j0v @j0v0x0

Ethical hacker & Bug bounty hunter j0vsec.com Netherlands 🇳🇱 Joined December 2019

Tweets

86
Followers

2K
Following

196
Likes

175

Sergey Bobrov @Black2Fan

2 years ago

HTTP Request Splitting vulnerabilities exploitation offzone.moscow/upload/iblock/…

8 212 733 79K 361

Detectify @detectify

3 years ago

During 2022, we had not one but two recipients of our Team Trophy award: @j0v0x0 and @PaulosYibelo. Thank you both for your strong communication skills and reliable, high-quality submissions!

0 1 4 1K 0

Download Image

j0v @j0v0x0

3 years ago

Working on a #HackTheBox machine and it turns out I have to use my own CVE 😎

0 0 4 0 0

Intigriti @intigriti

3 years ago

What's a Live Hacking Event like? 🏎 This is our round-up video of #1337up0822 with @TheParanoids! 📺 Find the full round-up in the comments 👇

1 8 65 0 4

Download Video

j0v @j0v0x0

3 years ago

Thanks for the great event ⁦@intigriti⁩ and ⁦@TheParanoids⁩! Met some great hackers, had much fun and even won my first award for best bug! 😃 #1337up0822 #HackWithIntigriti

1 2 53 0 0

Download Image

j0v @j0v0x0

3 years ago

So cool, my first live hacking event next week. Super excited 😃

Intigriti @intigriti

3 years ago

So cool, my first live hacking event next week. Super excited 😃

8 9 138 0 1

Download Image

0 0 9 0 0

Thanks for the invitation for the next LHE @intigriti, I'm honored! Really bad that I can't join this time, especially now I see the tweets from all co-hunters who I really wanted to meet. Hopefully I get the chance to join next time :-) #1337UP0622 #HackWithIntigriti

1 0 20 0 0

j0v @j0v0x0

3 years ago

Reported 4 RXSS issues for 4 different endpoints and 4 different parameters to a BugCrowd program. All 4 duplicates because the company is already aware of a RXSS issue in another endpoint with another parameter 😅🤦‍♂️ #BugBounty

0 0 6 0 2

j0v @j0v0x0

4 years ago

Thanks @detectify for the swag and personal card! I got the “Proof of concept or it didn’t happen award 2021” 😃

1 1 18 0 0

Download Image

Detectify @detectify

4 years ago

Cheers @j0v0x0 for finding the Grafana 0day. Check out the write-up on Detectify Labs. #gohackyourself #detectifycrowdsource #bugbounty labs.detectify.com/2021/12/15/zer…

0 12 38 0 12

NCSC-NL @ncsc_nl

4 years ago

Er is een ernstige kwetsbaarheid gevonden in Grafana. Misbruik is triviaal. Grafana Labs heeft updates uitgebracht om de kwetsbaarheid te verhelpen. Inschaling NCSC kans/schade is ‘high/high’. Lees het beveiligingsadvies: ncsc.nl/actueel/adviso… #CyberSecurity

2 17 16 0 0

Grafana @grafana

4 years ago

Grafana 8.3.1, 8.2.7, 8.1.8, and 8.0.7 have been released with an important high severity security fix. Read all the details here: grafana.com/blog/2021/12/0…

4 45 82 0 3

j0v @j0v0x0

4 years ago

Skip the nginx part, it turns out that there are ways to exploit it with nginx as proxy. Best way for now is to block public access.

j0v @j0v0x0

4 years ago

Skip the nginx part, it turns out that there are ways to exploit it with nginx as proxy. Best way for now is to block public access.

5 45 193 0 10

1 1 3 0 1

j0v @j0v0x0

4 years ago

I think the most common first response of @Hacker0x01 triagers is "I'm discussing this internally with the team" now. Most of these discussions seem to take months 😅