Andrew Dorman

@the_IDORminator Sounds like hackerone......they duped me and showed me a vulnerability that was triaged 2 years ago never remediated and it allows for account take overs and theft of funds. But sure it was a dupe when I made a mass kill chain 6 steps to cash everyone out 😆 🤣 😂

I honestly do know how any of you survive the triage process today, wow. I logged a VDP bug with the primary URI set to a page that has unrestricted local and network admin file access via URI params, and it was marked a dupe of a SQLi that had nothing to do with it🤣 Cool

@the_IDORminator I do combination bulk report drops. Only split of criticals for payout. Maximize killchain to show the critical to max pay. It's better than writing 20 medium or high reports lol

I spent 3-4 hours on a #bugbounty VDP target, the first domain I picked, and found 10+ SQLi, unrestricted file download/read AND upload/execute as local admin, LFI, RCE, IDORs, auth bypasses, CVEs, full database dumps and backups, credentials (local, network, email)... all manually. Good gosh VDPs are like play time. That was actually fun fully owning a server, its like riding a bike! I suppose this is probably what most of the internet looks like, yikes. Now I need inspiration to type up 20 bug reports for free, ugh. 🙄

@CyberRacheal I was about to say this is a trick question hahaha

Interviewer: A user is complaining they can't access google.com. You try to ping 8.8.8.8 and it works perfectly, but pinging google.com fails. Is the issue likely caused by a failure in the Default Gateway? YES or NO? 🤔

@SocraticMethhed @F0ODHub You were the one focused on meat 😆 🤣 😂

@AndrewCDormsn @F0ODHub It’s rather homosexual to be this concerned with meat. You should probably get that checked out.

Remove one thing from this plate..

@hlitoroy @F0ODHub nailed it

@F0ODHub it's a tough one, but i will choose jews

@F0ODHub Coleslaw......

@SocraticMethhed @F0ODHub I audibly gasped at this remark......

@F0ODHub Pulled pork and brisket are both retard snacks. Utterly mid.

@Ark_Aegis I mean yeah B but for me I use 1.1.1.1 lol I like Cloudflare

Which IP address range is private? A. 8.8.8.8 B. 172.16.0.1 C. 1.1.1.1 D. 54.23.12.1

@kassem_S94 You said I look sick. Was that technical? You lost walk away.

@AndrewCDormsn Calling out your behavior isn't "going personal" Dragging Lebanon into a technical discussion is

🔥 $3000 bounty using Secret Hunter 🔥 💰OLD BUT GOLD💰 Found hidden API endpoint (debug ON) → leaked DB creds → full admin access 💸 Not just a secret finder… a recon beast 🔥 🚀 48H OFFER now! 🔹 Join Us for more info: t.me/kassems94 #bugbounty #hacking

@kassem_S94 You went personal first :)

@AndrewCDormsn You went from discussing bounty results to using country-based jabs That usually happens when someone has no technical argument left and needs attention instead😏 Keep Going🔥

@kassem_S94 Nice going personal. Funny for someone from Lebanon.

@AndrewCDormsn You look sick? 👀

@kassem_S94 And then using the old bounty screen to sell something 😆 🤣 😂

@AndrewCDormsn as you see on this tweet: >OLD IS GOLD Its not a new bounty , its an old bug and bounty

@dersonxyz @hakiraio @HackenProof Im losing faith in H1 at this point might as well.

The @hakiraio AI agent helped discover another vulnerability in a bug bounty program. Thanks to @HackenProof and PUMB for the support

@GitHubSecurity H1 3686503 and 3692170?

Here are our March bug bounty stats! ✅380 bounty reports submitted 👥260 hackers participated in our program 💰Awarded $94,637 in bounties Found a vulnerability? Submit it here: bounty.github.com.

@AltcoinPro_ @BullrunnersHQ This is the most moronic proposal I have ever seen. Satoshi wouldn't approve as then it has a corporate structure of frozen assets and a form of centralization. Yes they are at risk. But what if those people still exist? You just robbed them. What if Satoshi is alive and well?

🚨 BITCOIN DEVELOPERS WANT TO FREEZE SATOSHI'S WALLET This is one of the most controversial proposals in Bitcoin history. 👀 BIP-361 has just been proposed — A plan to freeze early Bitcoin addresses vulnerable to quantum computing attacks. This includes: ⚠️ Satoshi Nakamoto's own wallets ⚠️ All OG dormant wallets from the 2010-11 era The numbers at stake? 👇 Over 4,000,000 BTC sitting in quantum-vulnerable addresses. 🔥 That's nearly $400 BILLION in Bitcoin that could theoretically be cracked and stolen by a powerful enough quantum computer. 💰 If quantum computing matures — And those wallets aren't protected — Someone could drain them overnight. ⛓️ But here's the other side: Freezing wallets means changing Bitcoin's core rules.That's not a small ask. 📈 Satoshi's coins. Frozen. Forever. By a community vote. 👀

@BullrunnersHQ You guys had a data breach. Never disclosed. Very disappointed.

#XRP is a Commodity! HUGE Wall Street & SEC News!

@MbarkCherguia Celebrate peacefully 😆 🤣 😂

What would you do in this situation?

@micah_erfan They can't

If Mexico can afford this, why can’t we?

@sentdefender It's that a Gundam?????? In the back middle???

After attacking the Head of the Catholic Church, Pope Leo XIV, in a rambling post earlier tonight for his criticisms of the ongoing conflict in the Middle East, President Trump posted this AI image to TruthSocial, portraying himself as Jesus Christ.