SherlockSecure

@g33kyshivam 😂 Farming is my first backup strategy

Any alternative career advice please

@bug_vs_me In just 6months to 1yr

Is bug bounty going to be dead in the next 5 years?

@warpdotdev docs.warp.dev/agent-platform… xD

Launching something big tomorrow...

@Burp_Suite SSO? Honestly You guys need more AI integrations at this moment. Add BYOK with DAST via burp agents.

Authenticated vulnerability scans made easy… Let Burp AI handle the login flow for active scans!

@fmdz387 You're secure! Here's what your config shows: gateway: port: 18789 mode: "local" bind: "loopback" ← This is the key setting! auth: mode: "token" ← Plus token auth required bind: "loopback" means the gateway only listens on 127.0.0.1 your local machine only.

Clawd disaster incoming if this trend of hosting ClawdBot on VPS instances keeps up, along with people not reading the docs and opening ports with zero auth... I'm scared we're gonna have a massive credentials breach soon and it can be huge This is just a basic scan of instances hosting clawdbot with open gateway ports and a lot of them have 0 auth

Hey hackers 😎 Eternal Bug Bounty program offering a 50% bonus on valid Android & iOS client-side bugs 🚨 Found something High or Critical? That gets an extra 1.5x payout 👀 Campaign runs till Feb 5. Jump in 👉 hackerone.com/eternal #BugBounty #MobileSecurity @Hacker0x01

@NalinisKitchen Effects of missing type writing classes in the school days

I always wonder what these lines are for.

@bcherny @warpdotdev have this ages before. Even the Claude cowork.

YES

@nXtExploit @Burp_Suite @albinowax Yup, they need to fine tune the prompts @PortSwigger

@sherlocksecure @Burp_Suite @albinowax That would be really cool 👌. The only issue is these models often refuse to answer anything related to hacking, even with 'custom instructions' for every response, so most of the time we have to clarify it’s for CTFs or authorised testing.

@Burp_Suite @albinowax Can Burp Suite add a ‘bring your own API key’ option for Burp AI, allowing users to plug in their own Anthropic, Gemini, or other model keys?

😶‍🌫️

@im_crazy26 @HackenProof @1inch 😅👋

@sherlocksecure @HackenProof @1inch Welcome back! 😀

Is it the new normal at @HackenProof? Reported an issue in January, yet no response from Dev, but the issue is fixed, and the dev & triage team are not responding to any queries or updates. @1inch #BugBounty

@navneet_0607 @zomato @zomatocare As usual scam numbers, just ignore.

@zomato @zomatocare are you hiring volunteers for online job? Can you verify this?

@LawyerFaiz83360 @zomato @zomatocare @Cyberdost @MahaCyber1 As usual scam numbers, just ignore.

Hi @zomato @zomatocare Have ur Hr started new service ..Scammers are scamming in your names. #Cybercrime @Cyberdost @MahaCyber1

Thanks for the idea, my own automation is almost ready, deployed in aws servers and will overtake yours with report creation just requiring my approval to submit 😜. This cover all the attacker surface you have mentioned and additional few more as well. PS: I’m not gonna sell it, just wrote for own journey.

We just launched a new landing page for iScan[.]today Check it out 👇

@g33kyshivam 😂 wake up 4% loss , sleep 😴

🥲🥲🥲

@NahamSec @Google There is an option now “You can request to review the bounty decision”. For me sadly they rewarded $500 where I have access to their entire GitHub repositories and 200+ secret keys in it.

No bounty from @google for getting an RCE on google.com. I know there were some requirements for this to work and I wasn't expecting a $50,000 bounty, but wasn't expecting to "not meet the bar for a financial reward" at all. At least I can say I "RCE'd" google.

@Info_IntelX If you can add a new date column with sorting feature would be good.

💥 We added a powerful new feature to the Identity Portal: Reverse Lookup You can now search for a domain or URL and get all leaked accounts for a particular service. ➡️ Read more at blog.intelx.io/2025/01/03/new…

@Info_IntelX What’s that great feature? 💀

We are just finishing the work on one of our most powerful and important new features. It will be available to users with an Identity Portal license and in the beginning upon invitation only.