Sky Desperados

Hey I've created a Telegram channel to archive and share interesting articles on application security (AppSeX). Feel free to join t.me/APPSEXXX

Any hackers living around Malaga or Marbella? 👀 I’m moving to Spain and looking for new friends

We just released a new article on how we made more than 50,000$ in #BugBounty by doing a really cool Software Supply Chain Attack🔥 🔗 landh.tech/blog/20260521-…

@furkan0x01 @Hacker0x01 Congratulations🔥🔥🔥

Excited to announce that I am now a Brand Ambassador for @Hacker0x01 You can see our club's page at: h1.community/turkey-hackero…

@jackfriks Congrats 🔥🔥

i didn't make $50,000 last month, but $40,000 will do.

@H4cktus @amazon @Jayesh25 @itz_mg_ @_naaash_ 🔥🔥

Just wrapped up an unreal week hacking @amazon in Goa 🇮🇳🌴 Teamed up with @Jayesh25, @itz_mg_ and @_naaash_ and somehow walked away with 1st place on the leaderboard 🏆 Picked up a stack of bonuses along the way: - Pwnership: Eventwide Most Impactful Report - Dive Deep: Most Creative Bug - Most Impactful Issue on a specific asset - Most # of Critical Issues on a specific asset - Learn and Be Curious: Show and Tell (x2) Got to meet so many talented hackers I'd only ever spoken to online, and honestly that was the best part of the whole trip. Such a good crew, so many good conversations, left with a bunch of new friends 🤝 Saw some genuinely wild techniques I'd never come across before, and for some reason 90% of the craziest bugs got popped between 3-6 AM 😅 something about that hour just hits different. Huge thanks to @amazon and @Hacker0x01 for putting this together. Unique location, unique challenge, unforgettable crew.

@damian_89_ 🔥🔥

@saur1n 1000% with Claude

Is hacking an addiction?

@696e746c6f6c Hbd bro 🔥🔥

Yesterday I turned 20 years old. Time flies, but I had the best time with my bmw M3 G80 yesterday.

@alicanact60 @Hacker0x01 Congrats 🎉🔥🔥

Excited to hit the 40.000 reputation points mark on @Hacker0x01.

@hitman9264 @Bugcrowd @Hacker0x01 @rez0__ @thebinarybot @ITSecurityguard 2 Rxss 1 SSRF

@Rhynorater @nmatt0 🔥❤️

Love to see talented hackers go solo and gain the flexibility and undiluted reward they deserve. Congrats @nmatt0 youtu.be/hm1a6erafqI?si…

@saur1n @Random_Robbie github.com/assetnote/nowa… Also fuzz headers and Change http version 👀

@Random_Robbie Inception game huh? Are you hunting in h1? I just reported a SSRF that is a running springboot serv on 8080, right now all the bypasses i've thrown for actuators have been caught, you can poke around with it and split it 50/50, let me know :)

Double WAF fair play I was unable to do anything

@Sin4Yeganeh 🔥🔥🔥🔥👽

Unforgettable experience🔥

@Arl_rose 🥲❤️

After almost seven years, my journey at HackerOne comes to an end today. This has been one of the most impactful experiences of my life, and I wanted to share a bit more about the ride. It all started in 2018. I had a dream of bringing a Live Hacking Event to Argentina after seeing the magic of the community in Las Vegas. I am forever grateful for the trust placed in me back then. Someone took a chance on a random guy from Argentina and made my hire happen, and I wouldn't be where I am today without that shot. In the years since, I have been lucky enough to build things from the ground up. I was tasked with building the pentest community from scratch when we launched the product, and seeing it grow into a home for hundreds of professional pentesters has been incredible. My biggest passion project was always focused on a worldwide hacking competition. My early pitches for a regional tournament eventually evolved into building a global network of hackers instead. We started that program with just seven people. Today, I leave a network of 90 ambassadors across 45 countries. That network finally allowed me to execute the Ambassador World Cup. Watching that tournament evolve into a global phenomenon that paid out 2.4 million dollars in its latest edition was a dream come true. From the finals in my hometown of Buenos Aires to the trophy presentation in Dubai, seeing hackers find their first bugs through this program has been the highlight of my career. After 20 Live Hacking Events as an employee, traveling the world and meeting the community in person kept my passion alive for years. None of this was a solo effort. I was only able to be creative because my team was the best in the business and I was given the room to run. Thank you to the global community of hackers and the rockstars on the community team for being such a massive part of my life. I am moving on to a new chapter to do some fun stuff. More to come on that soon. Thank you for everything and stay in touch!

@alpernae 🔥🔥🔥

Pending program review i hope its accepted

@nmatt0 🔥🔥🔥

I gave AI access to my favorite hardware hacking tool! 🛠️ I love my logic analyzer. It's my go-to tool when I need to analyze digital signals on an IoT pentest target. Check it out! PS: I'm launching an IoT training platform and my first training is live! Digital Signal Analysis for Hardware Hackers training: training.brownfinesecurity.com/l/pdp/digital-… USE COUPON CODE at checkout to receive 10% OFF: IOTHACKER

@intigriti Content-Type: %0aimage/svg+xml

What cool tricks have helped you exploit some file uploads in the past? 🤠

@0xTeflon @NahamSec Nice 🔥

Thank you to @NahamSec for inviting me on his channel to talk about some amazing bugs. Go check it out here: youtu.be/uW7COsIKTXM?si…

Datr cookie theft and AI leading to Facebook account takeover ($24,000) ysamm.com/uncategorized/… Two-click Facebook account takeover via FXAuth ($30,000) ysamm.com/uncategorized/… Self-XSS in Facebook payments flow leads to account takeovers ($62,500) ysamm.com/uncategorized/…

$312,500 worth of stored/reflected XSS vulnerabilities in Meta’s Conversions API Gateway allowed Javascript code to run on any Facebook domain and millions of third-party websites. The flaw enabled zero-click Facebook account takeover and more: ysamm.com/uncategorized/…