Luciano Corsalini

@daeken There would be a high risk to get lost depending on the company you fly with

I'm pretty sure I've tweeted this before, but I'd pay so much for a service that knocks me out in my hotel room, brings me to the airport, puts me on a plane, transports me home, and wakes me in my bed. Fuck first class; give me an oxygen mask in a box in the cargo hold.

@rohk_infosec Just to be on the safe ride, I’d ask the not-dupe one for favors instead

may the dupe gods be ever in my favor

@intigriti @nijagaw tag me back 😜

We're feeling generous! 🤗 We're manually sending out some private bug bounty program invites today... who should we invite? 👂#HackWithIntigriti

@d0nutptr I want 500 + 500

Please don’t actually report this. There isn’t any real impact. It’s basically the same as if you registered an entirely new email and set up email forwarding on one of the addresses.

@cyb3rsick So stupid that leads to ATO as the URL always contains a token to keep going with the password reset flow. Not sure whether you or the company really realized the impact of this.

At password reset pages always try manipulating HOST header, you might get lucky and find that the password reset URL contain your own host instead of the original domain name. Just got easy 500$ for this stupid bug. #bugbountytip #Bugbounty #ItTakesACrowd

People have been trying to get me to tell them all of my secrets on how I reverse engineer apps. I wrote a small article on how I do everything. Enjoy wongmjane.com/post/secret-of…

@mikispag Try with rm -rf * from your home and lmk then

If you want to live what you experience the moment you die when you see your entire life passing by in a flash, just run: . ~/.bash_history

@stefanohablando @EdOverflow Try popping the song lyrics in an alert instead 😜

Throwback to that one time I decided to be a bit creative and include something different for a change in my stored XSS proof of concept. Didn't turn out as expected. 😅

Yay, I was awarded a $7,500 bounty on @Hacker0x01! hackerone.com/lucio #TogetherWeHitHarder

@Bitquark One of my favorites github.com/urfave/cli. Anyway, you can always set a custom usage message if you don’t like the default one. Just override flag.Usage

Yay, I was awarded a $4,000 bounty on @Hacker0x01! hackerone.com/lucio #TogetherWeHitHarder TIP: take always the right amount of time to write a good PoC!

Finally managed to get some cool stuff @HackenProof sent me! Thank you guys, it definitely worth the time spent in line at the post office 😜

@ITSecurityguard @Bitquark @_bl4de @smiegles Space broken is not a big deal. You can always replace it with %20

@lucio_89 @Bitquark @_bl4de @smiegles Just be patient, I had it with my J, X, C, Shift Key before. Right now it’s the space key :)

It fasinates me that a trillion dollar company is not competent enough to build a working keyboard. So yeah, really excited to go to the Apple store to fix my space bar and be without a laptop for a week..

@jackhcable In case someone finds an RCE, can he/she get a degree before reporting it?

Stanford’s launching a bug bounty program! Open to all students and faculty, the program kicks off this Saturday. Join us Saturday at Lathrop 282 from 10am - 4pm for a launch hackathon. Details at bounty.stanford.edu. #bugbounty

CHALLENGE: FIND THE FLAG🚩 & WIN🏆! There's a secret flag hidden in this tweet. Can you find it? 🕵️ Check the rules in the replies! 👇#HackWithIntigriti #BugBounty #CTF pic.twitter.com/0PFZNd692W

@mikispag That’s what the world deserves 😂

This is what the world needs.

@phr0nak @rohk_infosec Sounds odd but it never works with a pillow on my back

@rohk_infosec “Set Up an Alternative Appearance” id your friend ;)

As much as I like the iPhone X.. the Face ID is horrible in the mornings

@ITSecurityguard I’d send him/her a package with a picture of what you’re selling inside

And so it continues...

Love selling things on eBay. I've been chatting with this scammer for the last hour or so :D Don't fall for such a scam :)

Bugbounty tip: Want to find some internal code of companies or some sample codes of new features? Checkout with: site:repl.it intext:<companydomain>. In companydomain, if you know the internal domain it is even better. #bugbountytip