, humble and good people with great talent! I just watched @ctbbpodcast last podcast and I really loved it! You guys make a great team! 👊👏

2 2 43 2K 10

error4o4 @error404sec

4 months ago

Wow, nice! Google Cloud's recent acquisition and Rhynorater in the same podcast? I can't miss this one!

Justin Gardner @Rhynorater

4 months ago

Wow, nice! Google Cloud's recent acquisition and Rhynorater in the same podcast? I can't miss this one!

2 7 63 12K 20

0 0 1 320 0

error4o4 @error404sec

5 months ago

I kinda feel this AI thing is getting out of control

0 0 1 166 0

error4o4 @error404sec

5 months ago

This looks like a result of a recent commit since I checked this endpoint several times in the past and wasn’t disclosing anything of this

publiclyDisclosed @disclosedh1

5 months ago

This looks like a result of a recent commit since I checked this endpoint several times in the past and wasn’t disclosing anything of this

3 28 197 14K 64

Download Image

0 0 0 185 0

error4o4 @error404sec

6 months ago

Hi @PortSwigger , does this lab written solution match the Lab? because Im having issues getting the unknown field, in the third(3) key is returning "email" field, not a reset token or something like that portswigger.net/web-security/n…

0 0 0 217 1

Download Image

error4o4 @error404sec

6 months ago

Although its a different header, its funny how nobody thought before about the amazing Frans Rosen research about X-Correlation headers when there is a Lab in @PortSwigger Academy where we need to exploit a Blind SSRF abusing the way the User-Agent header is used on the server.