/home/toxicat0r @toxicsolution

Tweets

109
Followers

270
Following

2K
Likes

4K

PortSwigger Research @PortSwiggerRes

4 years ago

HTTP/2: The Sequel is Always Worse by @albinowax portswigger.net/research/http2

12 480 1K 0 139

/home/toxicat0r @toxicsolution

4 years ago

I earned $1800 for my submission on @Bugcrowd bugcrowd.com/toxicat0r #ItTakesACrowd API takeover (customer data exposed). Several small bugs resulted in one big final payment :)

2 1 27 0 0

/home/toxicat0r @toxicsolution

4 years ago

I earned $600 for my submission on @Bugcrowd bugcrowd.com/toxicat0r #ItTakesACrowd Administrator privileges to their API :)

2 2 35 0 0

/home/toxicat0r @toxicsolution

4 years ago

I earned $450 for my submission on @Bugcrowd bugcrowd.com/toxicat0r #ItTakesACrowd IDOR exposed customer data. Changed the HTTP method from PUT to GET, shortened down the URL, and finally changed the user ID :)

1 2 33 0 2

/home/toxicat0r @toxicsolution

4 years ago

I earned $300 for my submission on @Bugcrowd bugcrowd.com/toxicat0r #ItTakesACrowd IDOR in a private program ;) Got another $150 for no rate limiting as well 🥳

1 0 5 0 0

/home/toxicat0r @toxicsolution

4 years ago

Shoutout to @evildaemond, Ulas, and Viper at @Bugcrowd. Triaging at the speed of light 💯

0 0 2 0 0

/home/toxicat0r @toxicsolution

4 years ago

Just bought myself a couple of new IoT cameras. Not sure if I should laugh or cry :)

2 0 8 0 0

Download Image

NCSC-NO @ncsc_no

5 years ago

BendyBear: Novel Chinese Shellcode Linked With Cyber Espionage Group BlackTech unit42.paloaltonetworks.com/bendybear-shel…

0 4 2 0 0

CD PROJEKT RED @CDPROJEKTRED

5 years ago

Important Update

5K 14K 102K 0 1K

Download Image

KraftCERT/InfraCERT @KraftCERT

5 years ago

Accessed the computer system of a facility that treats water for about 15,000 people and sought to add a dangerous level of additive to the water supply reuters.com/article/us-usa…

1 3 7 0 0

/home/toxicat0r @toxicsolution

5 years ago

9 exploits published today with my name on them. Super happy about that, but also worrying that some WP plugin developers really don’t care about security. They ignored my requests until I contacted the WP plugin security team directly.

Exploit Database @ExploitDB

5 years ago

0 4 7 0 1

2 0 3 0 0

NCSC-NO @ncsc_no

5 years ago

CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit) blog.qualys.com/vulnerabilitie… via @qualys

0 2 6 0 1

NCSC-NO @ncsc_no

5 years ago

New campaign targeting security researchers @Google blog.google/threat-analysi…

0 1 1 0 0

Luke Stephens (hakluke) @hakluke

5 years ago

Don't forget to add "Password2021" to your wordlists.

28 90 597 0 6

Kim Zetter @KimZetter

5 years ago

I have report from Microsoft about SolarWinds hack, including IoCs. Excerpts in this thread: "Microsoft security researchers recently discovered a sophisticated attack where an adversary inserted malicious code into a supply chain development process.... 1/

50 953 2K 0 274

/home/toxicat0r @toxicsolution

5 years ago

Hey @rushisec - I had loads of fun. Thanks! Check it out here: tryhackme.com/jr/watcher

1 1 4 0 0

Download Image

/home/toxicat0r @toxicsolution

5 years ago

Hey @S1lky_1337 - fun machine :) Good find regarding the authentication bypass. Interesting case.

1 0 2 0 0

Download Image

/home/toxicat0r @toxicsolution

5 years ago

Stumbled across this awesome tool yesterday. Perfect for OSINT, bug bounty hunting, and so on. Search across a half million git repos 💯 grep.app

0 1 2 0 0

Roy Solberg @roysolberg

5 years ago

"Sent torsdag kveld fikk VG inn en rekke tips fra lesere som hadde blitt logget inn på andres profiler når de forsøkte å logge seg inn via ID-porten, en felles innloggingsløsning til offentlige tjenester." direkte.vg.no/nyhetsdognet/n…