Greg Long

@efaav Did you have to convince them for the bounty on the first report as it doesn't appear to be an in scope asset for bounty. I submitted 12 Crits this year to MSRC and got no bounties at all as it was out of scope for bounty :(

I found another vulnerability to leak Microsoft Employee PII ($7500 Bounty) and 700M+ Microsoft partner records. Here's the writeup: blog.faav.top/microsoft-part… #BugBounty #bugbountytips

@Rhynorater @ArchAngelDDay For sure!

@ArchAngelDDay I'd like to have you on the pod and discuss your shift!

This year I massively shifted my bug bounty approach radically and haven’t really submitted too many priv escs or RBAC issues. It’s really paid off!

@Icare1337 Any way to trigger the Uri from within a doc server side?

Discovered a critical #security vulnerability in #LibreOffice affecting both #Windows and #Linux just visiting a link will launch LibreOffice and execute commands.#BugBounty

@Hacker0x01 2

Next Monday, October 21, marks the start of #SecTor2024 in Toronto, Canada! 🇨🇦 Booth 525 is the place to learn about the HackerOne platform, get your HackerOne swag, and talk to our team. Plan ahead and book time with our team before you head to the show to secure your ideal time slot! bit.ly/3zOHgi5

We're excited to announce one of our giveaways thanks to "@CaidoIO" 🎉 We will pick 5 winners to win a 1-year Caido Pro license! To enter: 1️⃣ Follow us @BugBountyDefcon and @CaidoIO 2️⃣ Like this post ❤️ 3️⃣ Retweet this post 🔁 You have time to participate until Friday (9/13)!

@nnwakelam @HITBSecConf When is the conf Nathaniel?

Pleased to announce myself as the keynote speaker at @HITBSecConf in Phuket

@nnwakelam Grab an old bitnami image for artifactory. Presetup with apache and tomcat.

Anyone got a working HTTP smuggling example on Apache? want to test something

@nnwakelam Xamlx. soroush.me/blog/2019/09/f…

@nnwakelam I like .cer, it's a default execution in IIS10 still. Use Classis ASP code in the file. <% Response.Write(2+2) %>

@bennyjohnson And in the lifetimes before yours, common sense Americans were standing up for others and committing to ACTION.

🚨BREAKING 🚨 Target stock has just COLLAPSED to its lowest trading value in a YEAR with no end in sight. For the first time in my life, common sense Americans are standing up for themselves and committing to ACTION. We are the majority. We are winning. We’re just getting started.

@commiechuk @big_red_s @cr00ster @Evil_Mog Yes. Was fine 100 baset

@longgregc @big_red_s @cr00ster @Evil_Mog Works ok for FastEthernet, Gigabit needs all the pairs.

Whoever the f did this needs to be forced to watch baby shark on repeat in an IMAX theater while tied to the chair, repeatedly hit with a wet pool noodle, and have the lights rapidly pulse in various rainbow shades while every 2 minutes Barney the dinosaur is piped in.

@taylor_ham @cr00ster @Evil_Mog Tell me would you pull a whole new cable through who knows what floor and ceiling crawl spaces to get a second Ethernet outlet installed? Or solve the problem and fuck off home at 8:05am.

@cr00ster @Evil_Mog I’m an old POTS person and I find this excruciating to look at. My job was a trade. We gave a damn. Until about 3 pm, at least…🤣

@big_red_s @cr00ster @Evil_Mog Yes you understand it perfect. You could do one Ethernet and two phones in the same cable

@cr00ster @Evil_Mog I've done a thing like that before to get two of the contacts into a 100mb rj45 and the other two into an rj11 to get phone+net down one ethernet run.

@hcf64 @cr00ster @Evil_Mog It is not not a passive tap

@cr00ster @Evil_Mog this was valid for early Ethernet networks (before Ethernet switches were common we had hubs).

@l422y @LaserBlade @secengjeff @Evil_Mog No collisions. It is two separate Ethernet cables in one.

@Evil_Mog Ethernet needs 4 wires. The cable has 8 wires. 2 x 100 base-t works fine over a single cat 5 100m run. Or you could have 4 x 2 wire POTS phone lines on the one cable.

@bbcbd_official @zseano @BugBountyHunt3r Great talk @zseano thanks. I've been sitting right below you on the h1 top ten this week :). Would love to explore your platform, maybe learn enough to get past you on the leaderboard :)

"Staying Motivated in Bug Bounties" by the one & Only @zseano !! We will be giving away one 1-Year @BugBountyHunt3r membership to one commentator. #bughunt2023 #theHuntIsOn youtube.com/watch?v=a39ayq…

Giveaway time! To celebrate 80k followers! We are going to give a 1-month voucher to **80** people who RT this tweet (picked randomly)! We are going to send our socks, t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet (picked randomly)!!

@NahamSec 50k bounty Shopify portswigger.net/daily-swig/str…

I'm doing some research for a blog post/video. Can anyone recall any news/headlines or stories about companies being breached due to leaked credentials on GitHub or GitLab? If so, can you link me please?