Kevin @rohk_infosec

staff application security engineer at @Okta - all tweets are my own Las Vegas, NV Joined March 2016

Tweets

1K
Followers

5K
Following

190
Likes

3K

Kevin @rohk_infosec

2 years ago

Okta scope increased again! We've added Okta OIE & Okta Access Requests (AtSpoke). More information can be found at bugcrowd.com/okta

1 5 21 5K 2

Kevin @rohk_infosec

2 years ago

Okta is paying to up $100k for an RCE and paying an additional $2,500 for an XSS bypassing our validation and CSP! bugcrowd.com/okta/updates/0… @Bugcrowd

4 13 96 13K 21

Kevin @rohk_infosec

2 years ago

As Okta's bug bounty program continues to pay 2-3x until July 31st, we introduced another product to the scope! Advanced Server Access! Check it out!

0 2 1 1K 0

Kevin @rohk_infosec

2 years ago

Hey everyone! @okta's bug bounty program on @Bugcrowd will be running a 2-3x multiplier on all eligible reports until July 31st! Come check us out at bugcrowd.com/okta

2 3 8 3K 3

Kevin @rohk_infosec

5 years ago

At the end of the day you can only trust yourself.

0 1 11 0 2

Kevin @rohk_infosec

5 years ago

Did I backup everything? 🤷‍♂️ idk

0 0 1 0 0

Kevin @rohk_infosec

5 years ago

Well computer isn’t working how I want so gonna nuke it.

0 0 2 0 0

Kevin @rohk_infosec

5 years ago

Come join the stream! twitch.tv/rohkroh

0 1 2 0 0

Kevin @rohk_infosec

5 years ago

i haven't been able to log into my bank account for the past couple of weeks.. found out because my device name had an XSS payload.

3 0 19 0 0

whenever the topic sushi comes to mind.. this memory always pops up: Friend: Omg I love sushi! *Orders sushi rolls* Me: You should try some nigiri or sashimi! Friend: Ah sorry.. I don't like raw fish! Me: ...

2 0 6 0 0

Luke Stephens (hakluke) @hakluke

5 years ago

I'm noticing a surprising number of people submitting CSRF PoCs with the CSRF token in the actual PoC. If the attack requires you to know a victim's CSRF token and you have no way of getting it, then it is not a vulnerability!

11 7 157 0 8

Kevin @rohk_infosec

5 years ago

time to go into hibernation... see y'all on monday

0 0 5 0 0

AISECUREME @aisecureme

6 years ago

Another SSRF List: http://[::]:80/ http://[::]:25/ http://[::]:22/ http://[::]:3128/ http://0000::1:80/ http://0000::1:25/ http://0000::1:22/ http://0000::1:3128/ http://127.0.1.3 http://127.0.0.0 http://0177.0.0.1/ http://2130706433/ http://3232235521/ http://3232235777/

8 299 749 0 207

AIfredo 0rtega @ortegaalfredo

6 years ago

This is the complete DNA of the Coronavirus (SARS-CoV-2). We are being attacked by a 8 kilobytes virus. Remember this when you hate on computers security. (source: ncbi.nlm.nih.gov/nuccore/MN9089… )

106 3K 7K 0 339

Download Image

Kevin @rohk_infosec

6 years ago

Sir the fragrance you’re using is... strong

1 0 3 0 0

Trend Zero Day Initiative @thezdi

6 years ago

Want to know how to exploit the recently patched #Microsoft #Exchange CVE-2020-0688? @HexKitchen provides the details on how to take advantage of the fixed cryptographic keys used during installation. bit.ly/2TefZfv